Privacy Policy

1. Who this policy covers

This Privacy Policy explains how Walkable (“Walkable”, “we”, “us”) collects, uses, shares and protects personal information when you visit getwalkable.com or quickquote.getwalkable.com, create or use a Walkable workspace or a Quick Quote account, use a contractor’s homeowner portal or instant quote page, sign a document, pay an invoice, or communicate with us. It applies together with our Terms of Service, and, for subscribing companies, the SaaS Agreement and Data Processing Agreement.

Walkable is business software for roofing and exterior contractors. Much of the personal information in the Service is about a contractor’s clients and is entered by the contractor. Section 2 explains who is responsible for what.

2. Two roles: controller and processor

Information we control. When a company creates a workspace, its account details, billing records, support correspondence and usage of the Service are collected by Walkable for our own purposes. For this information Walkable is the “controller” (or “business” under California law) and this policy describes our practices in full.

Information we process for contractors. Names, property addresses, phone numbers, email addresses, insurance claim details, documents, photos, messages, signatures, appointments, invoices and payment records about a contractor’s clients and prospects are entered into the Service by the contractor or by its clients at the contractor’s invitation. For this information the contractor is the controller and Walkable is a “processor” (or “service provider”) acting on the contractor’s instructions under the Data Processing Agreement. We do not use it for our own purposes, and we do not sell it. If you are a homeowner with a question about your information in a contractor’s workspace, contact that contractor; we will help them respond.

3. Information we collect

From companies that use Walkable

• Account and workspace details: the owner’s name and work email, the company name, workspace address, company contact details, logo, brand colors and time zone, and the names, emails, roles and permissions of each person given a sign-in. For a Quick Quote account, also the quote page settings and the pricing the company configures. Passwords are stored only as salted hashes.
• Billing information: the plan chosen, subscription status and history, invoices, and limited payment details that Stripe shares with us such as the card brand, the last four digits and the expiry month. Full card numbers are collected and stored by Stripe, not by Walkable.
• Signup verification records: the email address and the time it was verified, the network address and browser used at signup, and which version of our agreements was accepted.
• Support and correspondence: anything you send us by email, and our replies.

About homeowners and other people, on a contractor’s behalf

• Contact and property details: names, property addresses, phone numbers and email addresses.
• Job and claim details: roof measurements, materials, estimates, proposals, contracts, insurance carrier and claim information, deductibles, uploaded claim documents, photos, warranties and field notes.
• Signing records: typed or drawn signatures, the email a signing link was sent to, timestamps and the network address used when signing.
• Portal activity: portal sign-in details, messages exchanged with the contractor, appointments booked or changed, documents viewed or accepted, reviews submitted.
• Payment records: invoice amounts, payment dates, methods and status. When a homeowner pays by card, the card details are entered on a page served by Stripe and are processed under Stripe’s agreement with the contractor; Walkable receives only the payment result.
• Instant quote requests: the address entered on a contractor’s quote page, the roof area, pitch and other measurements derived from it, the estimate shown, and the contact details the visitor chooses to submit.

Collected automatically

• Logs: network address, browser and device type, pages and endpoints requested, timestamps, referring page and error reports, used for security, troubleshooting and capacity planning.
• Product analytics: for workspaces where analytics is enabled, which features Authorized Users use and when, tied to the workspace and user identifier. We do not run analytics on homeowner portals or signing pages.
• Cookies: a session cookie that keeps you signed in, a cookie set by hCaptcha when it protects our signup form, and nothing else. We do not use advertising cookies or third-party tracking pixels, and we do not respond to “Do Not Track” signals because we do not track visitors across other sites.

4. How we use information

• To provide, operate, secure and support the Service, including sending the emails the Service is built to send: signing links, proposals, invoices, receipts, appointment confirmations and reminders, portal invitations, verification codes and workspace notices.
• To bill subscribing companies, manage trials, and detect and prevent fraud, abuse and unauthorized access.
• To respond to support requests and communicate about the Service, including notices about changes to our agreements, pricing or features.
• To understand how the Service is used, fix problems and improve it, using aggregated or de-identified information wherever possible.
• To comply with law, enforce our agreements, and protect the rights, safety and property of Walkable, our customers and others.

We send occasional product news to workspace owners. Every such email has an unsubscribe link, and opting out never stops the transactional emails the Service needs to send.

5. How we share information

We do not sell personal information and we do not share it for cross-context behavioral advertising. We share information only:

• With the contractor whose workspace you interact with. If you are a homeowner, everything you submit through a portal, a signing page or a quote page is delivered to the contractor that operates it.
• With service providers that host and operate the Service for us under written agreements that restrict their use of the information. They are listed in Section 6.
• With Stripe to process subscription payments to Walkable and, where a contractor has connected a Stripe account, to process payments from homeowners to that contractor.
• When required by law or to respond to a valid legal request, to protect the rights, safety or property of any person, or to enforce our agreements. Where permitted, we will notify the affected customer before disclosing their data.
• In a business transfer. If Walkable is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy.
• With your direction or consent.

6. Service providers we rely on

The Service is hosted and operated with the help of these providers. Each has access only to what its role requires.

We will update this list when a provider changes. Subscribing companies receive advance notice of changes under the Data Processing Agreement.

7. How long we keep information

• Workspace and Customer Data: for as long as the workspace is active. After a subscription ends or a trial lapses, the workspace is paused and its data is retained for 90 days so the company can subscribe again or export it. After that period we delete it, and copies in encrypted backups are overwritten in the ordinary course within a further 90 days. A company can request earlier deletion.
• Signed documents and audit trails: with the workspace, for the same period. Parties to a signed document receive the final copy by email at signing and should keep their own copy.
• Billing records: for as long as we are required to keep them for tax and accounting purposes, generally seven years.
• Signup verification records: for as long as the workspace exists, as the record of which agreements were accepted.
• Logs and error reports: for no more than 90 days, except where retained longer as part of a security investigation.
• Suppression list: an email address that reports our messages as unwanted stays on the suppression list until its owner asks us to remove it.
• Support correspondence: for three years after the last message.

8. How we protect information

Walkable uses technical and organizational measures appropriate to the risk, including encryption in transit using TLS, encryption at rest for databases and file storage, workspace-level isolation enforced in the application, role-based permissions chosen by each company, salted password hashing, time-limited signed links for files and signing pages, rate limiting, logging and monitoring, least-privilege access for Walkable staff, and regular dependency and vulnerability updates. The measures are described in more detail in Annex 2 of the Data Processing Agreement. No method of transmission or storage is perfectly secure, and you are responsible for keeping your own sign-in confidential.

If we become aware of a breach of security that affects personal information we are responsible for, we will notify affected customers without undue delay, and in any case within 72 hours of confirming it, and will notify individuals and regulators where the law requires it.

9. Your choices and rights

Account information. Workspace owners and users can view and update their own details in the Service. A workspace owner can export every customer, job, document and invoice from Settings at any time, can remove users, and can close the workspace.

Homeowner information. Because contractors control the information in their workspaces, requests to access, correct, delete or export that information should go to the contractor. If you contact us instead, we will pass your request to the contractor and help them respond within the time the law allows.

Marketing email. Use the unsubscribe link in any product-news email.

California residents. The California Consumer Privacy Act gives you the right to know what personal information we collect, use and disclose; to request deletion or correction; to opt out of sale or sharing (we do neither); to limit use of sensitive personal information (we use none for inference); and not to be discriminated against for exercising these rights. To exercise them, email support@getwalkable.com from the address associated with your account, or ask your contractor to submit the request for you. We will verify your identity before acting, and you may use an authorized agent if they provide proof of your authorization. We do not use or disclose sensitive personal information for purposes other than providing the Service.

Residents of the European Economic Area, the United Kingdom and Switzerland. The Service is designed for businesses in the United States and is hosted there. If the Service nonetheless processes your personal information, you may have the rights to access, rectify, erase, restrict or object to processing, to data portability, to withdraw consent, and to complain to a supervisory authority. Our legal bases are the performance of our agreement with you or your contractor, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where we ask for it. Transfers to the United States are made under the standard contractual clauses incorporated by the Data Processing Agreement.

Other states. Residents of states with comprehensive privacy laws have similar rights of access, correction, deletion and portability, and the right to appeal a decision we make about a request. Email support@getwalkable.com; we respond within 45 days and will explain any extension or refusal.

10. Children

The Service is not directed to children and we do not knowingly collect personal information from anyone under 18. Contractors may not create portal accounts for minors. If you believe a minor has provided personal information to us, email support@getwalkable.com and we will delete it.

11. Where information is processed

Walkable is operated from the United States, and the Service is hosted in the United States, with log management in the European Union. By using the Service you understand that your information will be processed in the United States, where privacy laws may differ from those of your home jurisdiction.

12. Changes to this policy

We may update this Privacy Policy. The current version is always published at https://getwalkable.com/privacy with its effective date and version. If a change materially affects how we use personal information, we will give subscribing companies at least 30 days’ notice by email or a notice in the Service before it takes effect.

13. Contact us

Email support@getwalkable.com for any question or request about this policy. Use the subject line “Privacy request” for requests about your rights so they reach the right person quickly.