Privacy Policy

Last updated: October 11, 2026 · Version 2.0

1. Who we are and what this policy covers

This policy explains what personal information POCAD collects, why, who it is shared with, and the choices you have. It covers every part of POCAD.

• POCAD Remodeling Inc. ("POCAD", "we", "us") provides the HVAC services, sells through the POCAD Shop, runs the POCAD Rewards Network and the Partner Program, and decides how your information is used. Florida Document No. P23000021686 · 1030 NW 9 Ave, Fort Lauderdale, FL 33311 · contact@pocadair.com · (754) 317-1764.
• Zul Spot LLC ("Zul Spot") owns the POCAD Platform software, the POCAD apps and ClimaScore™, and licenses them to POCAD. Zul Spot operates the software for POCAD and processes information only on POCAD's instructions.

What it covers

It also covers people who never create an account but whose information we hold: people who contact us or book online, and homeowners and organizations we reach through public records (section 2.8).

POCAD serves Broward, Miami-Dade and Palm Beach Counties, Florida. Our services are for adults: you must be 18 or older to create an account or book a service.

2. Information we collect

We collect what you give us, what our team records while serving you, what your devices send automatically, and a limited set of public records. We do not collect Social Security numbers, and we never see or store full card numbers.

2.1 Account and contact information (all portals)

• Name, email, phone, street address, city, state and ZIP; account type; password (stored only as a one-way hash); referral code.
• Proof that you accepted these documents: date, version and IP address.
• Sign-in records: date, IP address, browser/device, and which portal you opened. One-time sign-in codes we send by email or WhatsApp.
• If you choose "Keep me signed in", a secure token stored as a hash with the device's IP address and browser.

2.2 Your home and HVAC systems (Client app)

• Properties, equipment details (brand, model, serial, tonnage, install year), nameplate photos, documents.
• Technician inspections and readings, visit and project history, walkthrough reports, photos of the property and equipment, notes, quotes, receipts and reports.
• ClimaScore™ values and history calculated from that data.
• Comfort questionnaire answers during sales assessments, which may include whether anyone in the home has allergies. Share this only if you want it considered in our recommendation.
• Messages and support requests you send us, and photos you attach.
• Questions you ask the AI HVAC Companion and its answers.
• Testimonials you submit, with your star rating and comments.

2.3 Household members

An account owner can invite up to 3 people to share their home. We collect each invitee's name, phone and email. The invite shows the owner's name and street address. Members see the home's systems, visits and documents, and the permissions the owner gives them (booking, approving quotes).

2.4 Bookings, contact forms and the ClimaScore page

• Online booking: name, phone, email, address and ZIP, notes, up to 4 photos, referral code, IP address and browser. When we confirm your visit we create your free POCAD account and send you a link to set your password.
• Contact form: name, email, phone and your message.
• ClimaScore sign-up and guest AI chat: name, email, phone, ZIP, reason for contact, your consent to be contacted, and your questions to the AI assistant with your IP address.
• Service-area waitlist: name, phone or email, ZIP, city and county.

2.5 Payments and the POCAD Shop

• Payment records: amount, date, method, what it paid for, and the IDs our payment processor gives us. Card and financing details are entered on Stripe's page and never reach our servers.
• Zelle: the receipt screenshot you upload, which shows the sender, recipient, amount and date.
• Shop orders: items, prices, billing and shipping name and address, delivery choice, filter sizes, return requests, and photos and checklists from filter-delivery visits.
• Membership plan, billing period, renewal and cancellation status.

2.6 POCAD Rewards Network (PRN) members

• Application: verified phone number, optional social profile link, how you describe yourself (realtor, property manager, etc.) and your referral plan.
• Your referral code and link activity, the people who join or book through your link, rewards, points, level, payouts (method and reference) and acceptance of the program rules.
• To pay rewards we ask for IRS Form W-9. We store it in protected storage, only owners and managers of POCAD can open it, and we use it only for tax reporting.

2.7 Partners, contractors and partner technicians

• Business profile: company name, license number, business phone and email, service area, website, bio and logo.
• Team member accounts: name, email, phone, sign-in time and IP address.
• Jobs and projects submitted to POCAD (addresses, descriptions, photos, plans), payment receipts, walkthroughs and reports.
• Contractor clients: HVAC contractors on a paid plan can keep their own clients on POCAD (names, contacts, addresses, systems, quotes, signed agreements with typed name, time, IP address and browser). The contractor controls that data; POCAD stores and processes it for them (section 4.4).

2.8 Information from public records (people without an account)

To plan mail and door-to-door outreach in our service area, we use public records:

• County property records (Broward, Miami-Dade, Palm Beach): owner name, property and mailing address, year built, and map location of the property.
• Building permits published by counties and cities: permit dates, equipment and contractor details, from which we estimate the age of an AC system.
• Florida DBPR licensing data and Florida Department of Education directories: business, association and school contact details.

We do not call or text homeowners found this way. We contact them only by mail or in person until they contact us. We exclude owners whose records are confidential under Florida law. To stop all outreach, see section 9.

2.9 Staff

Information about POCAD employees is covered by our internal employee notice, not this policy.

2.10 Collected automatically

• Device and connection data: IP address, browser and device type, pages visited, the site that referred you, and ad or referral codes in links you followed.
• Email engagement: whether you opened a POCAD email and which links you clicked.
• App push tokens if you allow notifications.
• In the POCAD apps, your device's location only when you use a feature that needs it (staff route planning, nearby leads). Face ID never leaves your device.

We do not use Google Analytics, Meta Pixel or other third-party advertising trackers.

3. How we use information

We use your information to provide what you asked for, run the platform safely, and tell you about POCAD. We do not sell or rent personal information, and we do not share it for third-party advertising.

What other people can see

• POCAD staff see what they need for their role. Technicians see the jobs they are assigned to.
• Household members see the shared home's information (section 2.3).
• PRN members see, for the people they referred: name, the date they joined, whether they qualified, and whether they have a project with POCAD. For online bookings, they see the first name, last initial and city. They never see your address, phone, prices or payments.
• Partners see a client's property, systems, projects, quotes and documents only after the client accepts their access request or POCAD approves it. When searching for a property, a partner sees only the owner's initials. Clients can ask us to remove a partner's access at any time.
• The public sees testimonials you submit, after POCAD approves them, with your name and rating.

4. AI features, sharing and service providers

4.1 AI features

POCAD uses Anthropic's Claude models to:

• answer questions in the AI HVAC Companion and the ClimaScore page chat;
• read equipment nameplate photos and fill in model and serial details;
• read Zelle receipt screenshots to match the amount, sender and recipient to your payment;
• help our staff read construction plans for estimates.

Only the content needed for that task is sent (for the Companion: your first name, your question and the last few messages). Anthropic processes it to return the result and, under its commercial terms, does not use it to train its models. Do not put card numbers, bank details or health information in AI chats. AI answers are informational only; see the Terms.

4.2 Service providers we use

These companies process information for us under contract and only for the purpose listed.

When you pay by Zelle, the transfer happens through your own bank. Links to Google Maps, Apple Maps, Google Reviews or social networks share nothing until you open them.

4.3 Other disclosures

• Subcontractors and suppliers who help complete your job or order receive what they need (for example your address and the job details).
• The law: when required by subpoena, court order or other legal process, or to protect people, property or our rights.
• Business transfer: if POCAD or the platform is merged, sold or financed, the new owner remains bound by this policy.
• With your direction: for example, when you accept a partner's access request.

4.4 Contractor client data

When an HVAC contractor stores its own clients on POCAD, the contractor owns that data and decides how it is used. POCAD processes it only to provide the contractor's tools: storing it, generating the contractor's documents, and sending emails under the contractor's name. We do not market to contractor clients or share their data with other partners. Contractor clients should contact the contractor about their information; the contractor is responsible for giving them its own privacy notice.

5. Messages we send and your choices

We reach you in the app, by email, WhatsApp and push notification. POCAD does not currently send carrier text messages (SMS).

• Service messages (visit confirmations and reminders, quotes, payment receipts, sign-in codes, security alerts) are part of the service. Receipts and security messages are always sent by email.
• News and offers by email and WhatsApp are included when you accept our Terms, unless you choose “Don’t send me offers”. Every marketing email has an unsubscribe link.
• Your controls: turn each channel and topic on or off in your app's Notification settings; reply STOP to any WhatsApp message (START to resume); use the unsubscribe link in any marketing email; turn off push in your device settings.
• Message and data rates from your carrier may apply. You can stop news and offers at any time and still use every service and make any purchase.

6. Cookies and similar technologies

We use only first-party cookies and browser storage. Third-party sites embedded in our pages (fonts, videos) may receive your IP address as described in section 4.2.

The cookie banner lets you accept all or keep essential only. Essential only turns off pocad_prn and pocad_src. We also count visits without cookies, using a code that changes daily and cannot identify you.

7. How long we keep information

After these periods we delete or anonymize the information.

8. Security

We use encrypted connections (HTTPS), hashed passwords, sign-in codes, device pairing and Face ID for staff, role-based access, access logs, and protected storage for files: private photos, receipts and documents open only for the account they belong to and authorized staff, or through a link that expires. Card data stays with Stripe. No system is perfectly secure; if a breach affects your information, we will notify you as Florida law requires (Fla. Stat. § 501.171).

9. Your rights

You can ask us to:

• access or get a copy of your information;
• correct it;
• delete it. You can delete your client account yourself in the app (Profile → Delete account): we cancel any subscription, remove your contact details, address, AI chats and sign-in data, and keep only the records in section 7 that the law requires;
• stop marketing, including all mail and door-to-door outreach from public records;
• remove a partner's access to your home.

Email contact@pocadair.com or call (754) 317-1764. We may verify your identity first and will answer within 30 days. We will not treat you differently for using these rights.

10. Children

POCAD is not for children. We do not knowingly collect information from anyone under 18. If you think a child gave us information, contact us and we will delete it.

11. Changes to this policy

When we make important changes we will update the date at the top, show a notice in the apps, and ask you to accept the new version the next time you sign in.

12. Contact

POCAD Remodeling Inc. · 1030 NW 9 Ave, Fort Lauderdale, FL 33311 · contact@pocadair.com · (754) 317-1764 · pocadair.com