Texting customers legally: TCPA basics for contractors

Texting is how small HVAC shops talk to customers now — appointment confirmations, "on my way," quote follow-ups. It works because it's personal and immediate. It also sits under a federal law, the Telephone Consumer Protection Act (TCPA), plus state laws and carrier rules, and the penalties fall on the business that sent the text, not on the software it used.

This article is general education, not legal advice. Laws change, states add their own rules, and your situation is specific — talk to a lawyer about your own texting program. What follows are the widely accepted basics every contractor should know.

Rule 1: get consent before you text

The foundation of the TCPA is simple: don't text people who haven't agreed to be texted. Consent means the customer knowingly gave you their number and agreed to receive texts from your business — a checkbox on your intake form, a signed work order with a texting line, or a customer texting you first about a job.

A number you scraped, bought, or found on an old invoice from 2019 is not consent. When in doubt, ask again — "Is it okay if we text you updates about this job?" takes 5 seconds and puts you on solid ground.

Rule 2: know the difference between transactional and marketing

Not all texts are treated the same. The rough split:

• Transactional texts relate to a job the customer already has with you: appointment confirmations, "tech is 20 minutes out," the invoice link, a question about access to the unit. These generally require the customer's consent to be texted, and are the lower-risk category.
• Marketing texts promote something: a tune-up special, a referral offer, a "beat the heat, book now" blast. Marketing messages are held to a higher standard — they generally require prior express written consent: a clear, written agreement to receive marketing texts specifically, not just a phone number on a work order.

The trap for contractors is the gray zone. "Your system is due for its fall tune-up" reads like service, but if it's promoting a paid visit, treat it as marketing and hold it to the written-consent standard. When a message could be read either way, the conservative call is the safe one.

Rule 3: honor STOP immediately

If a customer replies STOP — or "stop texting me," or anything that plainly means quit — that revokes their consent, and it takes effect immediately. Not after this season's campaign. Not after one last reminder. One confirmation message acknowledging the opt-out is generally accepted; after that, nothing until they opt back in.

This is where manual texting from a personal phone gets dangerous: the STOP lands in one thread, nobody records it, and 3 months later the renewal reminder goes out anyway. Texting a person after they opted out is exactly the fact pattern that turns into a complaint, and fines per text can be substantial — they're counted per message, so a careless blast multiplies fast.

Rule 4: respect quiet hours

Federal telemarketing rules set a calling window of 8 a.m. to 9 p.m. in the recipient's local time, and several states draw the window tighter than that. Treat marketing texts the same way. Beyond the law, it's just how you'd want to be treated: a 6:45 a.m. tune-up promo doesn't book jobs, it books opt-outs.

Genuinely urgent job communication — "we're outside," "part came in, tech is headed over" — is a different animal, but anything promotional should live inside business-friendly hours, every time.

Rule 5: keep records of consent

If a dispute ever comes, the question will be: can you show this customer agreed to receive this kind of text, and when? "They gave me their number at some point" is not an answer. For each customer you text, you want to be able to show:

1. What they consented to — transactional updates, marketing, or both.
2. When and how they consented — the form, the date, the wording they saw.
3. Whether they've since opted out, and when.

A spreadsheet can do this in theory. In practice, spreadsheets don't get updated at 7 p.m. after the fourth call of the day, which is why this belongs in whatever system already holds your customer records.

What this looks like in practice

For a 1–5 person shop, compliance isn't a legal department — it's 4 habits: collect consent on your intake and work-order forms, keep marketing and job updates mentally separate, never text past an opt-out, and keep the records where your customer data lives.

This is also a fair test of any software you're considering. Ventoxy runs every outbound message through one send pipeline that checks consent on file, quiet hours, and opt-out status — and the AI won't even draft a message for a customer without consent on file. You review and approve every draft before it goes anywhere; today approved texts go out from your own phone, with automated sending rolling out. If a tool you're evaluating will happily blast your whole customer list with no consent check, the risk it's creating is yours, not theirs — worth remembering if you're switching software and consent records are part of what has to move with you.

One more time, because it matters: this is education, not legal advice. Before you launch any texting program — especially marketing — spend an hour with a lawyer who knows the TCPA and your state's rules. It's cheap insurance against an expensive mistake.