Roofing Supplement Software: Data, Privacy and Security Questions

When you use supplement software, homeowner names, addresses, claim numbers and photos of their homes live in someone else's system. Before you choose one, ask who can see that information, where it is stored, what happens when you cancel, and whether it is sent to an AI service. The questions below cover what matters most. We answer them for Supplement Snap in the table, based on our privacy policy and what we have tested, and you should ask any vendor for the same.

Disclosure: we make Supplement Snap, which helps roofing crews document damage found at tear-off and export a report. It does not decide coverage, negotiate claims or guarantee approval. This page is general guidance, not legal or claims advice.

Ask: who owns the photos, notes and reports, and can I download them? You should keep ownership of the work you document. Ask what you can take with you if you cancel: reports as PDFs, photos, notes. Get the answer in writing.

Ask: where is the data stored, and who inside the company can access it? Ask how accounts are separated from each other. For us, project records live in Supabase and are tied to your login, and we tested that a person with no login cannot read the tables. Photos are different: they are stored as files with long, hard-to-guess web addresses, and anyone who has the exact address can open the photo without logging in. That is a common design, but you should know it. We cannot claim a system is impossible to breach, and no honest vendor can.

Ask: does the tool send my information to an AI company, and which information? For Supplement Snap, the drafting step sends your written notes and project details to an AI service so it can draft descriptions. Photos are not part of that request as the app works today. Ask any vendor whether your data is used to train models and what their provider's terms say. Our privacy policy lists the services we use.

Ask: how long is data kept, and what happens after I cancel? Claims can take months, so you may need your photos later. Download your reports before you cancel. For our policy, data is removed within 30 days of account deletion. Ask other vendors for their number.

Ask: who handles payments, and is my card stored? We use Stripe, so card details go to Stripe, not to us. Ask who sends the emails and whether adjusters see your address or the company's. Our reports are sent through Resend and replies go to the sender.

Ask: can I control who sees what, and can I remove someone quickly? When a crew member leaves, you should be able to remove their access the same day. Ask how invites work and whether each person has their own login.

Be cautious if a vendor will not say where data is stored, cannot explain what happens when you cancel, has no privacy policy, or promises that data is completely safe. A plain, specific answer, including what they do not do, is a good sign.

Email or ask: Where is my data stored? Who at your company can see it? Is my information sent to an AI provider, and which part? What happens to my photos and reports if I cancel? Can I download everything first? How do I remove a team member? Where is your privacy policy?

A good vendor answers each in a sentence or two. If you get a sales pitch instead of answers, treat that as an answer.

We do not promise that data can never be breached, that a carrier will accept any report, or that AI drafts are always right. You review every draft before it goes anywhere. We also do not claim certifications we have not earned. If your carrier or a client requires a specific security standard, ask us directly and we will tell you plainly whether we meet it.