Greater VictoriaHeat Pumps

Privacy Policy

Greater Victoria Heat Pumps. Last updated 2026-09-17.

Who we are

Greater Victoria Heat Pumps is operated by QQAI.AI INC.. Privacy contact: Privacy Officer, QQAI.AI INC., reached through the privacy contact form below. No personal email, phone number or address is published.

What we collect

Tool inputs (home size, current heating, ducts, electrical panel, income band if you choose to give it, quote details) are processed to produce results and are not tied to you unless you submit a request. Photos and quote documents are analysed once and not stored. When you submit a request we store your name, email and/or phone, postal code, homeowner status, timing, project type, the tool results you were viewing, attribution (landing page, referrer, campaign tags) and your consent record.

Calling or texting us

Our phone number is answered by an automated assistant, not a person. When you call, you hear this before anything else: that you have reached an automated assistant, that we are an independent information service and not a heat pump company, and that the call is recorded and transcribed so we can answer your questions and, only if you ask, pass your details to one vetted local heat pump installer. If you prefer not to be recorded, hang up and use the web form instead. When you text us, replies come from the same automated assistant. Reply STOP at any time to end texts; reply HELP for help. The assistant never diagnoses your home, quotes prices or promises that an installer is available; it is not an emergency service.

Photos you text us

Photos are analysed once to describe what is visible, in hedged language, and are then deleted from our messaging provider. We keep the written observations, not the photos. Please do not include people in photos.

Consent records

We record which consent text you agreed to (version 2026-09-11.v1), the time of submission and the page it was given on. We currently send no marketing email and no automatic estimate or summary email; a request only notifies the operator so a person can review it. If that changes, it will require a separate, optional consent.

IP addresses

We do not store IP addresses with requests. The privacy contact form uses the connecting IP transiently, in memory only, to rate-limit abuse; it is not written to any record.

How we use it

To show and, if you ask, text you your results, to pass your request to one vetted local installer only when you ask for that and say yes, to check whether you were contacted, and to improve the site using aggregate, anonymised data.

Sharing

Only with the one installer you asked us to contact, after your explicit consent, and only the details needed to quote (name, contact method, postal code, project details and the tool summary). On the phone or by text we ask you to confirm at that moment before anything is shared. We do not sell lists. If no verified provider is active for your area, your request is held by us and not shared.

Processing location

Canada and the United States (Vercel edge/serverless; email and AI providers hosted in the US). Information processed in the United States may be accessible to authorities there under US law. We remain responsible for it under BC's Personal Information Protection Act and PIPEDA, and our contracts with these providers restrict their use of it.

Retention

Requests are kept while the project is active and for up to 24 months for reporting, then anonymised or deleted. Phone and text channel: structured facts, a short summary of each call or conversation, your consent choices and the outcome for 12 months after your request is closed (consent records 3 years); the text of your messages for 90 days after our last contact; raw call transcripts for 7 days; call audio is not kept by us and voicemail audio is deleted from our provider after 30 days.

Your rights

Use the privacy contact form to request a copy, correction or deletion of your data, or to withdraw consent; we respond within 30 days. Under BC's Personal Information Protection Act you may also complain to the Office of the Information and Privacy Commissioner for BC.

Security

HTTPS everywhere; access to lead data limited to the site operator and named processors; no photos or quote documents are stored (photos sent by text are analysed once and deleted from our messaging provider).

Privacy or security incidents

Report them through the privacy contact form (choose “Report a privacy or security concern”).

Cookies and analytics

We use session storage to remember how you arrived (landing page, referrer, campaign tags) and an anonymous session id for first-party analytics events. Analytics events never include your name, email, phone, photos or quote contents. No advertising cookies.

Privacy contact

Privacy Officer, QQAI.AI INC. — Open the privacy contact form

Data processors

Third parties that process data on our behalf
ProcessorPurposeRegion
VercelHosting, serverless functions, edge networkUS/global
ResendTransactional email delivery (if configured)US
SupabaseLead and application storage (if configured)Configured project region
AnthropicOne-time analysis of uploaded or texted photos and quote documents; drafting the automated assistant's text replies. Data handling is governed by the provider's API terms; no personal information is used to train models; we do not retain the files.US
TwilioOur phone number: inbound calls, voicemail and its transcription, SMS/MMS transport. Texted photos are deleted from Twilio right after analysis; voicemail audio is deleted after 30 days.US

Uploaded photos and quote documents are sent to the AI provider for one-time analysis under that provider's API terms and are not retained by us. We do not make claims about the provider's internal training practices beyond those terms.