Privacy Policy

HVAC Copilot ("we," "us," or "our") operates chathvac.ai, an AI-assisted diagnostic tool for HVAC technicians. This Privacy Policy explains what information we collect, how we use it, and your rights around it.

Account information: When you create an account, we collect your email address, name (optional), and a hashed version of your password. We never store passwords in plain text.

Diagnostic conversations: We store the messages you send and the AI responses you receive. This is necessary to maintain your case history and provide the service.

Usage data: We track message counts and timestamps to enforce fair-use limits and prevent abuse. We do not sell this data.

Subscription information: If you subscribe, payment is processed by Stripe. We receive a subscription status and customer ID — we never see or store your full card number.

We use the information we collect to:

• Provide and improve the HVAC Copilot service
• Send transactional emails (email verification, password reset, subscription notices)
• Enforce usage limits and protect against abuse
• Analyze aggregate usage trends to improve diagnostic quality

We do not sell your personal information to third parties. We do not use your diagnostic conversations to train AI models without your explicit consent.

We retain your account and conversation history for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g., billing records).

We use the following third-party services to operate HVAC Copilot:

• Anthropic — powers the AI diagnostic engine. Messages are processed by Anthropic's API under their privacy policy.
• Neon — cloud PostgreSQL database where account and conversation data is stored.
• Resend — transactional email delivery.
• Sentry — error monitoring. Sentry may receive technical error data including anonymized request context to help us diagnose and fix issues.
• Stripe — payment processing. We do not store payment card details.
• Vercel — application hosting and infrastructure.

We use industry-standard security practices including hashed passwords (bcrypt), HTTPS-only connections, and HTTP-only session cookies. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Request a copy of your conversation history

To exercise any of these rights, email us at support@chathvac.ai.

We use a single HTTP-only session cookie to keep you signed in. We do not use advertising cookies or third-party tracking pixels.

HVAC Copilot is intended for use by professional HVAC technicians and is not directed at anyone under 18. We do not knowingly collect information from minors.

We may update this policy as the service evolves. We will notify you of material changes via email or a notice within the app. Continued use after the effective date of changes constitutes acceptance.

Questions about this policy? Email us at support@chathvac.ai.