Privacy Policy
Last updated: September 30, 2026
Who We Are
TruFlo Mechanical LLC (“TruFlo,” “we,” “us,” or “our”) is a family-owned HVAC company based in Houston, Texas. Our website address is https://truflohvac.com. We are committed to protecting the privacy of visitors to our website and customers who use our services.
Information We Collect
This section lists every place on this website where we collect information, and what we collect there.
Contact form: When you fill out the form on our contact page, we collect your name, phone number, email address, the service you need, and your message. The form has two optional checkboxes. One is a text-message consent checkbox. The other is a preference for seasonal offers and promotions, which is an email preference only. We do not send promotional texts based on it. Your submission is sent to our office by email. That same email notes which of the two boxes you checked and which you left unchecked, together with the details listed under “Opt-in record” below, so we have a record of your choice either way. It is not posted publicly and it is not used for advertising.
Online booking: When you book an appointment on our booking page, we collect your service address (street, unit if you enter one, city, and ZIP code), your description of the problem, your name, your mobile number, your email address if you choose to give one, and the arrival window you pick. We verify your mobile number by texting you a one-time code, which you enter to finish booking. We also record the text-message consent you give on that form. Confirmed bookings are created as a job in Housecall Pro, the scheduling software we use to run our business, so the office and the technician can see the appointment. Separately, your consent record is emailed to our office as proof of the opt-in. There are two of those emails. We send the first when we text your verification code, and it contains your mobile number and the details of your consent, and notes that the number is not verified yet. We send the second once the booking is confirmed, and it adds your name and the booking reference and notes that the number was verified. Neither one contains your service address or your description of the problem. If you ask for a code and never finish booking, only the first email exists. While you are filling the form out, a draft of your entries is saved in your own browser for 24 hours so you do not lose your place. That draft stays on your device.
Changing or canceling a booking: After you book, we text you a link that lets you reschedule or cancel. That link contains a private code tied to your appointment. We do not save that code in your browser and we strip it out of anything sent to our analytics tools. Treat the link as private and do not forward it.
HVAC self-check tool: See the section below for what the self-check tool collects and how long it keeps it.
Phone calls: When you call us, our phone system logs your phone number and the time and length of the call. Calls to or from our office number may be recorded from the moment they are answered, and what is said may be turned into a written transcript by a speech-to-text service, starting when the call reaches our phone system. After hours, an automated assistant answers our office number. It uses speech-to-text to understand you, the call may be recorded, and it passes the details you give it to our staff and, for a service request, to Housecall Pro. We use recordings and transcripts to keep an accurate record of what was said, such as the problem you described and any appointment we agreed on. Our phone provider, Telnyx, stores the recordings; we have not set a deletion period for them. Transcripts and call details are kept in our call records database for 400 days after the call record was last updated. We also keep copies of recordings, transcripts and call details in private files and databases on a TruFlo computer. We do not have a fixed deletion schedule for those copies today. Our owner and office staff can listen to recordings and read transcripts, and the service providers that store or process them for us, such as our phone provider and our speech-to-text and database providers, also handle them. Our staff may also use AI tools, including ones run by outside providers, to search and summarize call records. To learn how many calls turn into service requests, we check whether the calling number matches a phone number in our customer records. For that check we keep only the last four digits of the number and a scrambled code made from the full number with a secret key, never the full number itself, and we use the result only to count how calls turn into customers. It is not used for marketing and it is not shared.
Tapping our phone number: When you tap our phone number on this site, our website also writes a short record of the tap: the page and the part of the page you tapped, and the campaign or website that sent you to us, if there was one. The record has no name, phone number, IP address or cookie, and we never link it to a particular call. We copy that record into TruFlo’s internal operations ledger, as described under “Hosting provider request log” below.
Google Ads call tracking: If you reach our site from one of our Google ads, the site may show a Google forwarding number in place of our office number. A call to that number passes through Google’s phone system and is then connected to our office number. Google logs when the call started, how long it lasted, whether it was answered and the caller’s area code, and for most calls longer than 15 seconds it also shows us the caller’s phone number. We use this to measure which of our ads bring in calls. Google does not record these calls. Visitors who did not come from a Google ad see our office number, and calls to our office number do not pass through Google. Because these calls reach our office number, our own recording and transcription, described under Phone calls above, apply to them too.
SMS / text messaging: If you give us your mobile number and opt in to receive text messages from TruFlo, we collect and store your mobile phone number, your opt-in record, your message history with us, and any preferences you set. The ways you can opt in are listed in the SMS section below.
Customer portal: Commercial customers with portal access sign in with a link we email to them. When you sign in, we set one cookie on your device to keep you signed in. No portal page activity is sent to any analytics tool. Google Analytics, Vercel Web Analytics, and Cloudflare Web Analytics do not measure portal pages.
Automatically collected information: Our public pages use three analytics tools: Google Analytics 4, Vercel Web Analytics, and Cloudflare Web Analytics. Google and Vercel record the pages you view, the page that referred you, an approximate location, and your device type, operating system, and browser. Both also record actions you take on the site. Google Analytics gets the longer list: tapping a phone number to call, selecting a call to action, following a link to another website, submitting the contact form, and moving through the steps of the booking flow or the self-check tool. Vercel Web Analytics gets five actions, each with one or two short labels: tapping a phone number to call (which part of the page the tap came from), sending us a request through a form (which form), a form failing to send (which form, plus a short technical label for the failure), selecting a call to action (which action and which part of the page), and following a link to another website (the address of that website and which part of the page). Nothing else is attached to those five. Cloudflare Web Analytics is described separately below. It counts visits and pages but does not record those action labels. We do not send your name, phone number, email address, or service address to any analytics tool.
IP addresses: We do not store your full IP address. Our servers use it briefly, in memory only, to limit abusive form submissions, and it is not written to a log or a database by us. Google Analytics and Vercel Web Analytics use it to work out an approximate location and then discard it, as described under “Approximate location” below. Cloudflare Web Analytics reports only your country. Cloudflare already sees your IP address on every request because our site runs behind its network, as described in the service provider table below.
Hosting provider request log: When an automated crawler (for example a search engine, an AI assistant, or another indexing service) requests a page, we write one line to our hosting provider’s log. Each line records the page requested, the site address used, the time, the request method, whether the request came from our own monitoring, and any campaign tags in the address (utm tags, a Google click ID, or a ref tag). The user agent, country the request came from, and Cloudflare request ID are included when available. A crawler line also records the crawler name and the referring host when the crawler’s request includes one. The log also records a line when a visitor arrives from an AI answer site, or when the address has a ChatGPT tag, even if they arrived another way. That line records the referring site’s host when the browser supplies one, and otherwise uses the ChatGPT link tag. It does not record the page on that site or the search they typed. A booking management link code is replaced by the word redacted before the line is written, and no line is written for a request to the customer portal. The line never contains your IP address. Our hosting provider keeps those logs for about 30 days. We also copy automated crawler lines and the phone-tap records described under “Tapping our phone number” above out of Vercel’s runtime log into TruFlo’s separate internal operations ledger, where each stored row keeps a filtered copy of the crawler or tap fields above and adds a ledger version, a requester classification, the Vercel deployment and response status when available, a source label, and the time of the copy.
HVAC Self-Check Tool
Our self-check tool collects the diagnostic answers you choose, any contact details you provide, and an optional equipment nameplate photo. The tool saves your progress, including that photo, in your own browser using localStorage. Saved progress stops being used after 72 hours. It is deleted the next time you open the tool, when you restart the tool, or when you clear your browser storage. If you never open the tool again, the saved progress and the photo stay in your browser until you clear your browser storage yourself. The photo is stored beside that saved progress and is cleared together with it.
If you ask TruFlo to follow up, your answers, contact details, and any nameplate photo you provided are emailed to our office. Ad-click details, such as UTM parameters or a Google click ID (gclid), are also tied to that lead so we can understand which advertising brought you to the tool.
Cookies and Browser Storage
Cookies are small files a website stores on your device. Browser storage (localStorage) works the same way but is only read by the page you are on. Here is everything this website uses.
| Name | Purpose | Lifetime | Who sets it | First or third party |
|---|---|---|---|---|
| _ga | Google Analytics uses it to tell one visitor from another. | 2 years | The Google Analytics script running on our pages | Stored under our own domain, set by a third party (Google) |
| _ga_MQYEL9Y0N5 | Google Analytics uses it to keep track of your current visit for our property. | 2 years | The Google Analytics script running on our pages | Stored under our own domain, set by a third party (Google) |
| _gcl_au | Google Ads uses it to hold a random identifier for your browser, so it can measure calls and other results that come from our ads. It is set on every visit, not only visits from an ad, but only while Google Ads call tracking is turned on. | 90 days | The Google Ads script running on our pages | Stored under our own domain, set by a third party (Google) |
| _gcl_aw | Holds the Google click ID from the address of a Google ad you clicked, so Google can link what you do here afterward, such as a call or a request, to that ad. It is only set when you arrive from a Google ad. | 90 days | The Google Analytics or Google Ads script running on our pages | Stored under our own domain, set by a third party (Google) |
| _gcl_gs | Holds the ad source code that Google adds to the address when you click one of its ads, and the time it was saved, for Google’s measurement of its ads. It is only set when you arrive from a Google ad. | 90 days | The Google Analytics or Google Ads script running on our pages | Stored under our own domain, set by a third party (Google) |
| _gcl_ag | Holds the gbraid form of a Google ad click ID, which Google uses in place of the regular click ID for some ad clicks from iPhones and iPads. It is only set when you arrive from such an ad. | 90 days | The Google Analytics or Google Ads script running on our pages | Stored under our own domain, set by a third party (Google) |
| _gcl_gb | Holds the wbraid form of a Google ad click ID, which Google uses in place of the regular click ID for some ad clicks from iPhones and iPads. It is only set when you arrive from such an ad. | 90 days | The Google Analytics or Google Ads script running on our pages | Stored under our own domain, set by a third party (Google) |
| truflo_portal_session | Keeps you signed in to the commercial customer portal. It is only set after you sign in, and it is required for the portal to work. | 7 days | Our own server | First party, essential |
Our own code sets no cookie other than truflo_portal_session, and we are not aware of any cookie being set under our domain other than those listed above. The Google Analytics script, and the Google Ads script while call tracking is turned on, also send requests to Google’s own domains, such as google.com and doubleclick.net, where Google may set or read its own cookies. Vercel Web Analytics does not use cookies at all. Cloudflare Web Analytics does not use cookies or store anything in your browser. Your browser may shorten the cookie lifetimes listed above.
| Name | Purpose | Lifetime | Who sets it | First or third party |
|---|---|---|---|---|
| truflo.public-booking.v1 | Saves your in-progress online booking (address, problem description, name, phone, email, the window you picked) so you do not lose it. | 24 hours, then deleted the next time you open the booking page | Our own booking page | First party, stays on your device |
| truflo_attr | Remembers how you first reached an eligible public page: campaign source, medium, campaign, term and content tags, a Google ad click ID (gclid, gbraid or wbraid), the referring web address, the first page path and the capture date and time. Missing values stay blank. Referring addresses from this site are omitted; other referring addresses can include query parameters, with credentials and token parameters removed or redacted. Later visits do not replace an unexpired record. Customer portal and private booking-management pages do not read or create this record. | 90 days from capture, then removed or replaced on the next eligible public-page visit. If browser storage is blocked, a temporary copy lasts only in the current page session. | Our own public pages | First party, stored on your device and sent with contact and booking requests as described below. |
| truflo_diag_v1 | Saves your self-check answers and where you left off. | 72 hours, then deleted the next time you open the self-check tool | Our own self-check tool | First party, stays on your device |
| truflo_diag_v1_photo | Holds the optional nameplate photo you added to the self-check. | Cleared together with the saved self-check progress above | Our own self-check tool | First party, stays on your device |
| _gcl_ls | Keeps a copy of the Google click ID from the address of a Google ad you clicked. While Google Ads call tracking is turned on, it also keeps counters and an identifier that Google uses to measure results from our ads. | 90 days for each saved value | The Google Analytics or Google Ads script running on our pages | Stored under our own domain, set by a third party (Google) |
| <label>,7135458062 <label>,7135458062_expiresAt | Google’s call tracking script saves the web address it uses to ask Google for a Google forwarding number to show in place of our office number, and when that saved address expires. The address can include a Google ad click ID. In these names, <label> stands for our Google Ads conversion label. They are only saved while Google Ads call tracking is turned on. | Until the expiry Google’s reply sets, or 3 hours when Google does not reply, then replaced on your next visit while call tracking is on. It stays in your browser until then, or until you clear browser storage. | Google’s call tracking script running on our pages | Stored under our own domain, set by a third party (Google) |
When you send the contact form or book online, the available record of how you first found us is included in the request to our website server. For contact requests, it is included in the email sent to our office. For bookings, it is forwarded to our scheduling system only when that system supports receiving it. Missing or unavailable information does not prevent you from sending a request or booking.
You can clear cookies and browser storage at any time through your browser settings. Clearing them will not stop you from using the contact form, browsing the site, or calling us. Clearing them will sign you out of the portal and will discard a saved booking draft or self-check progress. Once they expire, the two saved drafts above are deleted the next time you open the page that saved them. Until then they stay in your browser, so clearing your browser storage is the way to remove them right away.
Analytics
Google Analytics 4: Our public pages use Google Analytics 4, a service provided by Google. It loads a script from Google in your browser, sets the cookies the table above lists for the Google Analytics script, and sends Google the pages you view, the page that referred you, your device and browser details, an approximate location worked out from your IP address, and the actions listed under “Automatically collected information.” Google processes that data on our behalf so we can see how people find and use the site. Event data on our Google Analytics property is retained for 14 months. Google Analytics also receives any UTM campaign tags or Google click ID in the page address or the recorded referring address; when you first start the self-check, it receives any stored UTM source, medium, campaign, term, and content values as event labels, receives source, medium, and campaign again if you restart, and receives campaign again after a successful new or updated follow-up request. You can read how Google uses information from sites that use its services at How Google uses information from sites or apps that use our services. To control Google Analytics measurement in your browser, Google offers a browser add-on at tools.google.com/dlpage/gaoptout.
After a successful contact request or confirmed booking, our server also sends Google an analytics event using the visitor and visit identifiers from the two Google Analytics cookies listed above. The contact event includes the form name and selected service category. The booking event includes the number of days until the appointment, its arrival window and the booking reference. Both include a minimal activity-duration value. These server events do not include your name, phone number, email address, service address, stored campaign record or text-message consent record.
Our server does not read the browser add-on setting. The server events described above require both Google Analytics cookies. Clearing or blocking those cookies prevents those server events while the cookies are absent; events may resume if your browser creates the cookies again. Vercel Web Analytics is cookieless and is described separately below.
Vercel Web Analytics: Our public pages also use Vercel Web Analytics, provided by our hosting company. It is cookieless and first party. It does not set a cookie, it does not store an identifier on your device, and it does not follow you to other websites. Instead of an identifier, Vercel creates a temporary hash from your request and discards it after 24 hours. It records the time, the page, the referring page, the device type, the operating system, the browser, and an approximate location. It also records five actions, each with one or two short labels: tapping a phone number to call (which part of the page the tap came from), sending us a request through a form (which form), a form failing to send (which form, plus a short technical label for the failure), selecting a call to action (which action and which part of the page), and following a link to another website (the address of that website and which part of the page). Those labels never contain your name, phone number, email address, or service address, and nothing else is attached. We use it as a second count of the same visits, because ad blockers and privacy browsers block Google Analytics and this tells us how much of our traffic we are missing. Under our current plan, Vercel keeps the resulting reports for up to 12 months. We do not collect any Vercel Web Analytics data from customer portal pages.
Cloudflare Web Analytics: Our public pages also use Cloudflare Web Analytics, provided by Cloudflare. It does not use cookies and does not store an identifier in your browser. It counts a page only when your browser loads it fresh, for example when you arrive from a search result, type our address, or reload. It does not count the pages you move to afterward by tapping links on our site. When you leave or switch away, it sends one speed report for the page you are on at that moment, and sends nothing if that page is a customer portal page or the private booking management page. For each page it counts, it records the visit and the page view, the page address without anything after a question mark, the site and page that sent you to us, your country, your device type, browser, and operating system, how you reached the page (for example a new visit, a reload, or the back button), and how quickly the page loaded and responded. For those speed measurements it also records which part of the page was slowest to appear or shifted while loading, including that item’s web address, size, and position on the page, and which part of the page you tapped, clicked, or reached with a key press, and whether you used a tap or click, or a key press, when it measures how quickly the page responded. We use this to understand traffic and page speed. Cloudflare keeps the detailed data for 7 days and keeps summary reports available for 6 months. It is never loaded on customer portal pages or on the private booking management page. If your visit starts on one of those pages, it stays off until your browser loads a new page fresh.
None of the analytics tools receives your name, phone number, email address, or service address. Google Analytics does not collect portal pages, removes private booking codes from measured page addresses, and shortens portal addresses that appear as referring pages. Vercel Web Analytics also does not collect portal pages, removes private booking codes from measured page addresses, and is switched off on a page reached from a private booking or portal address. Cloudflare Web Analytics is not loaded on customer portal pages or on the private booking management page. If your visit starts on one of those pages, it stays off until your browser loads a new page fresh.
Approximate Location
Google Analytics and Vercel Web Analytics work out an approximate location from the IP address your request arrives with. That location is at the country, region, or city level. Cloudflare Web Analytics reports only your country. We do not ask for or collect GPS coordinates, and this website never asks your browser for your precise location. We do not store your full IP address.
Referring pages: Google Analytics and Vercel Web Analytics continue to record the address of the page that sent you to us and, when you move between pages on our own site, the page you came from. Before that address reaches Google Analytics we remove private booking links and shorten any customer portal address to just /portal. We cannot edit what Vercel Web Analytics records as the referring page, so instead we switch that tool off entirely on any page you reached from an address that the redaction described above would otherwise have to change. We also switch it off on customer portal pages themselves. When that referring-address check allows it, the private booking management page is still measured, with any token in its address replaced by the word redacted. Cloudflare Web Analytics counts a page only when your browser loads it fresh, and records the site and page that sent you to us for that page. It does not record the pages you move between on our site, apart from the one speed report described above for the page you are on when you leave or switch away. When you arrive from another website, how much of that site’s address your browser passes along is set by that website, not by us. Our hosting provider’s request log also records a line when a visitor arrives from an AI answer site, or when the address has a ChatGPT tag even if they arrived another way. The line records the referring site’s host when the browser supplies one, and otherwise uses the ChatGPT link tag. It records only the site’s host, never the page address or anything typed into it.
Retention: Google Analytics event data on our property is kept for 14 months. Vercel Web Analytics discards the temporary visitor hash after 24 hours and keeps the resulting reports for up to 12 months under our current plan. Cloudflare Web Analytics keeps detailed data for 7 days and keeps summary reports available for 6 months. Our hosting provider’s crawler and AI referral request log is kept for about 30 days. The service address you type into a booking is different: that is information you give us on purpose, and we keep it with your customer record so we can come out and do the work.
Returning Customers
When you contact us or book with us, we may match the phone number or email address you give against our existing customer records in Housecall Pro, our scheduling software, to find your prior service history. That lets the office see what has already been done at your address so you do not have to explain it again. If we find no match, we create a new record.
Service Providers
We use a small number of outside companies to run the website and the business. They only receive what they need to do their job, and only to provide services to you on our behalf.
| Provider | What they do for us | What they receive |
|---|---|---|
| Website analytics (Google Analytics 4) and, while it is on, Google Ads call tracking. | Page views, referring page, device and browser details, approximate location, and the site actions listed above. While Google Ads call tracking is on, Google also receives a request for a forwarding number when you open our site, and again every few minutes while our site stays open in your browser, for up to a few hours. If you came from one of our ads, these requests carry the ad click ID until the saved address described above expires. For calls to a Google forwarding number, Google receives what is described under Google Ads call tracking above. | |
| Vercel | Hosting, web analytics, server request logs, and private consent-record storage for this website, and hosting and server logs for the software that runs our phone system. | Every request to the site as it is served, including anything you submit while it is in transit, plus the analytics data above, the five site actions Vercel Web Analytics records with their short labels (a phone tap and where on the page it came from, a form sent and which form, a form that failed and why, a call to action selected and where on the page, a link to another website followed and its address), and the automated crawler log. Private storage receives the contact-form and confirmed-booking consent records described below, including the record reference, consent details, mobile number, available name, email-offers choice on contact records, and appointment reference on confirmed bookings. If a storage attempt fails or cannot be confirmed, the server log receives a technical status and the record reference, when valid. The software that runs our phone system receives call details from our phone provider, such as the calling and called numbers, the time and the call status. It also receives call transcripts, details about call recordings but not the audio, the texts you exchange with our office number, and the details the after-hours assistant collects from you, such as your name, service address, callback number and the problem you describe. For each contact form and confirmed booking, this website sends that software your name, phone number, email address if you gave one, the service you chose, if any, the page you sent it from, your message or booking notes, when you sent it, the appointment window on bookings, and the ad click ID when you came from one of our ads, so it can text our office about your request. Its server logs keep full phone numbers from calls and texts. They leave out transcript text, recording details, the name, address and problem you give the after-hours assistant, and the name, phone number and message from website requests. |
| Cloudflare | Domain name service, proxy, and security in front of every request, plus Web Analytics on public pages your browser loads fresh. | For its proxy and security role, every request to the site passes through Cloudflare first, including your IP address and browser headers. Separately, for each public page it counts when your browser loads it fresh, Cloudflare Web Analytics receives the visit and page view, the page address without anything after a question mark, the site and page that sent you to us, country, device type, browser, operating system, how you reached the page, how quickly the page loaded and responded, and for those speed measurements which part of the page was slowest to appear, shifted while loading, or was tapped, clicked, or reached with a key press, and whether you used a tap or click, or a key press, with that item’s web address, size, and position on the page. The speed measurements are sent when you leave or switch away and name the page you are on at that moment; nothing is sent if that page is a customer portal page or the private booking management page. It does not use cookies or store an identifier in your browser. |
| Resend | Delivers the email notifications our website sends to our office. | The contents of contact form and self-check submissions, including any nameplate photo; portal sign-in emails; and the text-message consent records our contact and booking forms file with the office, which contain your mobile number and, once we have them, your name and the booking reference. |
| Telnyx | Delivers our text messages, carries our phone line, records calls and runs our after-hours assistant. | Your mobile number and the content of the texts we exchange with you, including the one-time booking code and reschedule links, plus call details, call recordings and what you tell the after-hours assistant, and the alerts we text our own staff about your call, text or website request. |
| Upstash | Hosts the database our phone system uses for call records and text message conversations. | Call details such as your phone number and when you called, call transcripts, details about call recordings but not the audio, and the text messages we exchange with you. |
| Deepgram | Turns speech on calls to our office number into text, as the speech-to-text service our phone provider runs for us. | The audio of calls to our office number while they are transcribed, and what you say to the after-hours assistant. |
| Anthropic | Provides AI models that our staff tools use, including as a backup when our own computer cannot answer a staff question. | The staff member’s question and the records the tool looks up to answer it, which can include customer and job details, text messages, call details and call transcripts. |
| OpenAI | Provides the AI model that runs our after-hours assistant, through our phone provider. | What you say to the after-hours assistant, as text, and the details it collects from you, such as your name, service address, callback number and the problem you describe. |
| WhatsApp (Meta) | Delivers our staff alerts when the text messages to our staff fail. | The same alert: your name, phone number and the request you made by call, text or website form. |
| Housecall Pro | Scheduling, customer records, and invoicing. | Your name, service address, phone number, email address if you gave one, the description of the problem, and your job and invoice history. |
We do not sell or rent your personal information, and we do not share it with anyone for their own marketing purposes. We share it with the service providers above only so we can operate this website and provide the service you asked for, and we may share it when the law requires us to.
SMS / Text Messaging Program
Program description: TruFlo Mechanical LLC operates an SMS program used to confirm and remind you about scheduled HVAC service appointments, notify you when a technician is on the way, share quotes and invoices, follow up after service, and, only if you separately ask us for them, send occasional seasonal maintenance reminders and promotional offers. There is no way to sign up for promotional texts on this website. Messages come from TruFlo A/C & Heating at (713) 545-8062.
Opt-in: You consent to receive text messages from TruFlo only after you actively provide your mobile number and agree to receive texts. There are four ways that happens: checking the text-message consent box on our contact form, checking the appointment texting consent box in our online booking form, texting us first at (713) 545-8062, or telling us yes when you book by phone or sign a service authorization that includes SMS consent. Consent to receive marketing text messages is not a condition of purchasing any goods or services. Texting is required to book online, because we verify your number with a one-time code, so call us at (713) 545-8062 if you would rather book without texts.
Opt-in record: When you submit the contact form, when you ask us to text you a verification code on the booking page, and when you complete a booking, we keep a record of the texting choice you made so we can show it later. Each record has a unique record reference (consent_id). It includes the date and time and says whether it came from the device click, a substituted server time, or the time our server received the request. It also includes the method (which checkbox on which page), the public page address, whether you consented, the recorded version of the consent wording, the mobile number the consent covers, your name when you have already given it, and, once a booking is confirmed, the appointment reference. If you consented, we retain the wording when it is available for the recorded version. Each record also says whether the mobile number had been verified when it was made: contact and verification-code records say the number is not verified; confirmed-booking records say it is verified. Contact records include your texting choice whether the box was checked or unchecked, and your separate choice about seasonal offers by email. We send the record to our office by email and keep it with our office email records. We also use private storage hosted by Vercel for copies of the contact-form and confirmed-booking consent records. Those copies use the same record reference as the corresponding office email. The consent record made when we send a verification code is kept by email only. If a private-storage attempt fails or cannot be confirmed, our server log records a technical status and the record reference, when valid. The version of the consent wording currently in use is sms-consent-v2-2026-09-03.
Message frequency: Message frequency varies based on your service activity with us. These are the frequency notes shown next to each consent checkbox, word for word.
Contact form: Messages come from TruFlo A/C & Heating at (713) 545-8062. Message frequency varies, usually fewer than 10 messages per month.
Booking form: Messages come from TruFlo A/C & Heating at (713) 545-8062. Message frequency varies by appointment, usually 3 to 6 messages per job.
Message and data rates: Message and data rates may apply. Charges are billed by and payable to your mobile service provider. TruFlo does not charge for the messages themselves.
Opt-out: You can cancel the SMS service at any time by replying STOP to any message from us. After you send STOP, we will send you a confirmation message and will not send you any additional messages unless you opt in again. STOP stops every kind of text from us, not only the kind you replied to, including appointment reminders and technician arrival alerts. You can also tell us to stop by phone or email. If you want to rejoin, sign up as you did the first time and we will start sending messages to you again.
Help: If you are experiencing issues with the messaging program, reply HELP for assistance, or contact TruFlo at (713) 545-8062 or contact@truflohvac.com. Supported carriers include AT&T, T-Mobile, Verizon Wireless, Sprint, Boost, U.S. Cellular, MetroPCS, and most other U.S. carriers. Carriers are not liable for delayed or undelivered messages.
No sharing of mobile information: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of information described above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We share SMS-related data only with subprocessors that help us operate the messaging program (our messaging provider Telnyx, which delivers the texts, Housecall Pro, which holds the appointment and customer records the texts are generated from, Resend, which delivers your consent record to our own office mailbox, Vercel, which hosts private copies of contact-form and confirmed-booking consent records and runs the software that sends and receives texts on our office number, and Upstash, which hosts the database where that software keeps our text conversations with you) and only to the extent needed to deliver messages to you, keep our message history with you, and keep the record of your opt-in.
Privacy and Terms: Use of our SMS program is also governed by our Terms of Service. By opting in, you agree to both this Privacy Policy and the Terms of Service.
How We Use Your Information
We use the information we collect to:
Respond to your service requests and questions; schedule and provide HVAC services; verify the mobile number you book with; send you updates about your service appointment; keep your service history so we know what has been done at your property; bill you for work you authorized; keep the website working and secure; understand how people find and use the website; and, if you opted in, send occasional seasonal offers and maintenance reminders.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
How We Protect Your Information
Every page on this website is served over an encrypted (HTTPS) connection. Contact form, self-check, and booking submissions travel over that encrypted connection to our server, and from there over an encrypted connection to our email provider or our scheduling software. The customer portal is protected by a sign-in link sent to an approved email address and a signed session cookie.
We limit access to your personal information to employees and contractors who need it to provide you with service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Third-Party Links
Our website links to a few outside websites, including our Google reviews, our Better Business Bureau profile, and the Texas Department of Licensing and Regulation license lookup. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.
Your Rights
You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. You may also ask us to stop texting you or to stop sending you offers. To make a request, call or email us using the contact details at the bottom of this page. We handle these requests by phone and email; there is no account you need to log in to.
We will respond within 30 days. We may need to confirm who you are before we act on a request. We may keep information we are required to keep for tax, warranty, licensing, or legal reasons, and we will tell you if that applies.
Children’s Privacy
Our website is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.
Contact Us
If you have questions about this privacy policy or your personal information, contact us at:
TruFlo Mechanical LLC
7025 W. Tidwell Rd., Suite H111
Houston, TX 77092
Phone: (713) 545-8062
Email: contact@truflohvac.com