STORMSHIELD · WEBSITE POLICIES

Privacy Policy

Last updated: September 12, 2026

What we collect and why

When you use the real form at Request my report, we collect your name, invited email address, property address, invitation verification, property authorization, and the version and time of your terms agreement and request-contact consent. We use these details to check eligibility, prepare and personally review a report, deliver access instructions, and respond to questions or corrections.

You may optionally supply the roof installation year or say it is unknown, both when requesting and while viewing a delivered report. We keep the current value, its source, revision and update time with your request so your report and reviewer can use the correction. This information follows the same request retention and deletion rules below. It does not replace the original reviewed source records.

The initial request form does not ask for a phone number, payment details, government IDs, birth dates, insurance account numbers, photos, or your device’s precise location. Submitting a request does not enroll you in marketing, automated calls, or texts. Request-related email is handled personally by the business.

You can request a report alone or also ask for an inspection, either on the request form or later from your private report. We store that choice and the time of the inspection request and use your existing email to arrange the next step. The owner desk keeps the assigned coordinator, next action, scheduling notes, review progress, and a record of report deliveries by type, version, recipient and date. These operational records follow the applicable request or inspection retention periods. Requesting an inspection does not itself authorize sharing with another contractor or confirm an appointment.

In your private report, you may save optional roof-related observations: your concern, room or level, when you first noticed it, a description or remembered weather conditions, and repair history. You may also prepare and upload relevant photos, then select which prepared copies to attach to an exact saved version of your observations. Captions, locations and dates you supply remain homeowner-reported; a photo does not establish when it was taken or where water entered. We retain observation and photo-selection history with the request so a reviewer can see corrections. Clearing a field or changing the selected photos does not erase earlier versions. These records remain private to you and the reviewer unless specifically selected for an authorized contractor disclosure, as described below.

The homeowner photo library accepts up to 12 retained prepared copies per request, with up to six selected for each saved observation version. Supported images are prepared on your device as smaller JPEGs without embedded device or location metadata; the original stays on your device. We retain the original file hash, type, size, dimensions and available file modification time, together with the prepared copy’s dimensions and processing time. These processing records do not verify capture time or condition. Upload only relevant images you already have; avoid faces, documents and unrelated personal details. No third-party conversion service receives your images.

Your reviewed inspection explanation is prepared and personally approved separately from the private contractor record. It uses deliberately selected explanations, locations and photos, with captions written for that result. Private contractor notes and internal planning records are excluded. Saving a new draft does not publish it; approving a replacement updates the result available through your existing report access without extending its original expiry. We retain prior versions and approval or withdrawal history to track corrections. Withdrawing a published result removes its online availability but cannot recall a copy already downloaded or printed.

Staff also record follow-up target dates, actual contacts, closure or reopening, and separately confirmed receipt of a delivery. Opening a link is not treated as confirmed receipt. A delivery record identifies the intended recipient and exact version; preparing an export does not itself send it.

Property records and report preparation

For an eligible request, we may combine your property address with public county property records, building year, public LiDAR roof measurements, imagery where permitted, and historical weather near the home. If you later provide roof history or inspection information, we use it to improve that property’s report. Records and models can be incomplete or wrong; we distinguish estimates from known facts and provide the report’s sources and limitations.

Analysis and working files are prepared on the business’s local computer or private storage. County, mapping, and weather providers may process a property address, location, or other search details needed to retrieve a record. We do not provide your contact details to those sources for report preparation. The public website does not give visitors access to our working files or other homeowners’ reports.

Hosting, security, and report access

Cloudflare hosts the website and its request database. It processes technical request information such as IP address, requested URL, browser information, and request time to serve and protect the service. The application uses limited security records, including hashed rate-limit identifiers, to reduce abuse. Cloudflare’s technical and security processing is separate from the details you submit in our form.

To open a delivered report, use its email address and private access code. You can reuse the same code on different browsers until it expires, normally 30 days after it was created. The site stores a hashed form of the access credential and sets an essential cookie to remember permission to view that report for up to 24 hours per sign-in. Keep the code private and sign out on shared devices. Signing out ends that browser session; it does not cancel the code or sign out your other browsers. Contact Rembrandt to cancel all access for a code. Authorized staff use a separate Cloudflare Access sign-in, which processes staff sign-in and security information. See the Cookie Policy.

Sharing and outside services

We do not sell personal information or share it for targeted advertising. We use Cloudflare for hosting and security and our business email service for manual correspondence. We may disclose information when legally required or reasonably necessary to investigate abuse, protect people, or resolve a dispute. An inspection or roofing project arranged separately may have its own records and agreement.

The application has no advertising pixels, optional analytics, session replay, fingerprinting, or third-party embeds. Images are served with the website and it uses system fonts. Calling Rembrandt or following a link to its separate contact website is your choice; those services have their own handling of information.

How long information is kept

• Unfinished requests: scheduled for deletion 90 days after submission.
• Requests with a personally reviewed report: scheduled for deletion 365 days after the latest personal review, including any superseded report revisions retained with that request.
• Unused invitation records: scheduled for deletion 30 days after they expire.
• Report access codes: valid for no more than 30 days. Report sessions last no more than 24 hours and may end sooner when access is revoked.

These periods describe the active website records. A daily cleanup processes deletions in batches, so removal may finish after the scheduled date. Deletion from that system also ends access to its report. Local analysis files, manually sent email, and backup copies are handled separately: the business reviews and removes copies no longer needed, and restricted backups expire under their own retention settings. A deletion request includes a review of those copies; it is not a promise that every backup is immediately erased. We may retain necessary records longer where required by law or for a specific unresolved dispute, and explain any applicable exception when responding.

If your request is linked to an inspection, we keep the linked request while that inspection remains within its retention period, even when this is longer than the report-only period above. This keeps your inspection records, contact details and delivery history connected. A deletion request covers both linked records and the associated inspection photos; cleanup may take more than one scheduled batch.

Homeowner photos selected in any saved observation version follow the linked request’s retention period. Uploaded copies that were never selected are scheduled for cleanup after 24 hours. Deleting an inspection does not by itself delete a still-retained homeowner request or its photo library. When deletion of the request starts, online report and photo access is blocked. We remove its private photo objects before deleting their tracking records; interrupted uploads or storage failures may leave a blocked cleanup record pending a later attempt.

The fictional demo and redacted sample

The request demo holds typed details only in the open page’s application memory and sends nothing. Use fictional details there. It does not analyze an entered address. Reloading or leaving normally clears that state, but your browser may restore a page or retain autofill. We do not save demo form details in cookies or browser storage. Copies you print or place on your clipboard remain under your control.

The fixed sample report uses a real roof with its address and identifying property records withheld. Its roof shape could still be recognizable, so it is address-redacted rather than anonymous. Demo form entries do not change the sample property.

Questions, corrections, deletion, or stopping contact

Contact Stevan using the business details below to ask about your information, correct a mistake, withdraw a pending request, request deletion, or stop further request-related contact. We may need to verify your email or request reference to avoid exposing or deleting someone else’s information. Do not send identity documents or access codes. Any legal rights and exceptions depend on the circumstances and applicable law.

Separate inspection workspace and contractor sharing

A StormShield inspection case contains the selected report reference, relevant roof geometry, measurements and weather context. An assigned inspector may directly submit visit details, access limitations, observations, measurements and selected property photos. We record the inspector’s name, organization and invited email address, access and review events, and the source and date of the property owner’s sharing authorization recorded by our reviewer. A report request alone does not authorize sharing with an additional contractor.

With the applicable specific permission, our reviewer can choose an exact saved version of your observations and only the fields and photos needed by the named inspector and company. Nothing is selected for disclosure by default. The shared copy identifies the selected statements and photos, their homeowner-provided source, original version and supplied dates, and the purpose and limits of the disclosure. Permission evidence is retained in the owner desk. The inspector receives the selected copy through their existing inspection link, without access to your full observation history, photo library or other assignments. This sharing step sends no automatic message.

New observations or corrections are not automatically forwarded. The reviewer can deliberately share an updated selection, keep an earlier selection with a reason, or withdraw it from the current editable inspection. We keep the decision history, and an already submitted inspection keeps the exact copy originally included with it. Withdrawal does not erase earlier submitted records or recall exported copies. Contact us to request a correction, withdrawal or deletion; the retained records follow the periods below.

Inspection records use a separate StormShield database and private photo storage hosted by Cloudflare. StormShield does not connect to or import a contractor’s CRM customers, leads, sales notes or general photo library. Each invitation grants access only to its assigned inspection. Findings submitted by different contractors remain separate. Reviewed reports can be exported and deliberately attached to the selected contractor’s own job record. An export does not provide StormShield with access to that CRM.

Authorized staff may also prepare a separate private project-manager plan from the reviewed inspection. We retain its selected measurements, source references, assumptions or explained overrides, calculations, revision history, personal approvals and export records. For an actual authorized handoff, staff record the exact approved copy, named contractor recipient, job reference, sharing permission, delivery method and time. A recipient's direct acknowledgement and later corrections are recorded separately. This plan helps prepare work for the property; it is not part of the homeowner explanation, and an inspector invitation does not provide access to its owner-only editor. Selecting or approving a reference does not establish installed condition or compliance, and preparing a copy does not automatically deliver it or confirm receipt.

Upload only photos and information needed for the authorized property inspection. Avoid faces, license plates, unrelated rooms, insurance account numbers and other unnecessary personal information. Uploaded photos can contain embedded camera metadata. They remain private to the authorized inspection and its reviewer; selected photos may appear in a reviewed export. Anyone receiving an exported copy controls their own copy, and revoking online access cannot recall it.

Inspection cases are scheduled for removal 90 days after creation unless reviewed; a reviewed case is scheduled for removal 365 days after its latest personal inspection review. Selected observation copies and sharing decisions, homeowner-result versions and approvals, and private planning revisions, approvals, exports, handoffs and receipt records follow the inspection’s retention and deletion. Saving a plan, changing a share or approving a homeowner explanation does not start a separate retention period. Cleanup runs in batches and includes active photo objects. An in-progress upload may require a later cleanup attempt after access has been blocked. You may request earlier deletion using the contact details below. Restricted backups and copies already downloaded or held by a contractor are handled separately. Inspector invitations expire within 30 days and browser sessions within 24 hours; revocation can end access sooner.

For supported inspection images, the browser prepares a smaller JPEG derivative on the inspector’s device, including supported HEIC conversion. The derivative removes embedded device and location metadata. The original stays on the device and is not uploaded by this preparation step. We separately retain bounded processing information: the original file hash, file type, size and dimensions, file modification time when available, output dimensions and processing time. A file modification or upload time is not a capture time; any inspector-supplied capture time is labeled as reported. The stored derivative and its provenance follow the inspection retention and deletion rules above. No third-party photo-conversion service receives these images.

Children and changes

This service is for adults who own a home or have the owner’s permission. We do not knowingly collect children’s information. Contact us if you believe a child’s details were submitted. Policy updates appear here with an updated date; we will provide notice before materially changing how new request information is collected or used.