Privacy Policy

Information we collect

• Contact form submissions

  When you submit a service request, we collect your name, phone number, optional email address, city, and the message you write.

• Admin accounts (employees only)

  For authorized admins, we store a username / email and hashed password via our authentication provider.

• Connected social accounts (admin only)

  When an admin connects a Facebook Page or YouTube Channel, we store an OAuth access token that allows us to publish posts on your behalf. No personal data from your social followers is collected or stored.

How we use information

• Respond to service requests by phone, SMS, or email.
• Schedule appointments and track follow-ups internally.
• Post marketing content to connected social channels at your direction.

We do not sell or rent personal information to third parties.

Third-party processors

We rely on the following services to operate the site:

• Supabase— database + authentication
• Resend— outbound transactional email
• Twilio— outbound SMS notifications
• Vercel— site hosting
• Meta Platforms— when a Facebook Page is connected, for publishing only
• Google— when a YouTube Channel is connected, for publishing only

Each processor receives only the information required to perform its service.

SMS communications

We operate an internal SMS notification program that sends lead alerts from our website contact form to authorized personnel at Double Le Heat and Air. Recipients of this program are limited to our own staff who have provided express written consent to receive these messages.

Mobile phone numbers and SMS opt-in information collected for this program are used solely to deliver these notifications. We do not share, sell, rent, or transfer mobile numbers or SMS opt-in data to any third party or affiliate for marketing or promotional purposes. The only third party that processes this data is our SMS delivery provider, Twilio, and only for the purpose of delivering the message itself.

Recipients can stop messages at any time by replying STOP or get help by replying HELP. Full disclosures, frequency, and cost information are available on our SMS Terms page.

Data retention

• Contact form records are retained for up to 7 years for service-history purposes, then deleted.
• OAuth tokens for connected social accounts are retained until the admin disconnects the account in our admin dashboard.

Data deletion requests

To request deletion of your personal data, email doublelehvac@gmail.com with the subject line “Data deletion request” and include the phone number or email you originally contacted us with. We will confirm deletion within 30 days.

Admins can request immediate deletion of connected social account tokens by disconnecting the account in the Marketing admin or emailing us.

You can also visit our dedicated Data Deletion page for a quick-reference guide.

Children's privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will reflect the most recent revision.