Privacy Policy (Maintenance Drone Co.)

Effective date: 7 October 2026
Company: Maintenance Drone Co. ("MDC", "we", "us", "our")
Websites / App:

• maintenancedrone.ai (the "Site")
• roofingreimagined.com (the "App" / "Roofing Reimagined")

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our Site or use our App.

1) Who we are

Roofing Reimagined is a web application operated by Maintenance Drone Co. This Privacy Policy applies to the Site and App listed above.

Contact:

• Email: info@maintenancedrone.ai
• Address: 3220 Albion Rd S., Ottawa, ON K1V 9S6, Canada

2) Information we collect

We collect information in three main ways: (a) information you provide, (b) information collected automatically, and (c) information from integrations (if you use them).

A. Information you provide

• Account info: name, email, organization name, role, password (stored hashed)
• Profile/settings: preferences and configuration you choose
• Support and communications: messages you send us, feedback, and related contact details
• Payment records: when you pay or get paid in the App, we keep the amount, currency, payment status, platform fee, the organizations involved, and Stripe identifiers for the checkout and the payment. We send the payer's email address and a description of the payment to Stripe so Stripe can complete the charge. We do not store full card numbers.
• Payout details: surveyors, contractors, and suppliers who connect Stripe give Stripe their identity and bank details. We store the Stripe account identifier and whether that account can accept charges and payouts. We do not store bank account numbers.
• Advertising billing: if you run ads, we store a Stripe customer identifier and may store a Stripe payment-method reference. The card itself stays with Stripe.

B. Information collected automatically

• Device and usage data: IP address, browser type, device identifiers, pages/screens viewed, actions taken, timestamps, referring URLs
• Cookies and similar technologies: see our Cookie Policy and your consent choices

C. Customer content (data you upload or create in the App)

Depending on how you use Roofing Reimagined, this can include:

• Photos, videos, documents, inspection/roof data, annotations, reports, and related metadata
• Property or site information you enter (e.g., addresses, building identifiers)

Note: If you upload images or files that contain personal information (e.g., people captured in photos), you are responsible for having the right to collect and share that data.

3) How we use information

We use personal information to:

• Provide and operate the Site/App (authentication, access control, core features)
• Secure the service (fraud prevention, abuse detection, auditing, incident response)
• Improve and maintain (analytics, troubleshooting, performance, testing)
• Communicate with you (service notices, support responses, product updates)
• Billing and administration (quote payments, platform fees, advertising charges, invoices, and account records)
• Legal compliance (tax, accounting, responding to lawful requests)
• Enforce terms and protect rights (disputes, policy enforcement)

4) Legal bases for processing (EEA/UK)

Where EU/UK laws apply (GDPR/UK GDPR), we rely on:

• Contract: to provide the App and Site you request
• Legitimate interests: to secure, improve, and operate our services (balanced against your rights)
• Consent: for optional cookies/trackers and certain marketing communications where required
• Legal obligation: to meet legal and regulatory requirements

5) How we share information

We may share personal information with:

• Service providers / processors that help us run the business (hosting, analytics, customer support tools, email delivery, logging/monitoring). They may access information only to perform services for us.
• Stripe, to process card payments, pay organizations, and bill advertising. Stripe receives the payer's email, the amount, and a description of what is being paid. Stripe's use of that information is described in the Stripe Privacy Policy. On a quote payment, the charge is created on the seller's Stripe account, so that organization can see the payment in Stripe.
• Business transfers (merger, acquisition, financing, or sale of assets)—information may be transferred as part of that transaction.
• Legal and safety where required: to comply with law, respond to lawful requests, protect our users, investigate fraud/security issues, or protect rights and property.

We do not sell personal information in the ordinary sense. If "selling" has a specific legal meaning in your region (e.g., some US state privacy laws), we aim to provide required disclosures and opt-out mechanisms as applicable.

6) Cookies and tracking

We use cookies and similar technologies. You can manage your preferences through our cookie consent tool and your browser settings. See our Cookie Policy for details.

7) International transfers

We may store and process information in countries other than where you live. Where required (e.g., for EEA/UK users), we use appropriate safeguards for international transfers, such as Standard Contractual Clauses or other lawful mechanisms.

8) Data retention

We keep personal information only as long as necessary for the purposes described above, including:

• maintaining your account and providing services
• meeting legal, accounting, and compliance obligations
• resolving disputes and enforcing agreements

When information is no longer needed, we delete or anonymize it, or store it securely until deletion is possible.

9) Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is 100% secure, but we work to prevent unauthorized access, disclosure, alteration, or destruction.

10) Your privacy rights

Depending on your location, you may have rights such as:

• Access to your personal information
• Correction of inaccurate information
• Deletion (where applicable)
• Data portability
• Restrict or object to certain processing
• Withdraw consent (where processing is based on consent)
• Opt out of certain marketing communications

How to exercise rights: email us at info@maintenancedrone.ai. We may verify your identity before fulfilling requests.

EEA/UK users

You also have the right to lodge a complaint with your local data protection authority.

US state privacy laws (where applicable)

You may have rights to know, access, delete, correct, and opt out of certain processing. We will honor applicable rights based on your state of residence.

11) Children's privacy

Our Site and App are not intended for children, and we do not knowingly collect personal information from children under the age required by applicable law. If you believe a child has provided personal information, contact us so we can take appropriate action.

12) Third-party links and services

The Site/App may link to third-party websites or services. Their privacy practices are governed by their own policies, not ours.

13) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Site/App and update the effective date above. If changes are material, we may provide additional notice as required by law.

14) Customer content and roles (Controller / Processor)

When a business customer uses Roofing Reimagined to upload or manage data ("Customer Content"), that customer may be the data controller and MDC may act as a data processor/service provider for that Customer Content. In those cases, we process Customer Content according to the customer's instructions and any applicable agreement (such as a Data Processing Addendum). If you have questions about Customer Content, please contact the business customer directly.