HVAC Opportunity Platform

HVAC opportunities in Slack

Privacy Policy

Last updated: July 13, 2026

This policy describes how HVAC Opportunity Platform ("we", "us") collects, uses, and protects information when you use our web application and Slack app.

Information we collect

  • Account data: name, email address, organization membership, and role when you sign in to the web console.
  • Slack workspace data: workspace (team) ID, workspace name, bot installation tokens, Slack user IDs you link in Admin, and messages or commands you send to our Slack bot.
  • Operational data: property addresses, permit-based opportunity records, scheduling notes, and appointment details created through the platform.
  • Google Calendar (optional): if you connect Google Calendar, we store OAuth refresh tokens and your Google account email to create calendar events and send invites.
  • AI assistant: text you send to @hvac or the web assistant is sent to our LLM provider (Groq) to generate replies. We send only the minimum context needed to answer your request.

How we use information

  • Provide opportunity discovery, scoring, scheduling, and Slack interactions.
  • Link your Slack identity to your organization account.
  • Create calendar events when you schedule visits (if Google Calendar is connected).
  • Operate and improve the service, including security monitoring and support.

What we do not do

  • We do not sell your personal information.
  • We do not use Slack message content to train machine learning models.
  • We do not export or back up your Slack workspace message history.

Third-party services

  • Slack: authentication, bot messaging, and workspace installation. Subject to Slack's terms.
  • Google Calendar (optional): calendar event creation. Subject to Google's privacy policy.
  • Groq (optional): AI assistant responses. Messages are processed per request and governed by Groq's terms and data handling policies.

Data retention

We retain organization and opportunity data while your account is active. When a Slack workspace uninstalls the app, we mark the installation inactive and stop using the associated bot token.

Security

We use industry-standard practices including encrypted transport (HTTPS), access controls, and organization isolation. Secrets such as OAuth tokens are stored server-side and are not exposed to other tenants.

Your choices

  • Disconnect Google Calendar from Admin or revoke access in your Google Account settings.
  • Uninstall the Slack app from your workspace at any time.
  • Contact us to request access, correction, or deletion of account data.

Contact

Questions about this policy: support@example.com or visit our support page.