Privacy Policy

1. Introduction

Aelric Technologies Inc. (“we”, “us”, “our”) operates HeatPumpLocator.com. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our website and services.

By using HeatPumpLocator.com, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Information We Collect

a) Information You Provide

• Email address — when creating an account, requesting an audit report, or submitting a lead request.
• Name and phone number — when requesting to be connected with a contractor.
• Home details — ZIP or postal code, square footage, electrical panel amperage, appliance data, and heating type (used for panel capacity calculations).
• Contractor registration information — company name, owner name, license number, service area, and contact information (for contractors listing their business).

b) Information Collected Automatically

• IP address — used for rate limiting and abuse prevention. Not stored long-term.
• Browser type and user agent — collected in server logs.
• Approximate location — derived from Vercel geo headers (country, region, city). This is IP-based geolocation, not precise GPS coordinates.
• Pages visited and features used — standard web server access logs.

c) Information from Third Parties

• Payment confirmation from Stripe — we receive confirmation that a payment was successful, including the email address associated with the payment. We do not receive or store credit card numbers, bank account information, or other financial credentials. All payment data is handled by Stripe and subject to Stripe's Privacy Policy.

3. How We Use Your Information

• Perform panel capacity calculations (NEC 220.82 / CEC Section 8-200).
• Generate and deliver PDF audit reports.
• Match you with licensed contractors in your area — only with your explicit consent.
• Process payments via Stripe.
• Send transactional emails (report delivery, lead confirmations, contractor notifications).
• Detect and prevent fraud, abuse, and security threats.
• Improve the accuracy and usability of our calculators and tools.
• Comply with legal obligations.

4. How We Share Your Information

Contractor Lead Sharing

When you request to be connected with a contractor, we share your name, email, phone number, ZIP/postal code, and audit result with verified contractors in your area. This sharing occurs only with your explicit consent. You may revoke this consent at any time by emailing info@heatpumplocator.com.

Third-Party Service Providers

We use the following third-party services to operate our platform:

• Stripe (San Francisco, CA) — payment processing
• Upstash (US) — data storage (Redis)
• Resend (US) — transactional email delivery
• Vercel (US) — website hosting and edge delivery

Each provider processes data only as necessary to provide their service and is subject to their own privacy policies.

We do not sell your personal information for monetary consideration. Lead sharing with contractors is performed only with your explicit consent and is not considered a sale.

5. Data Storage and Retention

All data is stored on servers in the United States via Upstash (Redis) and Vercel. We do not store credit card numbers, bank account information, or other financial credentials on our servers.

You may request deletion of your personal information at any time via our data deletion form or by emailing info@heatpumplocator.com.

6. Your Rights

6a. All Users

Regardless of where you are located, you have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Withdraw consent for lead sharing
• Request that we stop contacting you

To exercise any right, email info@heatpumplocator.com.

To request deletion of your personal data online, use our data deletion form. You will receive a confirmation link by email. The link expires in 1 hour.

6b. Canadian Residents (PIPEDA)

If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access, correct, and withdraw consent for the use of your personal information.

Our designated privacy officer can be reached at info@heatpumplocator.com.

If you believe your privacy rights have been violated, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

6c. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including:

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt out of the sharing of your personal information
• Right to non-discrimination for exercising your rights

Categories of personal information collected: identifiers, commercial information, internet activity, geolocation data, professional information (contractors only).

Categories of third parties: contractor partners (with consent), service providers (Stripe, Upstash, Resend, Vercel).

We will respond to verified requests within 45 days.

6d. European Residents (GDPR)

If you are a resident of the European Economic Area, we process your data based on:

• Contract performance — delivering audit reports you purchase
• Consent — sharing your information with contractors
• Legitimate interest — improving our services, preventing fraud

You have the right to access, rectify, erase, restrict processing, data portability, and object to processing. To exercise these rights, contact info@heatpumplocator.com.

Our data is stored on servers in the United States. By using our services, you acknowledge this transfer. We rely on our service providers' standard contractual clauses for lawful transfer.

7. Do Not Sell or Share My Personal Information

When you request to be matched with a contractor through HeatPumpLocator, we share your contact information with verified contractors in your area. Under the California Consumer Privacy Act (CCPA), this may constitute “sharing” of personal information.

You have the right to opt out of this sharing. To exercise this right:

• Email info@heatpumplocator.com with subject “Do Not Sell or Share”
• Include your name and email address
• We will process your request within 45 days

Opting out means you will not be matched with contractors through our platform. You can still use all free tools including the panel audit calculator, sizing calculator, savings calculator, and rebate finder.

This right applies to California residents under CCPA/CPRA. We extend the same right to all users regardless of location.

To request full deletion of your personal data (not just opt-out of sharing), use our data deletion form.

8. Cookies and Tracking

We use the following cookies:

• country_preference — stores your US/Canada selection. This is an essential cookie that requires no consent. Contains no personal information. Expires after 30 days.
• Session cookies — maintain your state during audit completion. Essential for service delivery.

We do not currently use advertising cookies or third-party tracking pixels. Stripe may set cookies during payment processing, subject to Stripe's Privacy Policy.

If we add analytics in the future, we will update this policy and implement a cookie consent mechanism before activating non-essential cookies.

9. Data Security

We implement industry-standard security measures:

• All data transmitted via HTTPS/TLS encryption
• API endpoints protected by rate limiting
• Admin access protected by authentication
• Payment processing handled entirely by Stripe (PCI DSS compliant)
• Regular security audits of our codebase

No system is 100% secure. We cannot guarantee absolute security of your information. If you discover a security vulnerability, please report it responsibly to info@heatpumplocator.com.

10. Data Breach Notification

In the event of a data breach that poses a real risk of significant harm:

• Canadian residents: We will notify the Office of the Privacy Commissioner and affected individuals as required by PIPEDA.
• California residents: We will notify affected individuals as required by Cal. Civ. Code §1798.82.
• European residents: We will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33.
• All users: We will notify affected individuals as soon as reasonably practicable.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at info@heatpumplocator.com.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Your continued use of the website after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact