01 Who we are
RidgeAI ("RidgeAI," "we," "us," or "our") is a software service operated by POCO LLC, 8409 Racine Trl, Austin, TX 78717. We provide an AI-assisted platform that helps roofing and storm-restoration contractors build insurance supplements, denial responses, reinspection requests, and related documents.
This Privacy Policy applies to the RidgeAI website at ridgeai.org and the RidgeAI application (together, the "Service"). It works alongside our Terms of Service.
02 What we collect
Information you give us
- Account data — your email address and password (or a Google sign-in token if you use Google OAuth).
- Business profile — company name, phone number, contractor license number, company address, and operating region.
- Integration credentials — if you connect third-party tools, the API keys you provide (for example, AccuLynx or CompanyCam). These are used only to connect those services on your behalf.
- Claim documents — the PDFs and files you upload (carrier estimates, scopes, photos, denial letters, and similar). See Section 03.
- Communications — messages you send to support or sales.
Information we collect automatically
- Usage data — pages viewed, features used, and actions taken in the Service.
- Device & log data — IP address, browser type, and timestamps, captured in standard server logs.
- Cookies & analytics — see Section 08.
Information we collect from others
- Payment data — when you subscribe, our payment processor (Stripe) collects and processes your card details. We never see or store full card numbers; we receive only billing status, the last four digits, and subscription metadata.
- Authentication data — if you sign in with Google, we receive your basic profile and email from Google.
03 Your claim documents
The documents you upload may contain information about third parties — most often the homeowner or insured, the property address, the claim number, and damage details. We treat this material with care.
You are the controller of this data; we are the processor. You upload claim documents to get a work product back, and you are responsible for having the right to share that information with us — including any consent required from the homeowner or policyholder. We process those documents only to provide the Service to you (generating supplements, denial responses, and related output) and to improve the Service as described in this policy.
Uploaded files are held in memory for processing and stored in our database so you can revisit and edit your work. We do not sell this data, and we do not share it for anyone else's advertising.
04 How we use your information
- To provide, operate, and maintain the Service.
- To generate the supplements and documents you request.
- To authenticate you and keep your account secure.
- To process subscriptions, usage, and overage billing.
- To improve our product, including refining the prompts and AI workflows that power the Service. When a contractor edits AI output, we capture the difference between the original and edited text as an internal quality signal (a "correction").
- To provide support and respond to your requests.
- To detect, prevent, and address fraud, abuse, and security issues.
- To comply with legal obligations.
We rely on the performance of our contract with you, your consent (where required), and our legitimate interest in running and improving a secure, useful product as the legal bases for these uses.
05 AI processing
To generate your output, we send the relevant contents of your claim documents and prompts to our third-party AI provider (Anthropic, the maker of Claude). They process that content to return a result to us, which we return to you.
We do not permit our AI provider to use your claim content to train their general models. We use enterprise/API access where customer inputs and outputs are not used for model training by the provider. We may use de-identified internal correction signals (described in Section 04) to improve our own prompts and workflows.
AI output can be wrong or incomplete. RidgeAI is a drafting tool, not legal, insurance, or professional advice — you are responsible for reviewing every document before you rely on or submit it. See our Terms of Service.
07 Subprocessors
We rely on the following providers to deliver the Service. Each is bound by contractual confidentiality and security obligations.
| Provider | Purpose |
|---|---|
| Supabase | Authentication and primary database (account, profile, and document storage) |
| Anthropic | AI model processing (Claude) to generate your documents |
| Stripe | Subscription and payment processing |
| Railway | Application hosting |
| Optional sign-in (OAuth) | |
| PostHog | Product analytics |
| OpenAI | Text embeddings used to score document quality and surface similar past claims |
| Twilio | SMS delivery for phone sign-in (one-time login links) |
| Resend | Transactional and account email (trial, billing, and notifications) |
This list may change as our infrastructure evolves; we will keep it current here.
09 Data retention
We keep your account and document data for as long as your account is active so you can return to your work. If you close your account or ask us to delete your data, we will delete or de-identify it within a reasonable period, except where we must retain certain records to comply with legal, tax, or accounting obligations or to resolve disputes. Backups are purged on a rolling schedule.
10 Security
We protect your data with encryption in transit, access controls, scoped database queries tied to your account, rate limiting on authentication, and secure session cookies. No system is perfectly secure, but we work to hold a high bar and to notify you and the appropriate authorities if a breach affecting your data occurs, as required by law.
11 Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information ("right to be forgotten").
- Export your information in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
To exercise any of these, email privacy@ridgeai.org. We will verify your request and respond within the timeframe required by applicable law. You will not be discriminated against for exercising your rights. If you are in the EEA/UK, you may also lodge a complaint with your local data protection authority.
12 Children
The Service is a business tool intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
13 Changes to this policy
We may update this Privacy Policy as the Service evolves. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.
14 Contact us
Questions about your privacy or this policy? Email privacy@ridgeai.org or write to us at POCO LLC, 8409 Racine Trl, Austin, TX 78717.