Privacy Policy

HVQuote is a quoting tool for HVAC contractors. This policy explains what personal information we collect when you use HVQuote, how we use it, and your rights around it. We keep this simple — we collect only what we need to provide the service.

Account information. When you sign up, we collect your email address and the password you create (stored as a secure hash — we never see your actual password).

Business information. Information you enter in Settings: your business name, phone number, email address, mailing address, and website. This appears on proposals you send to customers.

Quote and customer data. The quotes you build and the customer records you create — names, email addresses, phone numbers, service details, and pricing. This is the core data of the service.

Payment information. If you connect Stripe to accept card payments, Stripe handles all card data directly. We store only your Stripe account ID — never card numbers or banking details.

We use the information we collect exclusively to operate and improve HVQuote:

• Authenticating your account and keeping your data secure
• Generating and delivering professional proposals to your customers
• Sending transactional emails — quote delivery notifications and payment confirmations (via Resend)
• Processing your subscription payments (via Stripe)
• Providing customer support when you contact us

We do not sell your data, share it with advertisers, or use it for any purpose outside of providing HVQuote.

HVQuote is built on the following infrastructure providers. Each has its own privacy practices.

Supabase — stores all application data (accounts, customers, quotes) in a PostgreSQL database hosted on AWS infrastructure. Data is encrypted at rest and in transit.

Stripe — handles all payment processing. If you use Stripe Connect, your customer card payments are processed directly by Stripe on your connected account. We never touch card data.

Resend — sends transactional emails on our behalf, including quote delivery notifications and payment confirmations.

Twilio — sends SMS notifications on our behalf, such as appointment reminders and job status updates.

Anthropic — powers the AI quote drafting feature. Quote content you enter may be sent to Anthropic's API to generate suggested line items. Anthropic does not use this data to train its models.

Your data is retained for as long as your account is active. If you close your account, we will delete your data within 30 days upon written request to hello@hvquote.com. Proposal pages sent to customers may remain accessible via their direct link until you request deletion.

All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Access to your data is restricted by row-level security policies — only your account can read or write your records. We take reasonable precautions, but no system is perfectly secure and we cannot guarantee absolute security.

You can export or delete your data at any time by contacting us. If you are in the EU or UK, you have additional rights under GDPR, including the right to access, correct, or port your data. Email us and we will respond within 30 days.

If you are located in Canada, you have rights under PIPEDA (Personal Information Protection and Electronic Documents Act), including the right to access your personal information, request corrections, and withdraw consent for its use.

HVQuote contractors store personal information about their customers — names, email addresses, phone numbers, and service history — in order to create quotes and manage jobs.

If you are a homeowner or customerwho received a quote through HVQuote and you would like your personal data deleted, contact the contractor who sent you the quote directly. Contractors can delete your data from their account at any time using the “Delete Customer” function in their HVQuote dashboard, which permanently removes your name, contact information, quotes, and job history.

If you are unable to reach the contractor, or if you have concerns about how your data is being handled, contact us at privacy@hvquote.com and we will assist you directly. We will respond within 30 days.

If you are a contractor and want to delete your own account, go to Settings → Data & Privacy → Delete my account. This permanently deletes all your business data including all customer records, quotes, jobs, and invoices, and immediately cancels your subscription.

We may update this policy as the service evolves. We will notify active users by email before material changes take effect. The date at the top of this page always reflects the most recent revision.

Questions about this policy? hello@hvquote.com