Roofing Marketplace/CRM Development

# RoofMatch – Full Pre-Launch Audit, QA & Platform Optimization

## Project Overview

RoofMatch is a UK-based roofing marketplace web application that connects homeowners with vetted local roofing contractors.

The platform allows:

* Homeowners to submit structured roofing requests
* Contractors to receive and purchase matching opportunities/leads
* Admin users to manage operations through an internal CRM/dashboard

The platform is currently in late-stage MVP/pre-launch phase and requires a highly capable freelancer (or small team) to conduct a comprehensive audit, identify launch blockers, test all systems, improve flows, and prepare the platform for stable public launch.

This is not a simple website review — I need a proper technical, UX, operational, and backend audit from someone experienced with SaaS marketplaces, Supabase, Stripe integrations, QA testing, and modern web app workflows.

---

# Current Platform Stack

The system currently includes:

### Frontend / Web App

* Responsive web application
* Homeowner lead submission flows
* Contractor onboarding and registration
* Contractor dashboards
* Admin CRM/dashboard
* Authentication and role-based access

### Backend

* Supabase backend
* Database tables and relational logic
* Row Level Security (RLS)
* User permissions
* Workflow automations
* Email triggers
* Lead matching logic

### Operational Systems

* Lead approval/rejection flows
* Contractor verification/approval
* Credits system
* Admin support workflows
* CRM management
* Request tracking
* Email notifications
* Stripe payment preparation

---

# What I Need

I need a complete end-to-end platform audit and launch-readiness review.

The successful freelancer will:

* Thoroughly test the platform
* Identify bugs and vulnerabilities
* Improve UX and onboarding flows
* Recommend structural/platform improvements
* Ensure operational readiness
* Fix or document launch blockers
* Stress-test workflows
* Ensure secure and scalable architecture

---

# Scope of Work

## 1. Full QA Testing

Comprehensive testing across:

* Desktop
* Mobile
* Tablet
* Different browsers/devices

Testing should include:

* Registration/login flows
* Password resets
* Email verification
* Lead submissions
* Contractor applications
* Admin workflows
* Notifications
* Dashboard functionality
* Edge cases/error handling
* Session/authentication handling
* Form validation
* Broken links/buttons
* Loading states
* UX friction points

---

## 2. User Journey & UX Audit

Review and improve:

* Homeowner submission flow
* Contractor onboarding flow
* Contractor dashboard usability
* Admin dashboard usability
* Mobile responsiveness
* Conversion friction
* CTA placement
* Navigation clarity
* Trust/credibility elements
* Marketplace flow consistency

I want practical recommendations, not generic UX advice.

---

## 3. Supabase & Backend Audit

Review:

* Database structure
* Relational logic
* RLS policies
* Authentication security
* Permissions/access control
* API calls
* Error handling
* Data integrity
* Performance bottlenecks
* Scalability concerns
* Potential security issues
* Automation reliability

Identify:

* Bad practices
* Unsafe queries
* Missing protections
* Logic vulnerabilities
* Scalability risks

---

## 4. Stripe Payments Preparation

Prepare and audit:

* Stripe integration structure
* Contractor credit purchases
* Payment flow logic
* Webhooks
* Transaction handling
* Failed payment handling
* Refund flow considerations
* Credit allocation logic
* Payment security best practices

Stripe may not yet be fully live, but the structure must be launch-ready.

---

## 5. Email & Notification Testing

Test all transactional emails:

* Registration emails
* Password resets
* Approval/rejection emails
* Lead notifications
* Contractor communications
* Support/admin notifications

Review:

* Deliverability
* Formatting
* Mobile responsiveness
* Spam risk
* Branding consistency
* Trigger reliability

---

## 6. Security & Launch Readiness

Audit for:

* Access vulnerabilities
* Broken permissions
* Sensitive data exposure
* Spam risks
* Fake contractor/user abuse
* Marketplace abuse scenarios
* Credit/payment abuse risks
* Admin exposure risks

Provide recommendations for:

* Security hardening
* Monitoring
* Logging
* Backup/recovery
* Operational stability

---

# Deliverables

I expect:

* Full written audit report
* Prioritized issue list
* Launch blockers clearly identified
* Recommended fixes/improvements
* UX recommendations
* Security recommendations
* Backend recommendations
* Optional implementation support (if suitable)

Bonus if you can also help implement fixes.

---

# Ideal Freelancer

Looking for someone with experience in:

* SaaS marketplaces
* Supabase
* Stripe
* QA testing
* Product audits
* Web app UX
* Security reviews
* Launch preparation
* CRM/admin systems
* Workflow automation

UK marketplace/platform experience is a bonus.

---

# Important

This is a serious commercial project preparing for public launch.

I am looking for someone detail-oriented who can think like:

* A user
* A contractor
* An admin
* A malicious actor
* A SaaS operator

I do NOT want generic automated reports.

I want a proper hands-on audit from someone who understands how real marketplace platforms operate.

Please include:

* Relevant experience
* Similar projects
* Technologies you’ve worked with
* Your audit/process approach
* Estimated timeline
* Availability
* Whether you can also implement fixes

Potential for ongoing work after launch.

***Clarification Board Responses***

Known Blockers
Yes. A recent smoke test identified launch blockers around contractor profile completion/RLS, public support ticket submission, transactional email CTA routing, waitlist confirmation copy, and contractor opportunity permissions. Stripe still needs final integration and retesting.

Usability / Conversion
Yes. I want the audit to include usability, trust, and conversion feedback for both homeowner and contractor journeys, including onboarding, request submission, contractor economics, and admin CRM efficiency.

Testing / Monitoring
Yes. Post-launch stability matters. I’m interested in automated smoke tests, key workflow monitoring, error logging, and alerts for payments, lead matching, email delivery, and admin operations.

Expansion
Initial launch is UK roofing only. The platform should stay architecturally clean enough to expand into more regions and possibly adjacent home-service categories later, but that is not the immediate launch priority.

Compliance
Yes. GDPR, cookie/privacy handling, unsubscribe/email consent, data retention, and UK consumer/payment expectations should be considered. Payments will be through Stripe.

Frontend
The app is built with React using TanStack Start/Vite, with Supabase backend/auth/database and Stripe being integrated.

Lead Matching / Credits
Lead matching and credit workflows are primarily handled through Supabase tables, RPC/functions, and app routes. Credits are intended around lead/opportunity access rather than completed jobs. I want idempotency, auditability, and race-condition handling reviewed carefully.

Abuse / Fraud
There are admin approval workflows and role gates, but abuse detection should be reviewed. Fake contractor registrations, duplicate leads, credit abuse, spam requests, and refund/recredit flows are all areas I want checked before launch.

Staging / Security / Load
There is local/dev testing and live configuration, but isolated staging/test infrastructure needs review. No formal penetration test has been completed yet. Load/performance testing is useful, especially around request submission, lead matching, Stripe webhooks, and admin CRM.

Stripe
Stripe is partially prepared but not final-launch integrated yet. Checkout/webhook behaviour, retries, credit allocation, and failure handling need testing once credentials are configured.

Scope
I’m looking for audit plus practical implementation support immediately after, prioritising launch blockers first, then UX polish and monitoring added bonus for SEO, google ads/keywords.

on completion it's likely the successful freelancer could be used for ongoing updates and patches.