Legal

Privacy Policy

Effective Date: September 3, 2026 · Last Updated: October 17, 2026

This Privacy Policy explains how Designaxe LLC, operating as PestShift (“PestShift,” “we,” “us,” or “our”), collects, uses, discloses, and protects information in connection with the PestShift website and application (the “Service”). This policy applies to visitors, registered users, and their businesses (“you”).

If you have questions about this policy, contact us at attila@pestshift.com.

1. Information We Collect

1.1 Information You Provide Directly

  • Account information: name, email address, and password, collected when you sign up.
  • Business information: business name, state, license-warning-window preference, and booking-page settings.
  • Customer and property data: names, contact information, service addresses, property type (residential/commercial), and access notes (e.g., gate codes, pet-on-property flags) that you enter or import.
  • Service and appointment data: the services you configure, scheduled and completed appointments, add-ons, and deposit records.
  • Chemical application records: product name, EPA registration number, target pest, application rate, and application site logged for each treatment appointment. This information describes a treatment performed at a property, not an individual person, and is collected because your business is required to maintain it under applicable pesticide recordkeeping law.
  • Applicator license records: technician name, state, license category, license number, and expiration date, entered by an account owner or administrator.
  • Recurring service plan data: frequency, pricing, and next-service-date for each customer plan you configure.
  • CSV import data: any customer, property, or plan data you upload during onboarding or afterward.
  • Payment information: we never collect or store card numbers. Your PestShift subscription is billed by Stripe, Inc. If you connect a Stripe account, your customers' card payments to you (deposits, invoices, payment links and plan charges) are processed by Stripe on your own connected account through Stripe Connect: your customer enters their card on Stripe's page, not ours. We store the payment's amount, currency, status, the related appointment or plan, and Stripe's reference IDs (including the ID of a saved payment method for automatic plan charges), and we receive payment updates from Stripe. PestShift takes a 1% platform fee on these card payments, collected by Stripe at the time of payment. Payments you take outside PestShift (cash, check) are stored as a manual record.
  • Support communications: anything you send to attila@pestshift.com.

1.2 Information Collected Automatically

  • Usage data: pages visited and features used within the Service, collected through Vercel Analytics, Google Analytics, and Microsoft Clarity.
  • Advertising data: if you arrive from one of our advertisements, the Meta (Facebook) pixel records that visit and whether you went on to start a trial or subscribe, so we can measure which ads work. This is the one technology on this page that shares data with a company that also uses it for its own advertising purposes — see 3.1. You can block it with any standard tracker-blocking browser extension, and nothing in the Service stops working if you do.
  • Advanced matching: when you sign up or subscribe, the Meta pixel also receives your email address and phone number in hashed form, so Meta can tell that the person who signed up is the same person who saw our advertisement. Hashing means the values are converted to a fixed-length code (SHA-256) in your browser before they are sent; the code cannot be turned back into your email address or phone number. Meta compares it against codes it computes the same way. We never send these values in readable form.

    This applies only to your own PestShift account details. It never includes anything you store about the people you provide services to. Your customers' names, addresses, phone numbers, email addresses, appointment history, and chemical application records are never sent to Meta or to any other advertising service, in hashed form or otherwise. They are yours, we hold them only to run the Service for you, and advertising is not running the Service.
  • Log data: IP address, browser type, and access timestamps for requests to our servers, retained for security and debugging.

1.3 Information From Public Booking

If a customer submits a service request through your public booking page, we collect the contact and property information they provide (name, contact info, address, access notes) on your behalf, for the purpose of creating the requested appointment in your account.

2. How We Use Information

We use the information described above to:

  • Provide, operate, and maintain the Service, including scheduling, route assignment, chemical compliance record-keeping, and license-expiry tracking;
  • Send appointment reminders and license-renewal nudges by email (via Resend) and SMS (via Twilio) on your behalf;
  • Process your subscription payment, through Stripe;
  • Process card payments from your customers to you, through Stripe Connect, when you have connected a Stripe account;
  • Communicate with you about your account or in response to support requests;
  • Monitor, secure, and improve the Service;
  • Comply with legal obligations.

We do not sell your information, and we do not use your customer, property, chemical application, or applicator license data to train any AI model.

3. How We Share Information

3.1 Service Providers

We share information with vendors who help us operate the Service:

  • Supabase (database, authentication, and file storage hosting)
  • Vercel (application hosting and analytics)
  • Stripe (subscription billing, and card payments from your customers through Stripe Connect)
  • Twilio (SMS delivery, only for accounts with SMS reminders configured)
  • Resend (email delivery)
  • OpenAI (the owner's AI assistant, which receives the business and customer data the owner asks about, and the website chat, which receives the chat text)
  • Google Maps Platform (address geocoding and route travel times; it receives service addresses)
  • Google Analytics and Microsoft Clarity (website usage analytics)
  • Meta Platforms (advertising measurement, via the Meta pixel on our public pages and on sign-up, including hashed account email and phone for advanced matching — see 1.2)

With the exception of Meta, each of these providers is contractually or by policy restricted from using your data for purposes other than providing services to us.

Meta is different and we would rather say so plainly: data the pixel collects, including the hashed identifiers described in 1.2, may also be used by Meta for its own advertising and measurement products, under its own terms, not ours. It runs on our public marketing pages and on the sign-up and checkout confirmation steps so we can tell which advertisements lead to sign-ups. It is not used to send your customers' data, your appointment records, or your chemical application records anywhere — those never leave the systems listed above.

If you would rather not be matched this way, blocking trackers in your browser prevents it, and you can opt out of Meta's use of off-platform activity in your Meta account settings. Neither affects your use of PestShift in any way.

3.2 Legal Requirements

We may disclose information if required to do so by law, or in the good-faith belief that such action is necessary to comply with a legal obligation, protect the rights or safety of PestShift, our users, or the public, or investigate a potential violation of our Terms of Service. This includes circumstances where a regulatory body with jurisdiction over pesticide application requests records in connection with an inspection or enforcement action involving your business; we will make reasonable efforts to notify you of such a request unless legally prohibited from doing so.

3.3 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

3.4 Within Your Account

If your business has multiple staff accounts, what each person can see depends on their role. The owner can see and manage everything. Office staff can see customer, property, scheduling, and compliance data, but not invoices, analytics, staff management, billing, or the AI assistant. Technicians see their own day (My Day), customer details in read-only form, and their settings.

4. Data Retention

We retain your account and business data for as long as your account remains active. Chemical application records and appointment history are retained for as long as your account is active, as part of your business's compliance record, since ongoing recordkeeping is the core purpose of this data. Chemical application records are kept and can be exported for at least 2 years after you cancel, unless you ask us to delete them sooner.

If you delete your account, all data associated with your business is deleted from our production systems. We keep daily backups.

5. Data Security

We use industry-standard measures to protect your information, including Row-Level Security enforced at the database layer, so that no business's data is queryable by another business's users, even in the event of an application-layer bug; service-role database access that is used only on the server, for specific operations after the user's session and role are checked, and is never exposed to the browser; and HTTPS encryption for all data in transit.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your information, we will notify you in accordance with applicable law.

6. Your Rights and Choices

Depending on your location, you may have the right to access, correct, delete, or export the information we hold, and to object to or restrict certain processing. To exercise these rights, contact attila@pestshift.com. We will respond within the timeframe required by applicable law.

A note on chemical application and applicator license records specifically: because these records may constitute your business's legally required recordkeeping under pesticide application law, deleting them from PestShift does not relieve you of any independent obligation to retain such records elsewhere for the period required by your state. We recommend exporting a copy before requesting deletion of any compliance-related data.

6.1 California Residents

California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information as defined under the CCPA.

6.2 European and UK Users

Designaxe LLC acts as the data controller for personal information described in this policy. Our legal bases for processing are performance of a contract (providing the Service), consent (where applicable, such as SMS reminders), and legitimate interests (security and Service improvement). Our infrastructure providers may process data in the United States; such transfers rely on those providers' Standard Contractual Clauses or equivalent safeguards. Designaxe LLC does not currently maintain a dedicated EU representative under Article 27 GDPR.

7. Third-Party Links

The Service may reference third-party websites we do not control. This Privacy Policy does not apply to those third parties.

8. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18.

9. International Data Transfers

Our infrastructure providers may process and store data in the United States and other countries. If you are located outside the United States, your information will be transferred to and processed in the United States or other countries where our service providers operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or an in-app notice before material changes take effect.

11. Contact Us

Designaxe LLC, operating as PestShift
attila@pestshift.com