Privacy Policy

1. Introduction

AirTrack ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our HVAC maintenance management platform at airtrack.vercel.app and related services (collectively, the "Service").

By using AirTrack, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

Account information

When you create an account, we collect your email address, password (stored securely as a hash), and company name.

Customer data

We store the customer information you enter into AirTrack, including names, email addresses, phone numbers, addresses, equipment details, and service schedules. This data belongs to you and is used solely to provide the Service.

Usage data

We may collect information about how you access and use the Service, including your IP address, browser type, pages visited, and actions taken within the platform.

Payment information

Subscription payments are processed by Stripe. We do not store your credit card number or payment details — these are handled entirely by Stripe's secure payment infrastructure.

3. How we use your information

• To provide, maintain, and improve the Service
• To process your subscription payments via Stripe
• To send email reminders to your customers on your behalf (when you enable this feature)
• To send you account-related notifications and updates
• To respond to your support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

4. Data sharing

We do not sell, rent, or trade your personal information or your customers' data to third parties. We share data only with:

• Stripe — for payment processing
• Neon — our database provider, who stores your data securely
• Vercel — our hosting provider
• Resend — for sending reminder emails on your behalf
• OpenAI — when you use the AI email generation feature, customer data is sent to OpenAI to generate email drafts

All third-party providers are contractually obligated to protect your data and use it only to provide their services to us.

5. Data retention

We retain your account and customer data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or regulatory reasons.

6. Security

We implement industry-standard security measures to protect your data, including encrypted passwords, HTTPS connections, secure session management, and rate limiting to prevent unauthorized access. However, no method of transmission over the internet is 100% secure.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your customer data (via the CSV export feature)

To exercise any of these rights, contact us at the email below.

8. Cookies

We use cookies only for session management (keeping you logged in). We do not use tracking cookies or third-party advertising cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the app. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy, please contact us at: