Privacy
Policy

Who uses ShowWright

ShowWright is a business tool. A roofing or home-improvement company signs its organization up, then its sales reps use the app to build and present sales decks to homeowners on-site — typically on an iPad, at a kitchen table. Two kinds of people’s information passes through it:

• Reps and staff — the people who sign in to ShowWright. They have an account.
• Homeowners and prospects — the people a rep is selling to. They never create an account or sign in. Information about them and their property is entered by the rep, or generated when they open a deck a rep sent them.

What we collect

Account information (reps and staff). Name, work email, a password (we store only a bcrypt hash of it, never the password itself), your role (rep/manager/designer/admin), and the organization you belong to. Created either when your company signs up on the web, or when an admin on your team adds you.

Property and customer information (entered by the rep). When a rep starts a presentation for a job, they enter the homeowner’s address, name, and any notes, plus measurements (roof square footage, window openings, and so on) captured on-site or pulled from your company’s CRM record if you have one connected.

Photos of the property. Reps upload or take photos of the job site — including photos of the customer’s home — through the camera or file picker. These are stored in our cloud file storage (Vercel Blob) and linked to that property record.

Photos you import from Google Drive. Instead of uploading from the device, a rep can pick photos from their own Google Drive. We use Google’s official picker and request only the drive.file permission — the narrowest scope Google offers. That means we can only ever see the specific files you select in that picker; the rest of your Drive stays unreachable to us. Only image files are imported (anything else in the folder is skipped), the imported copy is stored alongside your other property photos, and we never store your Google access token — it is used for that one import and discarded with the request.

Roof and solar data (Google Maps Platform). When a rep runs the roof or solar check for a property, the property’s address is sent to Google’s Geocoding API to find its location, and that location is sent to Google’s Solar API to retrieve the roof’s shape, sun exposure and aerial imagery. The homeowner’s name is not sent. Under Google’s terms we may keep the Solar API results for up to 30 days: results older than that are not shown or reused, and are deleted when the property is next looked up. Google’s own handling of these requests is governed by the Google Maps Platform terms.

AI processing of your photos. If your plan includes the AI tools, two things can happen to a property photo — but only after the person using the app has allowed it. Before anything is sent to an AI provider, the app explains what is sent and to whom and asks for permission; nothing is sent to an AI provider until that person taps “Allow AI.” Each person can turn this off at any time under Account › AI features, which stops anything further being sent.

• Damage triage: the photo is sent to Google’s Gemini API to flag visible roof or exterior damage (missing shingles, hail bruising) and write a one-sentence, homeowner-friendly summary. Only the photo itself is sent — not the customer’s name or address.
• Color visualization: a photo marked as the “front of house” shot is sent to Google’s Gemini API to generate an edited version showing a different roof color or material, so a homeowner can see options. Again, only the photo and the product/color chosen is sent.

In both cases the photo is sent to Google to perform that specific task and the result is returned to us. Google’s own handling of images submitted to its API — including how long it keeps them — is governed by Google’s Gemini API terms, not by this policy. We do not send Google the customer’s name, address, or any other account information alongside the photo.

AI deck-writing assistance. When a rep uses the AI design assistant to draft or edit deck content, the text involved (the rep’s instructions and the deck’s text) is sent to one of these providers, depending on configuration: OpenRouter (which routes the request on to Google’s Gemini model), Google’s Gemini API directly, or Anthropic’s Claude. This is text content for building the presentation, not account credentials.

Presentation and viewing activity. While a rep is presenting a deck in person, the app records session data (when the presentation started and ended, how long it ran, basic device info) and per-slide analytics (which slide was shown, how long it was on screen, which interactive elements were tapped). This is how reps and their managers see what resonated with a homeowner.

Shared-deck activity. If a rep emails a homeowner a link to a deck instead of presenting in person, we log each time that link is opened: how far the homeowner paged through it, whether they watched an intro video, what they interacted with, and their browser’s user-agent string. This lets the rep know when a prospect has opened what was sent.

Session recording on shared decks (Microsoft Clarity). The web page a homeowner opens from a shared link uses Microsoft Clarity to record how the page is used — clicks, scrolling and page movement, shown to us as session replays and heatmaps — so we can see how prospects go through a presentation and improve it. The recording is tagged with that link’s identifier. Clarity runs only on that shared web page, not in the app reps use to present in person. Microsoft’s handling of this data is governed by the Microsoft Privacy Statement.

Support requests. If you file a bug report, question, or feature request through the in-app support form, we receive what you typed, up to three file attachments you choose to add, and — automatically from your session, not typed by you — your name and organization, so we know who’s asking.

Billing information (organizations, not individual reps). If your organization signs up for a paid plan, your company name, billing email, and payment details are handled by our billing system. Card payments are processed by Stripe: you enter your card on Stripe’s own checkout page, so ShowWright never receives or stores your card number. What we keep on our side is your company name, billing email, the number of seats, and a reference to your subscription — not card details.

What we do not do

• We do not sell your personal information.
• We do not use your data for third-party advertising, and there is no advertising SDK in the app.
• We do not require or use any social-login or tracking identifiers — no Facebook or Google sign-in, no advertising ID.
• Homeowners are never asked to create an account, and are never tracked outside the specific deck a rep shared with them.

Who we share it with

Only the vendors named above, each processing data solely to provide their part of the service: Google (Gemini AI processing, Maps Platform geocoding and Solar API for the roof check, and Drive file picking if you use that feature), Microsoft (Clarity session recording on shared decks), OpenRouter (AI text-generation routing), Anthropic (AI text generation, when configured), our hosting, database and storage providers (Vercel and its underlying Postgres database), and Stripe (payment processing). If your organization uses our CRM integration, property and deal data you have already put in that CRM is displayed inside ShowWright — that isn’t a new disclosure, it’s the same data you already control there.

We may also disclose information if required by law, or to protect the rights, property, or safety of Proofwright, our customers, or the public.

How long we keep it

We keep your organization’s data for as long as the account is active, plus a reasonable period after cancellation so the account can be restored if you come back or change your mind. If you want your data deleted sooner, email hello@proofwright.ai and we will remove it.

One exception, and it is deliberate. When a solar savings projection is shown to a homeowner, we keep a record of the figures and the assumptions behind it for seven years — for longer than the account, if the account closes sooner. That record exists so the contractor can show exactly what was presented if it is ever questioned, which protects the homeowner as much as the contractor. It holds the numbers and the assumptions, not photographs of the property.

Your choices

• Delete your account in the app: any signed-in person can go to Account › Delete account (reps: the Account button on the Presentations screen). Deleting removes your login, name and email and signs you out on every device. Decks, properties, photos and presentation history you worked on belong to your company, so they stay with it and are shown as “Deleted user.” If you are your organization’s only admin, you must make someone else an admin first; if you are its only remaining member, you can instead delete the whole organization and everything in it.
• AI features: each person chooses whether their photos and deck text may be sent to an AI provider, and can change that any time under Account › AI features.
• Reps and staff: you can update your password in the app. To correct or export your account or property data, or for any deletion you can’t do in the app, email hello@proofwright.ai.
• Homeowners: if you were shown a presentation or sent a share link and want the associated record deleted, email hello@proofwright.ai with the address or the sending company’s name, and we’ll locate and remove it.

Push notifications

As of this policy’s last-updated date, ShowWright does not send push notifications — verified against the current codebase: no notification-permission or push-registration code exists today, so no notification data is collected or sent. This section must be rewritten before that feature ships.

Children's privacy

ShowWright is a business tool for sales professionals. It is not directed at, nor knowingly used to collect information from, children under 13.

Changes to this policy

If we materially change what we collect or how we use it, we’ll update this page and change the “last updated” date above.

Contact

Proofwright AI LLC
hello@proofwright.ai