Privacy policy
Last updated September 5, 2026
R2 Referrals is a product of R2 Roadmap LLC, a Colorado limited liability company (R2 Roadmap), provided to window and door offices and used by their referral partners and the neighbors those partners refer. This policy explains what information the service holds, why, who can see it, and what we will never do with it. It applies to this website, the office dashboard, the rep and partner screens, and the accounts we provision for an office.
Who this covers
Three kinds of people give us information. Office staff (owners, administrators, and reps) create logins and run the program. Referral partners are an office's past customers who share a referral link. Referred homeowners are people a partner sends to the office. Visitors to this website who request a demo or start an office subscription are covered too.
What we collect
- Office staff: name, work email, phone, role, the office you belong to, your login credentials (stored hashed), your profile photo if you add one, and a record of the actions you take in the dashboard.
- Referral partners: name, email, phone, the rep you are attached to, your profile photo if you add one, your referral link activity, and the referrals credited to you with their status and reward.
- Referred homeowners: the name and phone number given on a referral form or entered by a partner or rep, the consent language shown and the time it was accepted, the partner the referral is credited to, and the status of the project as the office reports it.
- Website visitors: what you type into the demo request or office signup forms, and standard server logs (address, browser, pages viewed).
- Billing: an office's subscription status and invoice history. Card numbers are entered directly with our payment processor and never touch our servers.
Why we use it
To run the service: route each referral to the right rep, send the partner status updates from the rep's account, keep the office dashboard and leaderboards current, bill the office, and support you when something breaks. We also use aggregate, de-identified numbers (referrals received, sold, paid across all offices) in marketing. Those numbers never include a name, an email, a phone number, or an office's identity without that office's written permission.
What we will never do
We never sell personal information. We never share it with anyone outside the providers that run the service. We never use it to train a model, build a marketing list, or contact anyone for our own purposes. An office's customer data belongs to the office, and we process it only to provide the service to that office.
Who can see what
Access is enforced in the database, not only on the screen. Office administrators see their own office. Reps see their own partners and referrals. Partners see their own referrals with the referred homeowner's contact details hidden. The public leaderboard shows a partner's first name, last initial, and paid referral count only when the office turns it on, and a partner can ask their office to be removed from it. Rep names and rep numbers are never public.
Who runs the service for us
We use a small number of providers, each bound to the same limits: a messaging and account platform that holds the office's contacts and conversations, a database and login provider, a hosting provider, a transactional email provider for login and reset emails, and a payment processor for subscriptions. Data is stored in United States regions. The providers are named in the data processing agreement an office signs.
Text messages and email
Referral partners and referred homeowners receive messages only after agreeing to them, and the agreement is stored with a timestamp. Every text honors STOP, which stops all texting from that account immediately. Every email carries an unsubscribe link. Opt-outs are recorded on the contact and are visible to the office.
How we protect it
Encrypted in transit and at rest. Daily backups. Per-office isolation in the database. Logins are email and password with reset, and sessions expire. Access to production systems is limited to the people who run the service. If we confirm a breach affecting an office's data, we notify that office within 72 hours.
How long we keep it
For as long as the office subscribes, plus the time needed to complete an export. When an office ends its subscription it receives a full export within 30 days, and we delete its data after the export is confirmed, except records we must keep for billing or legal reasons. A referral partner or homeowner who wants their information removed asks the office, or asks us and we work with the office to do it.
Your choices
You can view and update your own profile whenever you are signed in. You can opt out of texts and emails at any time using STOP or the unsubscribe link. You can ask what we hold about you, ask to correct it, or ask to delete it, subject to the office's own obligations, by writing to support@am.r2pipeline.com.
Children
The service is for adults and businesses. We do not knowingly collect information from anyone under 18.
Changes
When this policy changes we update the date at the top and, for material changes, tell subscribed offices by email before the change takes effect.
Contact
R2 Roadmap LLC (R2 Roadmap), Colorado. support@am.r2pipeline.com. Offices with a signed agreement should read this policy alongside their data processing agreement, which governs if the two differ. See also the terms of service and the disclaimer.