Privacy Policy
Greater Victoria Heat Pumps. Last updated 2026-09-17.
Who we are
Greater Victoria Heat Pumps is operated by QQAI.AI INC.. Privacy contact: Privacy Officer, QQAI.AI INC., reached through the privacy contact form below. No personal email, phone number or address is published.
What we collect
Tool inputs (home size, current heating, ducts, electrical panel, income band if you choose to give it, quote details) are processed to produce results and are not tied to you unless you submit a request. Photos and quote documents are analysed once and not stored. When you submit a request we store your name, email and/or phone, postal code, homeowner status, timing, project type, the tool results you were viewing, attribution (landing page, referrer, campaign tags) and your consent record.
Calling or texting us
Our phone number is answered by an automated assistant, not a person. When you call, you hear this before anything else: that you have reached an automated assistant, that we are an independent information service and not a heat pump company, and that the call is recorded and transcribed so we can answer your questions and, only if you ask, pass your details to one vetted local heat pump installer. If you prefer not to be recorded, hang up and use the web form instead. When you text us, replies come from the same automated assistant. Reply STOP at any time to end texts; reply HELP for help. The assistant never diagnoses your home, quotes prices or promises that an installer is available; it is not an emergency service.
Photos you text us
Photos are analysed once to describe what is visible, in hedged language, and are then deleted from our messaging provider. We keep the written observations, not the photos. Please do not include people in photos.
Consent records
We record which consent text you agreed to (version 2026-09-11.v1), the time of submission and the page it was given on. We currently send no marketing email and no automatic estimate or summary email; a request only notifies the operator so a person can review it. If that changes, it will require a separate, optional consent.
IP addresses
We do not store IP addresses with requests. The privacy contact form uses the connecting IP transiently, in memory only, to rate-limit abuse; it is not written to any record.
How we use it
To show and, if you ask, text you your results, to pass your request to one vetted local installer only when you ask for that and say yes, to check whether you were contacted, and to improve the site using aggregate, anonymised data.
Sharing
Only with the one installer you asked us to contact, after your explicit consent, and only the details needed to quote (name, contact method, postal code, project details and the tool summary). On the phone or by text we ask you to confirm at that moment before anything is shared. We do not sell lists. If no verified provider is active for your area, your request is held by us and not shared.
Processing location
Canada and the United States (Vercel edge/serverless; email and AI providers hosted in the US). Information processed in the United States may be accessible to authorities there under US law. We remain responsible for it under BC's Personal Information Protection Act and PIPEDA, and our contracts with these providers restrict their use of it.
Retention
Requests are kept while the project is active and for up to 24 months for reporting, then anonymised or deleted. Phone and text channel: structured facts, a short summary of each call or conversation, your consent choices and the outcome for 12 months after your request is closed (consent records 3 years); the text of your messages for 90 days after our last contact; raw call transcripts for 7 days; call audio is not kept by us and voicemail audio is deleted from our provider after 30 days.
Your rights
Use the privacy contact form to request a copy, correction or deletion of your data, or to withdraw consent; we respond within 30 days. Under BC's Personal Information Protection Act you may also complain to the Office of the Information and Privacy Commissioner for BC.
Security
HTTPS everywhere; access to lead data limited to the site operator and named processors; no photos or quote documents are stored (photos sent by text are analysed once and deleted from our messaging provider).
Privacy or security incidents
Report them through the privacy contact form (choose “Report a privacy or security concern”).
Cookies and analytics
We use session storage to remember how you arrived (landing page, referrer, campaign tags) and an anonymous session id for first-party analytics events. Analytics events never include your name, email, phone, photos or quote contents. No advertising cookies.
Privacy contact
Privacy Officer, QQAI.AI INC. — Open the privacy contact form
Data processors
| Processor | Purpose | Region |
|---|---|---|
| Vercel | Hosting, serverless functions, edge network | US/global |
| Resend | Transactional email delivery (if configured) | US |
| Supabase | Lead and application storage (if configured) | Configured project region |
| Anthropic | One-time analysis of uploaded or texted photos and quote documents; drafting the automated assistant's text replies. Data handling is governed by the provider's API terms; no personal information is used to train models; we do not retain the files. | US |
| Twilio | Our phone number: inbound calls, voicemail and its transcription, SMS/MMS transport. Texted photos are deleted from Twilio right after analysis; voicemail audio is deleted after 30 days. | US |
Uploaded photos and quote documents are sent to the AI provider for one-time analysis under that provider's API terms and are not retained by us. We do not make claims about the provider's internal training practices beyond those terms.