How does Voksha handle customer data privacy for our HVAC business?

For HVAC Companies

Every call captures customer information that qualifies as personal data, names, phone numbers, home addresses, and sometimes details about when a property is unoccupied or security-relevant details like garage codes for tech access, all of which needs to be handled with real data security practices rather than treated casually. On every plan, Voksha encrypts call data with AES-256 at rest and TLS 1.3 in transit, and it is SOC 2 compliant and ISO 27001 compliant. For HVAC companies operating in states with consumer privacy laws, California's CCPA/CPRA being the most commonly applicable one, customer data handling needs to support things like data access and deletion requests if a customer asks what information you hold on them; CCPA and GDPR compliance are on Voksha's Enterprise plan. HIPAA, also an Enterprise-plan feature, generally isn't relevant for a typical residential or commercial HVAC contractor since you're not handling protected health information. What is genuinely relevant for HVAC is basic data hygiene: not exposing customer addresses, access codes, or scheduling patterns in ways that could be a security risk (for example, information about when an elderly customer's home is reliably empty), and making sure customer contact information captured during calls reaches your team or your CRM or FSM platform securely rather than sitting in an unsecured spreadsheet or shared inbox. If your company operates in a state with specific consumer data protection requirements or serves commercial clients with their own vendor data security requirements as part of a service contract, it's worth confirming during setup how call data retention and access controls are configured, and whether you need the Enterprise plan.