Privacy Policy

Account information. Your name, email address, and password (stored as a secure hash — we never see or store your plain-text password).

Company workspace data. What you and your team enter to run your business: company profile, customers, jobs, estimates, invoices, payments, expenses, time entries, technicians, schedules, notes, and uploaded files like receipts and photos.

Usage information. Basic technical logs (IP address, browser type, pages visited, errors) used to keep the service secure and reliable.

We use your data to provide the service — running your dispatch board, generating your invoices, sending the notifications you configure — and to fix problems, prevent abuse, and improve the product. We do not sell your data or your customers' data. Ever.

We rely on a small set of infrastructure providers to run Altair OS: Supabase (database and file storage), Vercel (application hosting), Stripe (payment processing — card details go directly to Stripe and we never store card numbers), OpenAI (powers optional AI drafting features, using only the content needed to generate the draft), and Meta (only if you connect your Facebook Page or Instagram account, and only to publish the posts you approve). Each provider processes data solely to deliver their service to us.

The signed-in application uses only the cookies it needs to keep you logged in and to protect your session; it sets no advertising or analytics cookies. Our public marketing pages (this site, not the app) use the Meta Pixel so we can tell which of our videos and ads bring people here. It records the marketing page you viewed and standard browser information, and it is never loaded on the application itself or on the estimate-approval and invoice-payment links your customers receive. You can block it with a browser tracking blocker or through your Meta ad settings. We do not sell or share your data with Meta for any other purpose.

We also measure how people use altair-op.com and the app with our own first-party analytics. We record the pages you view, the site or campaign link that brought you here, and your device type, linked to a random identifier stored in your browser. When you are signed in, the pages you use in the app are linked to your account so we can see which features are used, and when you create an account we keep the link that first brought you to us with it. Our analytics do not use cookies, do not record your IP address, and are never shared with advertising or analytics companies. If your browser sends Global Privacy Control or Do Not Track, we do not record your visit. We delete these records after 25 months.

You may store your own customers' contact details and service history in Altair OS. That data is yours: we process it only by operating the software on your instructions, and we never contact your customers or use their information for our own purposes.

Your data stays in your workspace while your account is active. If you cancel, you can export your data first; we delete workspace data within 60 days of account closure, except where the law requires us to keep records longer.

Access to production systems is limited and authenticated. Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Connected-account tokens (like your Facebook Page connection) are stored encrypted.

You can update your company profile and settings at any time, disconnect social accounts at any time, and request a copy or deletion of your data by emailing us.

Questions about this policy: altairhvac@gmail.com. We'll post any material changes to this page and update the effective date.