Privacy Policy

PestDesk is operated by Sawyer Krebs, sole proprietor, trading as PestDesk, based in Alberta, Canada. For privacy questions, access requests or complaints, email work.sawyerkrebs@gmail.com. We act as the service provider (processor) for the pest control companies who use PestDesk, and those companies remain responsible (controller) for the customer information collected through their own websites.

From website visitors chatting with the widget: first and last name, phone number, postal or ZIP code, the pest problem described, the text of the conversation, and the date and time. We do not ask for email addresses, street addresses, payment details, health records or government identifiers, and we instruct the assistant never to request them.

From pest control companies: business name, contact name, email, phone, website, chosen plan, branding settings and login credentials (passwords are stored only as salted hashes by our authentication provider).

From people requesting access to PestDesk: the details submitted in the request form on our home page.

We do not use advertising or analytics cookies. The only browser storage we use is the cookie and local storage needed to keep you signed in to the admin or client portal.

Chat information is collected for one purpose: so a licensed technician from the company whose website you used can contact you about the pest issue you described. The widget tells visitors this before information is submitted, and consent is limited to that service request. We do not sell personal information, and we do not use it for marketing or to train AI models.

Company account information is used to provide, secure, support and bill for the service.

Under Canadian privacy law (PIPEDA and Alberta's PIPA) and United States state privacy laws (including the CCPA/CPRA in California), you may ask us to confirm what personal information we hold about you, provide a copy, correct it, or delete it. You may also withdraw consent to being contacted at any time. Email work.sawyerkrebs@gmail.com and we will respond within 30 days. We never discriminate against anyone for exercising these rights.

If a request concerns a lead captured on a specific pest control company's website, we will coordinate with that company, since they hold the relationship with you.

Technician callbacks, texts and emails happen because you asked to be contacted about your request. We do not send automated marketing messages to leads. Every message a company sends through the details we pass on must identify the sender and honour an opt-out, and companies are contractually required to stop contacting anyone who asks them to. Message and data rates from your carrier may apply.

The front desk conversation is handled by a large language model accessed through our hosting provider's AI gateway. Conversation content is sent to that model only to produce the reply and extract the lead details; storage of the conversation at the model provider is turned off, and the content is not used to train models. The assistant is not a licensed applicator: it never recommends pesticides, prices, treatments or medical advice.

Data is stored in managed cloud infrastructure (database, authentication and application hosting) which may process and store data in Canada, the United States or the European Union. Our sub-processors are limited to: our application and database hosting provider, the AI gateway described above, and — where a company enables them — the email or webhook service the company chooses for instant lead alerts. Transfers are protected by contract and encryption in transit and at rest.

Leads stay in a company's portal until the company or we delete them, and are deleted within 30 days of that company's account closing. Access requests are kept for up to 24 months. Account records are kept while the account is active and for up to 7 years afterwards where tax or accounting law requires it.

Access to lead data is restricted per company: an owner login can only ever read the leads belonging to that company. Database access rules block direct browser access, admin functions require a separate password, connections are encrypted, and passwords are hashed. No system is perfect; if a breach creates a real risk of significant harm, we will notify affected people and the relevant privacy regulator as required by law.

PestDesk is intended for businesses and adult customers. We do not knowingly collect information from children under 13, and we delete it if we learn we have.

If we change this policy we will update the date above and, for material changes, notify account holders by email.