Privacy Policy

1. Introduction

iSmart A.I ("iSmart", "we", "us", or "our") operates the iSmart A.I platform (the "Service"), an AI-powered roofing platform used by contractors to capture, qualify, and serve homeowner leads. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the Service or interact with a contractor that uses our Service.

2. Information we collect

We collect the following categories of information:

• Contact information: name, email address, phone number, and mailing address.
• Property information: address, satellite imagery of the property, roof measurements, materials and color preferences.
• Project information: insurance carrier, claim number, date of loss, financing range, and project totals.
• Account information: for contractors — company name, license, billing details, Stripe account identifiers.
• Usage data: device type, browser, IP address, pages visited, funnel events, and session identifiers.
• Cookies & similar technologies: used for authentication, analytics, and (when contractors enable them) marketing pixels such as Google Analytics, Google Tag Manager and Meta Pixel.

3. How we use information

• To provide, maintain, and improve the Service.
• To generate roof estimates, proposals, and appointment confirmations.
• To send SMS text messages to homeowners who opt in, including inspection scheduling, quote details, appointment reminders, project updates, and customer service replies. Message & data rates may apply; message frequency varies; reply STOP to opt out or HELP for help.
• To process payments and deposits via Stripe.
• To send transactional emails (proposals, confirmations, receipts).
• To analyze usage and improve conversion across the homeowner journey.
• To comply with legal obligations and enforce our terms.

4. How we share information

We share information only as described below:

• With contractors: when a homeowner submits a form through a contractor's portal, that contractor receives the contact and project information needed to respond to the homeowner's request.
• Service providers: Supabase (hosting & database), Stripe (payments), Resend (email), Google Maps & Solar APIs (address & roof data), and AI providers used to power chat and quoting.
• Legal: when required by law, subpoena, or to protect rights, safety, or property.
• Business transfers: in connection with a merger, acquisition, or sale of assets.

We do not sell personal information.

We do not sell, rent, or share SMS consent or phone numbers for third-party marketing or affiliate lead generation.

Google user data (Google Calendar)

Contractors may choose to connect their Google Calendar to iSmart AI. When they do, we request access to Google Calendar events solely to create, update, and remove the inspection appointments and demo bookings scheduled through iSmart AI, and to invite the homeowner to those appointments.

• We do not read, store, or analyze unrelated events on your calendar.
• We store only the connection tokens needed to keep the calendar sync working, and the IDs of events iSmart AI created.
• We do not sell Google user data, use it for advertising, or use it to train AI models.
• We do not share Google user data with third parties except as needed to provide this feature, comply with law, or with your consent.
• You can disconnect at any time in Settings, or revoke access at myaccount.google.com/permissions. On disconnect we delete the stored tokens.

iSmart AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data retention

We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce agreements. Lead and project records are retained by the contractor of record; you may request deletion at any time by contacting us.

6. Your rights

Depending on your jurisdiction (including California — CCPA/CPRA, EU/UK — GDPR), you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Receive a portable copy of your data.
• Opt out of SMS by replying STOP to any message, or request help by replying HELP.
• Opt out of marketing communications at any time.

To exercise any of these rights, email info@ismart-ai.app.

7. Security

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest, role-based access control, row-level security policies, and audited third-party processors. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International transfers

Our servers are operated in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the U.S.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date.

11. Contact us

If you have questions about this Privacy Policy or our practices, contact us at:

iSmart A.I
Email: info@ismart-ai.app