Privacy Policy — Pest AI Browser Extension

Pest AI (“we”), the company behind the Pest AI platform for pest-control businesses. Contact: antoni@pestai.io. This policy covers the “Pest AI — Conversations & Pipeline” browser extension and the Pest AI service it connects to (extension.pestai.io).

It shows your company’s Pest AI conversations, contacts, opportunities, tasks, calendars and scheduling tools in a browser side panel. Optionally, it can recognize the customer in the email you are reading in Gmail, and the customer record you have open in supported field-service software.

• Your company’s CRM data — contacts, conversation messages (texts, emails, chat and call logs, call recordings and attachments), opportunities, tasks, notes, appointments and team member names. These are fetched through our service from your company’s Pest AI account when you use the panel and shown to you. They are mostly held in memory while the panel is open; a few settings are kept in your browser’s local extension storage.
• Connection data — a signed session token for your company’s account, kept in your browser’s local extension storage. The extension never sees or stores your password or your company’s platform credentials.
• Gmail (when you have Gmail open) — the extension reads, in your browser, the sender’s name and email address, the subject line and the text of the email you are viewing, and which Gmail account you are signed into. It uses this to show the matching customer and to let you log the email. This information stays on your device: only the sender’s email address is sent to our service, to find the matching contact. The email’s subject and text are sent only when you choose “Send to CRM”, which saves them to that customer’s record. “Add to CRM” sends the sender’s name and email address. “📅 Times” inserts booking links into the email you are writing. Your company can limit this feature to specific inboxes, or turn it off.
• Field-service software (only if you turn it on) — for FieldRoutes, GorillaDesk, PestPac and FieldWorkHQ, after you grant Chrome permission for that site, the extension reads the customer record on screen (name, phone, email, address and the page address) to find the matching contact. It sends the name, email or phone number to our service as a search. “⤴ Update” sends that record’s name, company, address and email to update the matching contact, and “Send to” fills the form on that page with the contact’s details. Turning the feature off removes the permission.
• Files and recordings — call recordings and attachments are fetched when you play or open them. Files you attach to a message are uploaded through our service to your company’s account.
• Nothing else — no browsing history, no keystrokes, and no data from any website other than those described above.

• Connection records for your company’s account.
• For each connected device: the browser and operating system, IP address, browser user-agent and when it was last active, so you can see and sign out your devices.
• Security settings you choose: the lock timing and your PIN, which is stored only as a salted hash.
• Your Gmail inbox allow-list and your company’s panel settings.
• One-time link codes, which expire after 15 minutes.
• Short-lived event notifications used for unread badges and alerts, deleted automatically after 30 days.
• When your company uses AI features: AI results such as lead scores, conversation summaries and suggested next steps. These can describe what was said in a conversation.
• Limited technical logs, such as notification-delivery timing, which do not contain message content.

We do not keep an archive of your conversation messages; they are relayed from your company’s account on demand.

Solely to provide the product to you and your company. We do not sell personal data and we do not use it for advertising. We share it only with: the CRM and messaging platform your company’s Pest AI account runs on, which is where your company’s data lives; the infrastructure providers that host our service; and, where your company enables AI features, the AI provider that produces lead scores, summaries and reply drafts — including scores generated automatically when the dashboard loads. These providers process data on our behalf.

Our use of information the extension reads from Gmail and from field-service websites is limited to providing the user-facing features described above. We do not use it for advertising, do not sell it or transfer it to data brokers, do not use it to determine creditworthiness, and do not allow people to read it except with your permission, for security purposes, or where required by law.

All traffic is encrypted in transit. Credentials and platform tokens are held server-side only. Sessions are signed, scoped to a single company account, and can be signed out at any time. PINs are stored only as salted hashes. Link codes are single-use.

Use Demo mode without connecting any account. Turn the Gmail or field-service features off at any time. Disconnect from the extension’s Settings to remove your session from the browser, and sign out any device from the Pest AI Setup page in your CRM. Uninstalling the extension removes all locally stored data. To request deletion of data held by our service, contact your company’s Pest AI administrator or email us.

Event notifications are deleted after 30 days and link codes expire after 15 minutes. Device sessions last until they are signed out or expire. Connection records, settings and AI results are kept while your company uses Pest AI, and are deleted when the connection is removed or on request. Data stored in your browser stays until you disconnect or uninstall the extension.

The extension is a business tool and is not directed at children under 13.

Updates will be posted on this page with a revised effective date.

antoni@pestai.io