Last updated 16 October 2026

Privacy Policy

PestPilot answers questions about your business from your company's ERP data. This page explains what it collects to do that, why, who helps us process it, and how long it is kept. It covers the website, the web app, the PestPilot bot on Telegram (@seravion_bot) and the API behind them.

Who we are

PestPilot (part of Seravion Connect) is a product of Seravion Technologies ("we", "us"). Questions about this policy go to sales@seraviontechnologies.com.

What we collect

  • Sign-in details. Your work email. We check it against your company's ERP to confirm you hold a CEO or Manager role, then email you a one-time code. We store only a keyed hash of that code, never the code itself.
  • Your ERP profile. After sign-in, the app shows profile fields your company already keeps in its ERP: name, employee ID, role, designation, department, branches, contact number, city and state, and last login.
  • Questions and answers. What you ask, typed or spoken, plus the database query written to answer it, the records it returned and the answer itself. Spoken questions are sent for transcription and the recording is not kept by us.
  • Telegram. Your Telegram user ID, first name and the messages you send the bot. An administrator links your Telegram user ID to your work email before the bot will answer you, and we remember which AI model you picked with /provider.
  • Feedback. When you rate an answer, we keep the rating together with that question and answer.
  • Technical records. Server logs (times, errors, the question text and, for refused Telegram messages, the sender's Telegram ID) and token usage figures used to manage running costs.
  • Your browser. The web app stores your session, chosen tenant, chart and background preferences and a few "already seen" flags in your browser's local storage. We do not use cookies, analytics or advertising trackers. Chat conversations in the web app are not saved; they are cleared when you reload.

Your company's ERP data

PestPilot reads your company's ERP database to answer questions, and only ever reads it: every query runs in a read-only transaction and anything that would change data is refused. We process this data on your company's behalf and under its instructions. Your company decides who has access, and requests about ERP records themselves are best sent to your company's administrator. We do not use your company's data to train AI models.

How we use it

  • To sign you in and confirm that your role allows access (on Telegram, checked again on every message).
  • To answer your questions, and to produce the Excel and PDF exports you ask for.
  • To deliver answers to you on Telegram when you use the bot.
  • To improve answer quality, using your ratings.
  • To keep the service secure, investigate errors and manage running costs.

We do not sell personal data, and we do not use it for advertising.

Who processes it

We share data only with the service providers needed to run PestPilot, and only for that purpose:

  • Google Cloud runs the API, stores its secrets and keeps its server logs.
  • Neon and Amazon Web Services host the databases PestPilot reads ERP data from.
  • Upstash provides a short-lived cache: one-time code hashes, duplicate-message checks, your chosen AI model and reusable query plans.
  • AI model providers (currently Groq by default, Hugging Face and OpenRouter, whichever is selected) receive your question, a description of the relevant database tables and the records needed to write the answer.
  • AssemblyAI transcribes spoken questions in the web app.
  • Telegram carries messages between you and the bot, under Telegram's own privacy policy.
  • Our email provider delivers sign-in codes.
  • Mapbox supplies map tiles when an answer includes locations, and jsDelivr serves profile images. Both see your IP address when your browser loads them.

Each provider handles data under its own terms and policies. We may also disclose information if the law requires it.

Where it is processed

The API runs in Google Cloud's us-central1 region (United States), and its databases and cache are hosted in the United States, so your data may be processed outside the country you live in. AI model providers process requests in the locations they operate.

How long we keep it

  • One-time sign-in codes: at most 5 minutes.
  • Cached answers: 45 seconds. Reusable query plans: 1 hour.
  • Telegram duplicate-message checks: 24 hours. Your chosen AI model: until you change it or ask us to remove it.
  • Server logs: 30 days.
  • Ratings and usage figures written on the server are cleared whenever the service is redeployed.
  • Your browser's local storage: until you sign out or clear this site's data.
  • Telegram link: until an administrator removes it. Your Telegram chat history stays in Telegram until you delete it there.

How we protect it

  • Every connection is encrypted in transit.
  • Database queries are checked before they run and execute read-only.
  • API keys and passwords live in a secret manager, never in code.
  • Telegram requests are verified with a shared secret, and the bot answers only in private one-to-one chats, never in groups.
  • Access is limited to CEO and Manager roles and checked again on every Telegram message, so access removed in your ERP stops immediately.

No system is perfectly secure, but we work to protect your information and fix problems quickly.

Your choices and rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, or withdraw your consent and stop using PestPilot. Depending on where you live, data protection laws (for example India's Digital Personal Data Protection Act, 2023) may give you further rights, including raising a grievance with us. Email sales@seraviontechnologies.com and we will respond within a reasonable time. For changes to ERP records, contact your company's administrator.

You can also clear the web app's stored data at any time by signing out or clearing this site's data in your browser, and stop the Telegram bot by blocking it in Telegram.

Children

PestPilot is a business tool for company staff. It is not meant for anyone under 18.

Changes to this policy

When we change how PestPilot handles data, we will update this page and the date at the top.

Contact

Seravion Technologies · sales@seraviontechnologies.com · seraviontechnologies.com