CHerRoof Privacy Policy Document ID: CHERROOF-PRIVACY Version: 1.0 Effective date: August 9, 2026 Approval status: Owner-approved interim version; not reviewed by legal counsel Provider: Cherrera Sales LLC, doing business as CHerRoof Mailing address: 300 Lakefront Dr, Apt. 5208, Little Elm, TX 75068 Privacy email: privacy@cherroof.com Support email: support@cherroof.com 1. Scope This Privacy Policy explains how CHerRoof collects, uses, discloses, protects, retains, and deletes personal information through its mobile and web applications and related support activities. 2. Information CHerRoof Collects CHerRoof may collect: • Account information, including name, email address, phone number, authentication status, account status, roles, permissions, and legal-document acceptance records. • Property and roof information, including address, nickname, roof profile, roof-area diagrams, access claims, memberships, duplicate-address cases, and dispute records. • Inspection and report information, including requests, assignment history, observations, findings, recommendations, review decisions, published report versions, repair or replacement information, and audit history. • Private evidence, including selected or captured photographs, permitted documents, upload status, timestamps, dimensions, file size, and checksums. Uploaded photographic copies are designed to exclude source EXIF and embedded GPS metadata. • Device and service information reasonably needed for authentication, security, diagnostics, reliability, and support, such as session information, app version, platform information, network or error events, and security logs. • Communications and support information provided when a user contacts CHerRoof. CHerRoof does not intentionally place names, street addresses, email addresses, or phone numbers in evidence-object paths. Evidence Storage is private and access-controlled. 3. How Information Is Used CHerRoof uses information to create and secure accounts; verify authorization; operate property, inspection, evidence, review, publication, repair, replacement, correction, and history workflows; preserve immutable records; prevent fraud and abuse; provide support; maintain reliability; enforce the Terms; and comply with law. The approved MVP does not authorize third-party advertising, targeted advertising, sale of personal data, or unrelated marketing use. CHerRoof does not use storm exposure as proof of damage or insurance coverage. 4. How Information Is Disclosed Information may be disclosed to currently authorized users for the applicable property or work assignment; to granularly authorized CHerRoof Operations personnel; to service providers such as Supabase, Expo/EAS, Squarespace, and applicable app stores to operate or distribute the service; when required by law or legal process; to protect rights, safety, and security; or as part of a business transfer subject to applicable law and notice. CHerRoof does not provide public report links or public evidence access in the Phase 1 MVP. 5. Security and Access Controls CHerRoof uses authentication, database row-level security, granular permissions, private evidence Storage, controlled server operations, transactional lifecycle changes, and immutable audit records. No security measure can guarantee absolute security. Users should protect their credentials and report suspected unauthorized access to support@cherroof.com. 6. Retention Schedule The following owner-approved interim schedule applies unless a legal hold or applicable law requires a different result: • Active account, profile, role, and membership data: while the account is active and needed to provide the service. • Account-deletion request and action ledger: 24 months after completion. • Deletion-related support communications: 24 months after closure. • Security and access logs: 12 months after creation. • Legal-document consent evidence: seven years after account closure. • Published roof reports, report versions, corrections, roof-history events, review actions, and registered supporting evidence: while the property history remains active and for seven years after that history is retired. • Unpublished drafts and unregistered evidence: deleted when no longer needed for the active workflow or during approved account-deletion processing. • Legal-hold material: until the hold is released, followed by the ordinary schedule for that record class. Backups and disaster-recovery copies may age out on their ordinary protected rotation. They are not restored for ordinary use after deletion and remain subject to access controls. 7. Account Deletion Every account holder may initiate deletion in the app from Account → Delete account or through https://cherroof.com/account-deletion. A requester without access to the account email may contact privacy@cherroof.com for manual identity review. Never send passwords, recovery codes, access tokens, or full identification documents through ordinary email. CHerRoof verifies intent, acknowledges the request, and ordinarily responds within 45 days. When reasonably necessary, CHerRoof may extend the response period once by an additional 45 days and explain the reason. Processing revokes sessions, roles, memberships, and future access; deletes or irreversibly pseudonymizes the authentication identity; removes unnecessary direct profile identifiers; and deletes eligible unpublished or unregistered material. Published roof history and registered evidence may remain in pseudonymized form under the schedule above. The deleted person is represented only by a stable internal deleted-account subject. CHerRoof does not mark a request completed until Auth, database, private Storage, and retained-record results are reconciled. A user may cancel before processing starts and may appeal a denial or partial result. 8. Privacy Choices and State Rights Depending on applicable law and location, a user may request access, correction, deletion, portability, or an opt-out of covered processing. Requests may be initiated in the app, at https://cherroof.com/account-deletion for deletion, or through privacy@cherroof.com. CHerRoof does not require a user to create a new account to exercise a privacy right. If CHerRoof declines or only partially fulfills a request, it will provide a reason and appeal instructions. Appeals are reviewed by a different authorized operator and receive a written response within 60 days. If a Texas appeal is denied, the response will include the Texas Attorney General consumer-complaint route. Authorized-agent requests receive manual identity and authority review. 9. Children's Privacy CHerRoof accounts are intended only for people who are at least 18 years old. CHerRoof does not knowingly create accounts for children or intentionally collect personal information from children. Contact privacy@cherroof.com if information may have been provided by a child. 10. United States Use The Phase 1 MVP supports United States property addresses. Rights and exceptions may differ by state. CHerRoof will not discriminate against a user for exercising an applicable privacy right. 11. Changes to This Policy Material changes receive a new document version and effective date. CHerRoof will provide notice and request renewed acceptance when required. Historical consent evidence is retained under the schedule above. 12. Contact Privacy questions or requests may be sent to privacy@cherroof.com. General support is available at support@cherroof.com. Mail may be sent to CHerRoof, 300 Lakefront Dr, Apt. 5208, Little Elm, TX 75068.