PestFolio Privacy Policy

Last updated: [date]

This Privacy Policy explains how [COMPANY NAME] Labs [FZE/FZ-LLC/LLC], Dubai, United Arab Emirates ("we", "us") handles personal data in connection with PestFolio. We follow the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

1. Our role

Account data. For the people who use PestFolio on behalf of a pest control business (owners, office staff and technicians), we are the controller.

Customer data. Pest control businesses enter data about their own clients into PestFolio, such as names, addresses, phone numbers, contracts, job sheets, reports and photos. For that data the business is the controller and we process it on its behalf. If you are a client of a pest control business, please contact that business first about your data. We will help it answer your request.

2. What we collect

• Account data: name, business name, email, phone, role, login details (passwords are stored only in hashed form) and messages you send us.
• Customer data: whatever the business enters, as described above. Client portal users see the reports their pest control business shares with them.
• Usage data: a record of which features are used, for example "report completed", with the time, a company number, a user number and role, and simple counts. It does not include names, emails, phone numbers, addresses, report contents, notes, photos, signatures, IP addresses or browser details. Page addresses are stored without record numbers.

We do not use third-party analytics, advertising or tracking scripts. We use only the cookies needed to keep you signed in.

3. Why we use it

• to provide, secure and support PestFolio (necessary to perform our agreement with your business);
• to contact you about your trial, account or service changes;
• to understand which features are used and improve PestFolio, using the usage data described above; and
• to meet legal obligations.

We may also use aggregated, anonymised data that cannot identify any business, user or client to improve PestFolio and to produce industry statistics and benchmarks.

We do not sell personal data and we do not use customer data for advertising.

4. Who receives it

• Our hosting provider: Render Services, Inc., which runs our servers and database in [hosting region].
• Our email delivery provider: Resend, Inc., which sends account emails and the reports your business sends to its clients, in [email region].
• Authorities, only where the law requires it.

Our service providers may only use the data to provide their services to us.

5. Where it is stored

PestFolio data is stored with Render in [hosting region], which is outside the United Arab Emirates. [Hosting region] has its own data protection law ([applicable law, for example EU GDPR for Frankfurt]). We transfer account data there because it is necessary to provide the service your business signed up for, and customer data on the instructions of the business that controls it. We will update this policy before moving data to another country.

6. How long we keep it

• Account data and customer data: while the account is active. If an account is closed or a trial ends without a paid plan, we keep the data for [30] days so it can be exported, then delete it. Backups are overwritten within [backup retention days] days.
• Usage data: about 13 months, then deleted automatically.
• Longer only where the law requires it.

7. Your rights

If we hold your account data, you can ask us to:

• give you access to it or a copy in a portable format;
• correct it;
• delete it;
• restrict or stop its processing, or object to its use for marketing.

Businesses can export their customer data at any time or ask us to do it. Write to [contact email] and we will respond within [30] days. You can also complain to the UAE data protection authority.

8. Security

Connections are encrypted (HTTPS), passwords are hashed, each business can see only its own data, and access requires a login. No system is perfectly secure. If a breach affects your data, we will tell the affected business without undue delay, and within 72 hours for customer data, and will meet any notification duties we have under the PDPL.

9. Changes and contact

We will tell users of any material change to this policy before it takes effect.

Contact: [COMPANY NAME] Labs, Dubai, UAE. Email: [contact email].