Privacy policy

Who we are

HomPilot operates the HomPilot platform (hompilot.com and app.hompilot.com): business management software and an AI receptionist, Maya, for home service companies.

Person in charge of the protection of personal information: Alexandre Somma, reachable at hello@hompilot.com.

Our role

For the accounts of our business customers and their users, HomPilot decides how the information is used.

For information about those businesses’ customers (people who call, text or book), HomPilot acts on behalf of the business concerned, which remains responsible for it. Those people may contact the business or us; we forward requests when needed.

Information we collect

• Account and business: name, email, phone, role, business name and contact details, settings, subscription information.
• Customers of businesses: name, phone, email, home address, request details, appointments, quotes, invoices and payments, information about home equipment (HomPassport).
• Communications: recordings and transcripts of calls handled by Maya, texts and emails exchanged with the business.
• Technician location: only after the technician’s consent, while travelling to a customer; locations are deleted after 7 days.
• Technical data: security and operational logs. Our website uses no advertising cookies or advertising tracking tools.

How we use information

• To provide the service: answer calls and texts, book appointments, prepare quotes and invoices, collect payments, send confirmations and reminders.
• To keep the service secure, prevent fraud, fix errors and support our customers.
• To meet our legal obligations.
• We do not sell personal information.

Google data (Google Business Profile)

When a business administrator chooses “Connect Google” in HomPilot, they authorize HomPilot to access their Google Business Profile (the “business.manage” permission).

• Data obtained: the list of business accounts and profiles the Google account can manage (name, address, Google profile identifiers, Google Maps link and review link), and the reviews and rating of the selected profile.
• Use: only to link the profile to the business in HomPilot, display its reviews and rating (for example on quotes), prepare review requests sent to the business’s customers and check that the connection works.
• What we never do: sell this data, use it for advertising, for credit assessment or to train artificial intelligence models, or share it with third parties, except service providers needed to run the service, on the business’s instructions, or when required by law.
• Security: Google access tokens are encrypted (AES-256) and used only by our servers; they are never sent to the browser. Only authorized staff can access them, and only for security, support requested by the business or a legal obligation.
• Withdrawal: the business can disconnect Google at any time in HomPilot (Settings › Integrations) or remove access in its Google account (myaccount.google.com/permissions). Disconnecting revokes access at Google and immediately deletes the tokens kept by HomPilot.
• HomPilot’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers and hosting locations

We rely on providers that use information only to serve us, including: hosting and database (Supabase, Vercel, Amazon Web Services for backups), telephony and texting (Twilio), voice agent (Retell AI), artificial intelligence (Google Gemini, Anthropic), email (Resend), payments (Stripe), maps and addresses (Mapbox, Google Maps Platform).

Some of these providers host information outside Quebec, including in the United States. Before sharing information outside Quebec, we assess the protection offered and govern these transfers by contract.

Retention

We keep information for the duration of the business customer’s subscription, then for as long as needed for the intended purposes or required by law. We then destroy or anonymize it. A business may request deletion of its data when its subscription ends.

Security

We apply reasonable measures: encryption of communications and sensitive data, access control by business and role, logging and backups. If a confidentiality incident presents a risk of serious injury, we notify the people concerned and Quebec’s Commission d’accès à l’information.

Your rights

You may request access to your information, its correction, deletion or transfer in a structured technological format, and withdraw your consent. Write to hello@hompilot.com; we reply within 30 days. If you are not satisfied with our answer, you may contact the Commission d’accès à l’information du Québec.

Changes

We may update this policy. The update date appears at the top of this page; we inform business customers of significant changes.