App Privacy Notice
Last updated: October 2, 2026
This notice supplements the Su'Coy website privacy policy and explains how the Su'Coy booking site, customer portal and staff app handle your information. Where the two differ for something you do in the app, this notice applies.
This policy explains what personal information Su'Coy Heating, AC & Duct Cleaning ("Su'Coy", "we", "us") collects through this website, the customer portal and our staff app, why we collect it, and the choices you have. We do not sell your personal information.
Who we are
Su'Coy Heating, AC & Duct Cleaning100 M St SE #600, Washington, DC 20003
Phone: (301) 888-0037
Email: Info@sucoy-hvac.com
Send privacy questions or requests to the email or address above.
What we collect and why
| Where | What | Why |
|---|---|---|
| Booking form | Name, phone, optional email, service address, preferred time, notes, optional text-message consent | To schedule and perform the service you asked for and contact you about it |
| Website chat helper | The messages you type and any contact details you share | To answer your questions and turn requests into appointments |
| Customer portal account | Name, email, password (stored securely hashed), service history, equipment, estimates, invoices | To give you access to your records, approve estimates and pay invoices |
| Service visits | Equipment details, photos, readings, technician notes, signatures | To perform, document and warranty the work |
| Payments | Amount, invoice and payment status. Card details go directly to Stripe and never touch our servers. | To take payment and keep accounting records |
| Technical data | IP address, browser type, error logs | Security, fraud prevention and fixing problems |
Our legal bases are: performing a contract with you, our legitimate interest in running and securing the business, your consent (texts, optional cookies), and legal obligations (tax records). Please don't put sensitive information such as health or financial details in free-text boxes.
Who we share it with
We share information only with service providers who help us run the business, under contracts that limit their use of it:
- Stripe — card payments and fraud prevention
- Our app hosting and database provider — storing account and service records
- Our email delivery provider — invites, receipts and notifications
- AI providers — powering the chat helper and assistants. Chats may be AI-assisted and are stored.
- Fonts and our own servers deliver the site; we do not use third-party font or ad servers by default
We may also disclose information when required by law or to protect rights and safety. We do not sell personal information or share it for cross-context behavioral advertising. Analytics or marketing cookies are used only if you accept them in our cookie banner.
Text messages (SMS)
If you check the text-message box, we may send appointment reminders and service updates. Message frequency varies. Msg & data rates may apply. Reply STOP to cancel or HELP for help. Mobile numbers and text consent are never shared with third parties for their marketing. See our SMS Terms.
How long we keep it
- Booking requests that don't become customers: 24 months
- Customer, job, estimate and invoice records: 7 years (tax and warranty)
- Accounts: until you ask us to delete them, subject to records we must keep
- Chat transcripts: 12 months
- Server and error logs: up to 90 days
How we protect it
Data is encrypted in transit (HTTPS) and at rest, access is limited by role so staff only see what their job requires, and payments are handled by a PCI-compliant processor. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.
Your rights and choices
You may ask to see, correct, download or delete your personal information, and to opt out of texts, marketing email or optional cookies. Signed-in customers can export their data from account settings. Otherwise email Info@sucoy-hvac.com or call (301) 888-0037. We will verify your identity and respond within 45 days. We won't treat you differently for using these rights.
Do Not Track and Global Privacy Control
We honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information for advertising; marketing cookies stay off. Browsers' "Do Not Track" has no common standard; we treat it the same way by leaving optional tracking off until you choose otherwise.
Children
Our services are not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.
Cookies
See our Cookie Policy for the full list and how to change your choice.
Changes
We will post any changes here with a new "Last updated" date, and notify account holders of material changes by email or in the portal.