Web report
privacy.
Local drafts stay in this browser unless you choose to send or upload them. Email delivery, optional manual cloud save, and the optional writing assistant each have their own sending action. When you request an emailed report, the report and your contact information are sent to our service. BRT NYC receives a new-inquiry notification. Marketing is a separate, optional choice.
Who operates the tool
Roof Report Studio is operated by Building and Restoration Technology of New York (BRT NYC). For privacy questions or a deletion request, email [email protected]. This page covers the new web report workflow. The archived mobile-app privacy notice describes the older phone app and does not describe this web tool.
Drafts and files in your browser
The tool saves report drafts in your browser’s local database, including your notes, property and client details, observations, core-cut records, logo, photos, and any contact information you enter. Drafts do not sync automatically between devices. The optional Cloud save tool stores a copy only when you sign in and explicitly choose to upload it. Browsers may keep separate storage for the same tool when opened directly and when embedded on a different website.
Drafts remain until you clear this site’s browser data, or your browser removes them. Archiving a report hides it from the active workspace; it does not delete it. Exported backups and downloaded or printed reports are files you control. Keep those files private and delete them when no longer needed.
Optional cloud account and manual backups
Cloud save uses a one-time code sent to your email address. We store your email, account creation time, hashed sign-in code and session identifiers. Sign-in uses a secure, HttpOnly, same-site cookie that expires after seven days; signing out revokes that session. A sign-in request does not upload reports or enroll you in marketing.
When you check the upload consent box and choose Save to cloud, we store the company profile and logo, reports and photos, templates, estimates, contacts, measurements, and property records included in your saved workspace. The current cloud limit is 2 MB. The copy is scoped to your account on this website and is not a public page. Authorized administrators can access service data for operation and support. Keep copies of information you need independently of this service.
Cloud save and restore are manual. A newer cloud revision cannot be silently overwritten by a stale save. Restoring adds new local record copies and may create duplicates if repeated; the company profile changes only if you separately select that option. Before an import, the browser retains one pre-restore recovery backup in local storage, available from Backups. The recovery copy is replaced by the next import and is removed if this site’s browser data is cleared. It does not automatically undo an import.
You can delete your current cloud copy from Cloud save; local drafts remain. Hosting recovery backups may retain deleted data temporarily. Contact us to request deletion of the account itself. Embedded tools ask you to open the site directly for account features.
Optional aerial measurements
When aerial lookup is enabled, it requires a signed-in account. No address is sent just by typing. After you check the provider notice and click Search address, the website sends that address to the US Census geocoder. Clicking a matched location, Load coordinates, or the map in centre mode sends the selected coordinates and map extent to the public imagery provider you selected: NYS ITS Geospatial Services or USGS The National Map. These providers may log requests under their own policies. Your email, report, company logo, inspection notes, and pin labels are not sent to these map services.
Address results are approximate street-range locations, and imagery is not necessarily current. You must locate the intended roof and review measurements yourself. Saved aerial records contain the image, geographic outline, pin notes and coordinates, provider attribution, and retrieval time in this browser. These records are included in workspace backups and in a cloud copy only when you explicitly save that workspace to the cloud. Using an aerial measurement in a report adds an annotated image, attribution and measurement notes; these are transmitted with the report if you request email delivery. Lookup abuse limits store salted account identifiers and hourly counters for up to two hours, plus cleanup time. The service does not separately store address lookup requests or imagery responses on the server.
Optional voice notes
In supported browsers, Quick notes can capture dictation only after you check the speech-processing notice and click Start. Your browser may process microphone audio through its own online speech-recognition service. Roof Report Studio does not store audio. Recording is limited to 45 seconds and stops when you leave the tool. You review the transcript and explicitly add it to your notes; typed and pasted notes remain available when speech recognition is unsupported or the tool is embedded.
Optional writing assistant
When available, the writing assistant requires a signed-in account and a separate consent checkbox. It sends only the displayed recorded summary notes to Cloudflare Workers AI for a wording suggestion; it does not send photos or the rest of the report. Generating a suggestion does not change the report. You must review and apply it yourself. The service does not log or persist the submitted notes or model response in its AI quota database. Quota records contain a random request ID, a salted account identifier, and timing information. Cloudflare may process operational metadata under its own policies. AI can change meaning; this is not an inspection or engineering service.
Optional company inspection request pages
When this feature is enabled, a signed-in account can choose to publish a public page containing its company title, service area, and introduction. Publishing requires a separate consent checkbox. The random page link can be shared with clients; it does not expose the account email or grant access to the private inbox. A service area does not represent an office address. Disabling the page removes public access and stops new requests while retaining existing inbox requests until expiry.
Submitting the public form requires consent to share your name, email, optional phone, property name and address, preferred date, and request text with the named company and BRT NYC, which operates this service. We also store the consent version and time, a submission reference, and status updates. The receiving account is selected from its verified sign-in record; the sender cannot override it. Requests are saved to the company’s private inbox. This feature does not send automatic email notifications or confirm appointments, and submission does not enroll you in marketing.
If you are signed in, you may separately choose to link a request to your account using your verified email. “Requests I sent” then shows the submitted details, receiving company, and status. Private company notes are visible in the receiving account’s inbox and to authorized service administrators, not to the sender. Anonymous requests are not automatically linked to accounts by matching an email address. Company request pages and inboxes are scoped to this website.
Inspection requests, contact and property details, company notes, and consent records are scheduled for removal after 180 days. Expired requests are hidden from both account views before cleanup runs. Public company pages remain visible until the owner disables the page. Disabling hides the page but retains its settings with the account; contact BRT NYC to request account deletion. Contact BRT NYC for access or deletion requests. Cloudflare Turnstile protects public submissions, including verification of the requesting IP address. Short-lived abuse limits store salted identifiers.
When you request a report by email
Submitting a report sends the completed report, delivery email, inspector name, company, property name, source of the submission, and your consent choices to our service. The report may include the property address, client details, notes, uploaded logo, and photos you chose to include. Use information and images you are authorized to share.
We use the submission to generate your PDF, deliver it to the email you provide, retry delivery when appropriate, and respond to support requests. The email provider processes the recipient address, message, and report attachment to deliver it.
BRT NYC receives a separate inquiry notification containing your name, company, email, project name, submission source, consent choices, and a reference number. That notification does not attach the report. Authorized service administrators can access the stored submission for operation and support.
Follow-up and marketing
The report request is also a business inquiry to BRT NYC. We may respond about your report or project. The optional marketing checkbox records whether you want roof product updates and project support offers from BRT NYC. It is unchecked by default and is not required to receive a report. This tool does not automatically send marketing campaigns. You can change your preference by emailing [email protected].
Service retention
| Information | Retention in the report service |
|---|---|
| Submitted report content, logo, and photos | Scheduled for removal after 90 days. |
| Submission contact details, project name, consent record, and delivery status | Scheduled for removal after 365 days. |
| Cloud account email and current cloud copy | Account email remains until account deletion is requested and verified. The cloud copy remains until replaced or deleted. |
| Cloud sign-in codes and sessions | Codes expire after 10 minutes and sessions after 7 days; expired database records are removed by scheduled cleanup. |
| Rate-limit identifiers | Report identifiers expire after two hours. Account request and daily-budget buckets expire within two days and are removed by scheduled cleanup. |
| Inspection requests, contact/property details, private notes, and consent records | Hidden after 180 days and removed by scheduled cleanup, including when new requests are disabled. |
| Public company request page settings | Stored with the account. Disabling a page hides it publicly; it retains settings for the owner. |
| AI quota identifiers | Records older than two prior UTC days are removed on a subsequent AI request. |
Scheduled removal takes effect when the next cleanup runs. These periods apply to the report service database. Copies already delivered to email inboxes, downloaded backups, hosting logs, and email-provider records are separate. Email us to request removal of information held by BRT NYC; include your delivery address and report reference if available. We may ask for information to verify that the request concerns your data.
Hosting and abuse prevention
Cloudflare hosts and protects the web service. Ordinary requests expose technical information such as IP address, browser details, request time, and requested URL to the hosting service. The delivery security check uses Cloudflare Turnstile; its verification includes your IP address. Our short-lived rate limits use hashed identifiers rather than storing a raw IP address in the submission record.
Security services may use technical storage needed for protection. This report tool does not add advertising trackers. If you use the tool inside another website, that surrounding website may have its own cookies, analytics, and privacy policy. See Cloudflare’s privacy policy for its handling of service data.
Your logo and report content
Your uploaded logo is used to brand the report you requested. The tool does not publish your report as a public web page. A report emailed to you can be forwarded by anyone who receives it, so check the delivery address and the contents before submitting.
Questions and changes
Contact [email protected] for access, correction, deletion, or email-preference requests. If the web workflow changes, we will update this page and its date.