Last updated: July 10, 2026
This policy explains how Ventoxy ("we", "us") collects, uses, and protects personal information when you use our HVAC CRM at ventoxy.com ("the Service"). It covers both information about you (our customer) and information you store about your own customers.
Account data: your name, email address, company name, and password (stored hashed).
Customer Data: records you create in the Service — customer contact details, job and equipment history, photos, notes, and estimates. This data belongs to you; we process it only to provide the Service.
Billing data: payments are processed by Paddle.com as merchant of record. We never see or store your full card details.
Usage data: log data such as IP address, browser type, and pages visited, used for security and to improve the Service.
We use your information to provide and improve the Service, process subscriptions, send transactional emails (signup confirmation, password resets, lead notifications), respond to support requests, and keep the Service secure. We do not sell personal information, and we do not use your Customer Data to train AI models.
AI follow-up drafts are generated by sending relevant job and customer context to Anthropic's Claude API. Anthropic processes this data to generate the draft and does not use API data to train its models.
We share data only with the subprocessors needed to run the Service: Supabase (database and authentication), Vercel (hosting), Paddle (payments and tax), Resend (transactional email), and Anthropic (AI drafting). Each processes data under its own security and privacy commitments.
We retain your data while your account is active. After account termination, data is retained for 30 days for export, then permanently deleted. You may request export or deletion of your data at any time by emailing support@ventoxy.com.
Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and authenticated. Passwords are hashed; we cannot read them. No system is perfectly secure — if we learn of a breach affecting your data we will notify you without undue delay.
Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact support@ventoxy.com. We respond within 30 days.
We use only essential cookies: authentication session cookies required to keep you signed in. We do not use advertising or cross-site tracking cookies.
We may update this policy; material changes will be announced by email or in-app notice. Questions: support@ventoxy.com