Privacy Policy

This policy applies to visitors to the Hvaq website, account users, workspace administrators, dispatchers, platform administrators, mobile app users, and callers or end customers whose information is processed through a customer's Hvaq workspace.

In many cases, the home service company using Hvaq controls why and how caller and customer information is processed. Hvaq processes that information to provide the service configured by that customer.

• Operate the AI receptionist, answer calls, qualify requests, capture caller details, route calls, create bookings, and generate summaries.
• Configure the receptionist prompt around the customer's business profile, service catalog, trades, service area, hours, emergency handling, and booking rules.
• Create or prepare jobs, clients, service requests, calendar events, booking links, customer records, review tasks, notifications, and provider sync records.
• Provide dashboards, analytics, call history, customer history, review workflows, usage reporting, billing, add-on management, and mobile app features.
• Send customer-facing and business-facing communications such as confirmations, reminders, replies, billing notices, support messages, and operational alerts.
• Protect the platform, enforce access controls, detect abuse, troubleshoot integrations, verify webhooks, maintain audit records, and improve safety and reliability.
• Develop and improve AI prompts, call handling, service eligibility, review rules, analytics, documentation, and support workflows.

Hvaq uses AI and voice technology to answer calls, understand caller requests, follow configured business rules, summarize calls, identify review needs, and support booking workflows. Call transcripts, summaries, structured intake fields, confidence signals, and recordings or recording links may be stored so the business can review what happened and improve operations.

AI outputs can be incomplete or incorrect. Customers should review call records, booking decisions, urgent requests, low-confidence calls, and provider sync failures. Hvaq is not a replacement for emergency services, licensed trade advice, or human judgment.

If enabled by the customer, Hvaq may send or help send booking confirmations, reminders, replies, missed-call responses, outbound follow-up calls, billing messages, support messages, webhook updates, and mobile or browser notifications. Message content, delivery status, replies, opt-out signals, quiet-hour settings, and sender labels may be processed to operate those features.

Customers are responsible for configuring communications lawfully, honoring consent and opt-out requirements, and making any required disclosures to callers and message recipients.

Third-party services have their own privacy and security practices. When a customer connects or uses a third-party provider, that provider may process information under its own terms. Examples include Supabase for authentication and data storage, Retell for voice services, Stripe for web billing, RevenueCat for mobile billing, Resend for email, Google services for analytics or calendar features, and connected field-service or scheduling providers.

Hvaq uses access controls, organization membership checks, administrative role checks, webhook verification, encrypted token storage where supported, transport security, audit records, and operational monitoring to protect platform data. OAuth tokens and sensitive provider credentials are encrypted at rest when the required encryption keys are configured.

No system is perfectly secure. Customers should use strong account credentials, restrict user access to authorized staff, keep provider credentials private, and promptly report suspected unauthorized access.

We retain information for as long as needed to provide the platform, support customer operations, maintain records, comply with legal or billing obligations, resolve disputes, improve reliability, and enforce agreements. Retention periods may vary by data type, customer configuration, provider settings, billing records, backup systems, and legal requirements.

A customer may request deletion or export of workspace data by contacting us. Some information may be retained where required for security, fraud prevention, billing, legal compliance, backup integrity, or legitimate business records.

• Account users can update many workspace settings directly in the platform.
• Customers can disconnect supported integrations from settings or from the third-party provider.
• Customers can manage Stripe billing through the billing portal and restore mobile purchases through the iOS app when applicable.
• Customers can request access, correction, export, or deletion of information by contacting Hvaq.
• Message recipients may use available opt-out methods for SMS where supported, and customers should honor any direct opt-out request they receive.

Hvaq is a business platform and is not intended for children. We do not knowingly collect personal information from children through the website or customer accounts.

Information may be processed in the United States or other locations where Hvaq or its service providers operate. By using the platform, customers understand that information may be transferred and processed outside the location where it was originally collected.

We may update this Privacy Policy as the platform, integrations, providers, or legal requirements change. The updated date above shows when this page was last revised. Continued use of the platform after an update means the revised policy applies going forward.

Privacy questions, data requests, or security concerns can be sent to hello@hvaq.pro.