Data Deletion Policy (Maintenance Drone Co.)

Effective date: 7 October 2026
Company: Maintenance Drone Co. ("MDC", "we", "us", "our")
Services:

• maintenancedrone.ai (the "Site")
• roofingreimagined.com (the "App" / "Roofing Reimagined")

This Data Deletion Policy explains how deletion requests work for the Roofing Reimagined App and related services, including what we can delete, what we may retain, and how long backups may persist.

1) Scope and definitions

Account Data includes information tied to user accounts and organizations (e.g., name, email, phone, login credentials, roles, preferences, support messages).

Survey Data includes drone survey photos and related files, derived artifacts (if any), and database records/metadata associated with a roof survey (e.g., project identifiers, notes, measurements, outputs).

Client vs Contractor

• Client: the person or organization whose roof/property is surveyed.
• Contractor: the person or organization that performs the work and typically manages the relationship with the Client in the App.

2) Our deletion principles

We will delete or de-identify personal information when it is no longer needed for the purposes it was collected, and we maintain procedures for destruction/disposal consistent with privacy expectations.

Where EU/UK privacy laws apply, individuals may have rights to request erasure in certain circumstances, subject to exceptions.

When full deletion is impractical in the short term (for example, due to backups), we aim to remove active access, stop use, and ensure the data is removed as systems cycle through retention periods.

3) What you can delete directly (self-service)

End users can delete their own account from within the App.

When you delete your account, we will delete or de-identify Account Data associated with that user, except where limited retention is required for security, legal compliance, or dispute resolution (see Section 6).

4) What requires a request (assisted deletion)

Because Survey Data can be large and interconnected, deletion of Survey Data is handled by request.

You may request:

• Deletion of a specific survey/project, and/or
• Deletion or de-identification of Client-related personal information associated with a survey, and/or
• Deletion of an organization/workspace (where applicable)

How to request: email info@maintenancedrone.ai from the email address deletion/privacy email] from the email address associated with the account, and include:

• account email and organization name
• the survey/project ID(s) or enough details for us to locate the data
• what you want deleted vs de-identified

We may ask for verification or admin authorization (especially when a Contractor requests deletion that affects a Client project).

5) How we delete Survey Data

Survey Data is stored in AWS object storage (e.g., S3) and an AWS database. When we approve a Survey Data deletion request, we typically:

• Delete associated database rows/records for the survey/project (or de-identify them if requested/appropriate)
• Delete associated objects/files in storage that can be identified by survey/project identifiers
• Remove access references so deleted content is not retrievable through the App

Because roofs are typically not "personal data" by default but may incidentally capture personal information, we treat deletion requests seriously even when photos are intended to be roof-only.

6) What we may retain (limited, with purpose)

Even after deletion, we may retain limited information when necessary for:

• security and fraud prevention (e.g., logs necessary to protect the service)
• legal compliance, including tax and accounting records for payments (the amount, currency, status, organizations involved, and Stripe payment identifiers)
• establishing, exercising, or defending legal claims
• maintaining integrity of audit/security records

Where we retain data, we do so in a minimized form and restrict access.

Stripe keeps its own copy of payment and payout records under the Stripe Privacy Policy. Deleting an account in the App does not delete those Stripe records.

7) Backups and deletion timing

We maintain system backups for up to 30 days.

Deleted data may persist in backups until those backups expire or are overwritten.

During that backup retention window, deleted data is not used for normal operations and is not restored except as needed for disaster recovery or security incidents.

If a restore occurs, we will take reasonable steps to re-apply deletions where feasible.

(For EU/UK contexts, erasure is required in certain circumstances "without undue delay," but the right is not absolute and must be implemented practically alongside security and resilience needs.)

8) De-identification option (when preferred or sufficient)

If you request it (or if it is operationally appropriate), we may de-identify certain records instead of deleting the entire dataset—for example:

• removing names, emails, phone numbers, and direct identifiers from records
• detaching survey artifacts from identifiable account profiles
• retaining non-identifying technical/aggregate metrics

De-identification is not used as a substitute when full deletion is required by law or contract, but it is often a practical option for large survey datasets.

9) Timeframes

We aim to respond to deletion requests within a reasonable time and may require additional time depending on:

• complexity/volume of Survey Data
• number of surveys involved
• verification and authorization needs

Where EU/UK GDPR timelines apply, we will handle requests within applicable statutory time limits, subject to permitted extensions.

10) If you are a Client (roof owner) but not an account holder

In many cases, the Contractor manages the survey project in the App. If you are a Client and want deletion of a survey:

• contact the Contractor first (they may control the project/workspace), or
• contact us directly at info@maintenancedrone.ai with enough information for us to locate the relevant survey, and we'll explain what we can do and what verification we need.

11) Updates to this policy

We may update this Data Deletion Policy from time to time. We will post changes on the Site/App and update the effective date above.

12) Contact