Effective October 19, 2026 · previous version September 25, 2026
M2Q, a Florida company (“M2Q”, “we”), makes software for roofing and exterior contractors. This policy covers m2q.ai, app.m2q.ai, our emails and texts, and the documents your customers open, sign and pay through M2Q. It works together with our Terms of Service.
About you and your team — the people who use M2Q. We are responsible for this information.
About your customers — homeowners and others whose names, addresses and projects you keep in M2Q, and who view, sign or pay your documents. You decide what to collect about them and why; we process it on your behalf to run the Service for you. If you are a homeowner with a question about your information, please contact the contractor who sent you the document; we will help them respond.
Account details: name, email, phone, company name, address, license number, logo and your preferences. If you sign in with Google, we receive your name and email from Google.
Your business content: customers and contacts, projects, property addresses, roof measurements and drawings, photos, quotes, proposals, templates, invoices, change orders, material lists, notes and files you upload.
Signature records: when a document is signed, the signer’s name, the signature, the time, and the IP address and device information, kept as the audit record of the signature.
Payments: plans and customer payments are processed by Stripe. Card and bank numbers go directly to Stripe; M2Q never sees or stores them. We receive payment status, amounts and the last digits of the card.
Messages: emails and texts sent through M2Q, their delivery status, and your conversations with our support.
Usage and device information: pages and features used, clicks, IP address, browser and device type, and cookies or similar technologies, used for sign-in, security, product analytics and measuring our advertising. To prevent fraud and repeat free trials we use bot checks and a device identifier (a code derived from your browser and device settings) at signup.
Your answers: when you answer a question we ask in the app (for example, what would make M2Q worth it for you), we keep the answer with your account.
Public business information: when you give us your company website, we may read it to pre-fill your company profile (name, phone, logo).
To provide the Service: create and deliver your documents, measurement reports, emails and texts; collect signatures and payments; sync with tools you connect; and keep your account secure.
To support you, to bill you, to send service messages (such as “your report is ready”), and — only if you opted in — product news and offers, which you can unsubscribe from at any time.
To tell you about offers that fit your situation — for example, extra reports when a storm hits the area where you measure roofs. We use the general area of the addresses you measure for this, never to contact your customers.
To understand how M2Q is used and improve it, using aggregated and de-identified information where we can; to prevent fraud and abuse; and to meet legal obligations.
AI features send the content you give them (for example, a quote you upload) to our AI provider to produce the result for you. That content is not used to train AI models — not by us and not by our provider.
We do not sell personal information for money. We never sell your customers’ information, share it with other contractors, or use it to market to them.
Advertising: m2q.ai and app.m2q.ai use Google and Meta advertising tags to tell us which ads bring people to M2Q (for example, that a visitor from an ad signed up). Under some state laws this can count as “sharing” for advertising. You can opt out by blocking these cookies in your browser or by asking us at support@m2q.ai.
Advertising audiences: we may give Google and Meta the email address or phone number of people who signed up for M2Q, in a scrambled (hashed) form, so we can show our ads to them — or leave them out — on those platforms. The platforms match it to their own users and are not allowed to use it for anything else. We never do this with your customers’ information. To opt out, email support@m2q.ai and we will stop including you.
We share information only with service providers that process it for us under contracts that limit their use of it, and only as needed for their part of the Service:
Hosting and database — Vercel, Supabase · Payments — Stripe · Email delivery — Postmark · Text messages — Twilio · Product and service messaging — Customer.io · Product analytics — PostHog · Advertising measurement — Google (Tag Manager and Ads) and Meta (Facebook pixel) · Support chat — Crisp · Maps, address lookup and sign-in — Google · AI — Anthropic · Roof measurement and imagery — our measurement providers, who receive the address of a report you order · Bot and fraud checks — Cloudflare Turnstile, FingerprintJS · Accounting — QuickBooks (Intuit), only if you connect it.
We also share information when you tell us to (for example, sending a quote to your customer or syncing to QuickBooks); when the law requires it or to protect rights, safety and security; and with a successor if M2Q is merged or sold, subject to this policy.
Service emails and texts are part of using M2Q. Marketing emails are sent only with your consent and include an unsubscribe link. For texts, message frequency varies and message and data rates may apply; reply STOP to stop and HELP for help. We do not sell or rent phone numbers, and we do not share them with third parties for their own marketing.
Texts you send your customers through M2Q (for example, follow-up reminders about a quote or invoice) go only to customers you have confirmed agreed to receive texts from you, only between 8am and 8pm in the customer’s time zone, and always say how to stop. When a customer replies STOP, we stop all texts to that number and keep the number on an opt-out list so it is not texted again. You are responsible for having your customer’s permission.
We use cookies that are needed to sign you in and keep M2Q secure, and analytics and advertising cookies on our website to understand what brings people to M2Q. You can block or delete cookies in your browser; the app needs its sign-in cookies to work.
We keep your information while your account is open. When it closes, your content stays available for export for 30 days and is then deleted within a reasonable time, except records we must keep for legal, tax, accounting, dispute or signature-audit reasons, and backups, which expire on their own schedule.
Information is encrypted in transit, each company’s data is isolated from every other company’s at the database level, and access is limited to people who need it. Within your company, reps do not see your costs. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.
You can see and update most of your information in the app. You can ask us to access, correct, export or delete your personal information, or to stop marketing messages, by writing to support@m2q.ai. Depending on where you live, you may have additional rights under state law (for example in California, Virginia, Colorado, Connecticut, Texas or Florida), including to know what we collect and to not be discriminated against for using your rights. We will verify requests before acting on them.
Requests about information a contractor keeps about you go to that contractor; we will help them respond.
M2Q is for businesses and is not directed to children under 16. We do not knowingly collect their information.
M2Q is operated from the United States, and information is stored and processed in the United States. If you use M2Q from Canada or elsewhere, your information is transferred to and processed in the United States, where it may be accessible to authorities under U.S. law.
We may update this policy. If a change is material we will tell you by email or in the app before it takes effect. The date at the top shows the current version.
Privacy questions or requests: support@m2q.ai.