Legal

Privacy Policy

Effective June 4, 2026 · Scarpati Enterprises Inc. (Colorado, USA)

This Privacy Policy explains how Scarpati Enterprises Inc. ("PeakPro," "we," "us") collects, uses, shares, and protects information when you use the PeakPro platform and websites (the "Service"). By using the Service you agree to this Policy.

1. Who is the data controller?

PeakPro is multi-tenant software for roofing companies. Roles depend on the data:

  • Your business data (customers, work orders, photos, invoices, payroll): your company is the data controller and PeakPro acts as a data processor on your behalf.
  • Platform data (your signup, account, and billing information): PeakPro is the data controller.

2. What data we collect

2.1 Account data

Email, name, phone number, hashed password, company, and role.

2.2 Business data you put into PeakPro

Customers and properties, work orders, job photos, proposals and invoices, payroll and crew records, and related notes.

2.3 Integration data (only with your explicit consent)

When you connect an integration, we access only the data needed to provide that feature:

  • Google (Gmail / Calendar) — send email and sync schedule
  • Microsoft 365 (Outlook / Calendar) — send email and sync schedule
  • QuickBooks Online — accounting export/sync
  • EagleView — aerial roof measurement reports
  • Stripe — payments and subscription billing
  • Twilio — SMS messaging

2.4 Telemetry

Page views, IP address, browser/user agent, and—if a crew member opts in—crew GPS location while on a scheduled job.

3. Google API Services User Data Policy — Limited Use

PeakPro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • Data accessed via Google APIs is used only to provide and improve user-facing features within PeakPro.
  • We do not transfer Google data to third parties except when required to provide the features (e.g., sending emails through Gmail API).
  • We do not use Google data for advertising.
  • We do not allow humans to read Google data unless we obtain affirmative consent, or it is required for security investigation, legal compliance, or to provide support requested by the user.

4. How we use the data

  • To provide, maintain, and improve the Service.
  • To detect, prevent, and investigate fraud, abuse, and security incidents.
  • To power AI features you choose to use (see Section 5).
  • To communicate with you about your account, billing, and support.

5. AI and machine learning

Some features use AI models from Anthropic (Claude) and Google (Gemini). These providers do not train their models on your data, and data sent to them is deleted from their systems within approximately 30 days. AI output is generated and may be inaccurate; you should review it before acting on it.

6. How we share data

We share data only with the integrations you authorize, with the subprocessors that help us run the Service, and where required by law. We do not sell your data. Our subprocessors include:

  • Hostinger — hosting and infrastructure
  • SendGrid — transactional email delivery
  • Anthropic and Google — AI processing
  • Stripe — payment and subscription processing
  • Twilio — SMS messaging

7. Data retention

  • Active account data: retained while your account is active.
  • Audit logs: 7 years.
  • AI run logs: 90 days.
  • Backups: 30-day rolling.
  • After account deletion: full purge within 90 days.

8. Your rights (GDPR / CCPA)

You may request to access, correct, delete, or export your data, and you may revoke any connected integration at any time. To exercise these rights, contact support@peakproapp.com.

9. Security

We protect data with TLS in transit, bcrypt password hashing, optional two-factor authentication, HMAC-verified webhooks, per-tenant data isolation, and encryption of stored OAuth tokens. No system is perfectly secure, but we work to protect your information.

10. Children

The Service is intended for businesses and is not directed to anyone under 16. We do not knowingly collect data from children.

11. International transfers

The Service is operated and data is processed in the United States. If you access it from elsewhere, you consent to processing in the U.S.

12. Cookies

We use only session and CSRF-protection cookies required for the Service to function. We do not use advertising or cross-site tracking cookies.

13. Changes

We may update this Policy. For material changes we will provide at least 30 days' notice to account admins before they take effect.

14. Contact

Scarpati Enterprises Inc.
Colorado, USA
support@peakproapp.com