Privacy Policy for Internal Browser Extension

Data Access and Purpose:

The extension, Ransford Internal Tool (or RIT) activates only on specific PestPac pages and reads limited information from the page context to determine whether the extension should run for the current user and page, fetch relevant rules for the user, and in certain cases, filling out the SALES1 field with your PestPac Short Code to ensure attribution  to you. 

Specifically, the extension may:

  • Check the current page URL to confirm it matches supported PestPac endpoints

  • Read limited data already present on the page if it is a PestPac page including:

    • A user email address

    • A company identifier (company key)

    • Pest Pac specific User shortcode (e.g. ADMIN, CAITLYN)

This information is used only to:

  • Query our back end to provide information on authentication and company-specific rules like:

    • Confirm the user logged into PestPac is in Ransford’s company account 

    • Restrict functionality to authorized internal users

    • Determine which internal features, if any, should activate on the page

    • Fill out Sales1 field to you if relevant

Data Collection, Storage, and Transmission

To maintain a high standard of privacy, the extension adheres to the following:

  • No Usage Data: We do not collect analytics, click-tracking, or behavioral data.

  • Temporary Local Caching: To provide a consistent experience, the extension locally caches your authentication data (Company Key and User identifiers) within the browser’s session storage. This prevents the need for constant re-verification while you navigate PestPac

  • Secure Transmission: The extension transmits the Company Key and User identifiers outside the browser via encrypted HTTPS to our secure Supabase backend to fetch authentication and configuration rules

  • No Third-Party Sharing: We do not share or sell data to third parties. Supabase is used strictly as an internal data hosting provider.

All processing occurs locally within the browser session. No personal data is retained by the extension after the page is closed or refreshed.

Authentication and Caching

The extension does not require a separate login. Authorization is determined using existing PestPac session data already present on the page, which is sent to our Supabase backend for verification.

To ensure efficiency and privacy:

  • Read-Only Requests: All calls to Supabase are READ-ONLY. No data provided from user usage is used to update data tables or modify backend functionality.

  • Rule Caching: The Company Key is used to retrieve “rules” so the system knows which logic to apply to specific service codes without requiring frequent extension updates. These rules are cached locally for the duration of your session to minimize external data transmission.

Third-Party Services

The extension does not use external analytics, tracking, advertising, or third-party services other than our dedicated Supabase infrastructure.

Changes to This Policy

This policy may be updated if the extension’s functionality or permissions change. Any updates will be reflected on this page.

Employee Choice and Opt-Out

Use of the Ransford Internal Tool is optional for employees. If you do not wish for the extension to process page data or communicate with the Supabase backend, you may:

  1. Disable the extension via the browser’s Extension Manager (chrome://extensions).

  2. Uninstall the extension at any time.

  3. Use an Incognito/Private window where the extension is not permitted to run.

Please note that opting out will require you to manually enter substantially more data, fields, etc. when adding service setups and orders.

Contact

For questions about this extension or this privacy policy, please contact Caitlyn over company slack