Security
How PestLynx keeps your company's information safe, in plain English.
Your data is separated per company
Every customer, property, visit, invoice and text belongs to one company. Every screen, search and download only reads your own company's records, and an address from another company opens nothing. Automated tests check this.
Encrypted in transit
PestLynx only works over HTTPS, so everything between your phone or computer and PestLynx is encrypted on the way.
Card data never touches our servers
Card payments and saved cards are handled by Stripe on its own secure pages. PestLynx never sees or stores a card number.
Login protection
Five wrong passwords within 15 minutes lock the login for 15 minutes, and repeated attempts from one place are slowed down. A password reset link works once, for one hour, and signs out other devices. The Owner can see recent sign-ins on the Team screen.
Audit trail
Changes to important records — completed visits, time cards, payments, refunds, settings — are kept in a history with who made them and when. Completed visits are locked; an edit adds a history entry, never a silent change.
Backups
Once a week a copy of each company's data is saved separately from the live database, and the last 8 copies are kept.
Services we use (sub-processors)
PestLynx uses these companies to run the service. Each one only gets what it needs for its job.
- VercelHosts the PestLynx website and app.
- NeonHosts the database (PostgreSQL).
- StripeCard payments, saved cards and PestLynx's own billing.
- TwilioSends and receives text messages.
- ResendSends emails (confirmations, reports, invoices, receipts).
- SentryError alerts, with passwords, tokens, card numbers and customer emails and phones removed.
Report a problem
Think you've found a security problem? Email us and we'll answer quickly. Please don't share the details publicly until it's fixed.