Legal

Privacy Policy

The Design Fusion  ·  Last updated: June 2026

The short version

01

Who we are

The Design Fusion operates Roofflow, Sparkflow, Pipeflow, and Airflow — field reporting and follow-up tools built for service contractors. This Privacy Policy explains how we collect, store, and handle data across all four products and the main thedesignfusion.co website.

Questions about this policy can be directed to connect@thedesignfusion.co.

02

What data we collect and why

We collect only what's needed to run the product. Here's a breakdown:

Data type What it is Why we collect it
Account data Your name, email address, and profile photo from Google sign-in To create and identify your account
Business data Company name, license number, logo, and contact details you provide To brand your reports correctly
Report data Inspection findings, severity tags, field notes, and report text To generate and store your reports
Photos Job site photos uploaded from the field To attach to reports and store in your account
Homeowner data Property address and optional phone number entered by you To populate the report header — visible to you only
Usage data Pages visited, features used, general platform activity To improve the product and fix issues

Note on homeowner data: The address and phone number you enter for a homeowner appears on the report you generate. This data is accessible to you through your account. The Design Fusion does not use, access, or share this information for any purpose beyond storing it securely on your behalf.

03

How and where data is stored

All data — reports, photos, homeowner details, account information — is stored in our secure cloud infrastructure powered by Supabase, a managed database platform with encryption at rest and in transit.

Photos and report attachments are stored in cloud object storage. All storage is hosted on infrastructure located in the United States.

The Design Fusion holds infrastructure-level access to this storage as the service operator. This access exists solely to maintain, back up, and run the platform. We do not browse, read, or analyse your reports or customer data.

04

Google sign-in

We use Google OAuth to handle account authentication. When you sign in with Google, we receive your name, email address, and profile photo from Google. We do not receive your Google password, payment methods, contacts, or any other Google account data.

Your use of Google sign-in is also subject to Google's Privacy Policy.

05

What we never do

We want to be direct about this:

We do not sell your data. We have no business model that involves selling contractor data, homeowner data, or any data generated through the platform to advertisers, data brokers, or any third party.

We do not share your customer data with third parties. Homeowner details, report contents, and job photos are not shared with any outside party — including our own marketing or analytics systems.

We do not use your data to train AI models. Report content, photos, and findings you generate are not used to train, fine-tune, or improve any AI or machine learning system.

06

Third-party services we use

Running the platform requires a small number of trusted third-party services. Each handles data only to the extent necessary to perform its function:

Service Purpose What they handle
Supabase Database and file storage All platform data — encrypted at rest and in transit
Google OAuth Account authentication Name and email only
Trigger.dev Background task processing Job processing instructions — no personal data retained
Vercel Platform hosting and delivery Serves the application — standard web traffic logs

We do not use third-party advertising platforms, social trackers, or analytics services that receive personal data.

07

How long we keep your data

Your account data, reports, and photos are retained for as long as your account is active. If you cancel your subscription, your data remains accessible for 30 days before it is permanently deleted from our systems.

If you would like your data deleted before that window, you can request immediate deletion at any time — see Section 08 below.

08

Your rights and how to use them

You have the right to:

Access your data — request a copy of all data we hold about you and your account.

Correct your data — update inaccurate account or business information at any time through your dashboard, or by contacting us.

Delete your data — request permanent deletion of your account and all associated data, including reports, photos, and homeowner details.

Export your data — request a portable export of your reports and account data.

To exercise any of these rights, email connect@thedesignfusion.co with the subject line Data Request: [Your Business Name]. We will respond within 5 business days.

09

Your responsibility as a contractor

When you enter homeowner data into the platform — including names, addresses, and phone numbers — you are responsible for ensuring you have the homeowner's consent to store and use that information in connection with your service.

The Design Fusion acts as the data processor for this information. You, the contractor, are the data controller. This means the decision about what homeowner data to collect and why sits with you.

We recommend only entering data that is directly relevant to the inspection or service call.

10

Changes to this policy

If we make material changes to this Privacy Policy, we will notify active users by email at least 14 days before the changes take effect. The "last updated" date at the top of this page reflects the most recent revision.

Continued use of the platform after a policy update constitutes acceptance of the revised terms.

Questions about your data?

We keep this simple on purpose. If something isn't clear, or you want to make a data request, email us directly. No forms, no tickets.