Privacy Policy

---

1. Data Controller

Data Controller: Pest – Free (Christos Pamporis), Greece
Contact email: manager@pestify.gr

2. Scope

This Privacy Policy covers:

• Marketing website: pestify.gr (information pages, contact form, demo request)
• Application platform: app.pestify.gr and Pestify mobile apps (iOS/Android)

Note: The “Login” button on pestify.gr only redirects you to app.pestify.gr. No authentication occurs on pestify.gr.

3. Marketing Website (pestify.gr)

3.1 Data we collect

We collect personal data only when you voluntarily submit it:

• Contact form: name, email, company, team size, message
• Demo booking (Calendly): name and email (as requested by Calendly)

3.2 Purpose

We use this information strictly to:

• Respond to your request
• Communicate with you about a demo you requested
• Schedule the demo

3.3 What we do not do

• We do not sell personal data
• We do not use your data for advertising, remarketing, or profiling
• We do not run transactions or process payments on pestify.gr
• We do not create a marketing database for newsletters without your explicit consent

3.4 Legal basis

We process this data under GDPR Article 6(1)(b) (steps prior to entering into a contract, at your request) and/or Article 6(1)(f) (legitimate interest in responding to business inquiries).

3.5 Retention

We retain inquiry and demo-related communications only for as long as necessary to respond and follow up on your request, and then delete them when no longer needed, unless legal obligations require longer retention.

3.6 Calendly

If you request a demo using Calendly, your booking details may be processed by Calendly. Calendly may act as an independent data controller for certain processing activities according to its own privacy policy. We recommend reviewing Calendly's privacy information before submitting data through the Calendly interface.

4. Application Platform (app.pestify.gr & Mobile Apps)

4.1 Data processed in the application

When the application is used, the platform may process and store data such as:

• Account data: customer/user name, username, email
• Service locations: address of the location where pest control services are performed
• Operational data: service logs, reports, performance indicators (used only inside the app)
• Technician data: technician name and age (used only for internal operational management)
• Images (admin-only): admin uploads images created by the admin (top-view diagrams of buildings / locations)

No payment data is processed. No transactions take place through the platform.

4.2 Roles under GDPR (Controller / Processor)

When pest control companies use Pestify and upload personal data of private individuals (e.g., homeowner names), the pest control company is typically the Data Controller and Data Processor for that customer's data, processing it only to provide the service.

Where Pestify acts as a Data Processor on behalf of a business customer, requests regarding personal data (e.g., access, deletion) should primarily be directed to the relevant business acting as Data Controller. Pestify will assist the Controller as required under GDPR Article 28.

4.3 Legal basis

For platform account operation and service delivery, processing is generally based on GDPR Article 6(1)(b) (performance of a contract) and GDPR Article 28 (processing on behalf of a controller, where applicable).

4.4 Security

• Passwords are stored using hashing (not plaintext)
• Role-based access controls (e.g., admin-only uploads)
• HTTPS encryption in transit

4.5 Retention

Application data is retained for the duration of the contractual relationship with the business customer and is deleted upon account termination or upon instruction from the business customer, unless legal obligations require longer retention.

5. Hosting & Infrastructure

5.1 Marketing website hosting

The website pestify.gr is hosted by Papaki (Top.Host). Papaki may process limited technical data (e.g., IP addresses) as part of standard hosting operations.

5.2 Application backend hosting

The application backend is hosted on Railway and data is stored in PostgreSQL (PSQL).

6. Sharing of Data

We do not sell, rent, or trade personal data.

Data may be processed only by:

• Our hosting/infrastructure providers (Papaki for the website; Railway for the backend)
• Calendly (for demo scheduling, when you use the demo booking feature)
• Authorized personnel, solely for support and operations

7. International Transfers

Where any service provider involved in processing transfers personal data outside the European Economic Area (EEA), appropriate safeguards (such as Standard Contractual Clauses) will be used where required in accordance with GDPR Chapter V.

8. Cookies

At the time of this policy, pestify.gr does not use analytics or marketing cookies. If analytics/advertising tools are enabled in the future, they will be activated only with user consent where required, and this policy will be updated.

The application may use strictly necessary cookies (or similar technologies) for secure authentication and session management.

For more information, see our Cookie Policy.

9. Your Rights and Supervisory Authority

Depending on the circumstances, you may have rights including:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object
• Right to data portability
• Right to withdraw consent (where processing is based on consent)

To exercise your rights, contact: manager@pestify.gr

You also have the right to lodge a complaint with the competent supervisory authority. For Greece, the supervisory authority is:

Hellenic Data Protection Authority (HDPA)
Address
Postal Code
Country
Website: https://www.dpa.gr
Telephone: +30 210 6475600

10. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. We will publish the updated version on this page with a revised date.

---

If the application provides its own dedicated Privacy Policy for in-app processing, it should be available within the app and/or on app.pestify.gr.