Security

Where it runs

The site and the app run on Fly.io servers in Ashburn, Virginia. Your account data sits in our Convex database on AWS in the US. Analytics run in Frankfurt.

Fly.io

Runs this site and the app.Servers in Ashburn, Virginia, US.

Convex

Database and backend: accounts, territories, the emails you give us, reports and the published records.On AWS in the US. Stored data is encrypted.

Resend

Sends our emails: sign-in codes, the Monday list and trial emails.US.

PostHog

Analytics and session recordings.Servers in Frankfurt.

Stripe

Card payments, once billing opens.Card details are stored by Stripe, never by us.

Encryption

• Every page and request uses HTTPS. Plain http is redirected, and pestcite.com tells browsers never to connect without HTTPS.
• Convex, our database, encrypts the data it stores.

Who can see your areas and your email

• Other customers can't see your territories, your lists or your email. Each account sees only its own.
• Colleagues you invite to your account see its territories and lists.
• The businesses in the records are never told who looked them up. We don't contact them.
• At pestcite, our co-founder can see accounts, territories, downloads and reports in our admin view, to run your list, answer you and fix wrong records.

Sign-in and access

• You sign in with a one-time code sent to your email. We store no passwords.
• Only the Helios One team can open the database, the servers or the analytics.
• The admin view in the app opens only for staff email addresses set on the server.
• API keys are kept in a secrets vault and in our hosts' secret stores, never in code.
• Download links for a list expire after seven days.

Data we hold

• Your email, plus your name, company, phone and time zone if you book a call.
• Your territories, and the lists you looked at or downloaded.
• The first and the latest link or campaign that brought you to us.
• Reports and feedback you send, with any screenshot you attach.
• The emails we sent you, and whether each was delivered or opened.
• Your plan and trial dates. Card details stay with Stripe.

The records themselves are public government data. We print company names only, never a person's or a homeowner's name.

Analytics and session recordings

We use PostHog to see how people use pestcite. It records the pages you open, your clicks and scrolling, and replays of your visits: what was on screen and what was typed. Password fields, sign-in codes, card fields and anything we mark private are masked in your browser, so they never reach PostHog. Recordings are deleted after thirty days.

Visits from bots and data centers are tagged so they don't count as people. Details: privacy policy.

Report a security problem

Email hello@pestcite.com. It goes straight to our co-founder. Please don't test on other people's accounts.

Want to see what the list looks like? Open the sample or start a free trial.