Privacy Policy

Petsy ("we", "us") is operated by [Legal entity name], registered at [registered business address]. Petsy is a multi-tenant software platform used by veterinary clinics, grooming shops, and similar pet businesses ("Businesses", "you", when you sign up as a Business) to manage their clients, pets, appointments, staff, and billing.

It matters who the data is about, because it changes who controls it:

• Business account data — information about you as a Business using Petsy: your name, work email, password (stored as a salted hash, never in plain text), business name, business license details, logo, brand colors, and subscription/billing information.
• Client data you enter — the pet owners, pets, appointments, sales, contracts, and staff records you create inside your workspace. This data belongs to you, the Business. We process it on your behalf, as a data processor, not as its owner. Separating each Business's data is a core part of how Petsy is built — every Business gets an isolated database schema.

• Account details you provide at signup (name, email, password, business name).
• Data you or your staff enter into the dashboard: client and pet records, appointments, sales, contracts, expenses, and any files you upload (logos, signed contracts, business license documents).
• Payment and subscription details, handled by our payment processor, Stripe. We do not store your full card number — Stripe does, under its own security standards (PCI DSS compliant).
• Basic technical data automatically generated by using the app: login timestamps, IP address, browser type, and pages visited, used only for security (like rate-limiting repeated login attempts) and diagnosing errors.
• Cookies used to keep you signed in and remember your theme preference.

• To operate the dashboard: authenticate you, load your workspace's data, send emails (verification, password reset, staff invitations).
• To process subscription payments through Stripe.
• To maintain security: detect and block suspicious login activity.
• To respond to support requests you send us.
• We do not sell your data, or your clients' data, to third parties. We do not use the client/pet data you enter for advertising.

We share data only with the service providers needed to run Petsy:

• Stripe — payment processing for subscription billing.
• [Email provider, e.g. Resend/Postmark] — sending verification, password-reset, and invitation emails.
• [Hosting provider, e.g. DigitalOcean] — where the application and database physically run.

We do not share your data with anyone else unless required by law, or with your explicit consent.

We retain your account and workspace data for as long as your subscription is active. If you cancel or your account is suspended, data is retained for [e.g. 30/90 days] in case you want to reactivate, then permanently deleted unless you ask us to delete it sooner.

Passwords are hashed, not stored in plain text. Each Business's data is isolated in its own database schema, so one Business cannot access another's records. Login attempts are rate-limited to slow down brute-force attacks. Traffic to the app is encrypted (HTTPS/TLS). No system is perfectly secure, and we will notify affected Businesses in the event of a confirmed data breach involving their data, as required by applicable law.

Depending on where you or your clients are located, you may have rights to access, correct, export, or delete personal data (for example, under UAE PDPL or comparable US state privacy laws). Businesses can access, edit, or delete client and pet records directly inside the dashboard at any time. For account-level requests, contact [privacy contact email].

Petsy is a business tool, not directed at children. We do not knowingly collect personal data from children.

We may update this policy as the product changes. Material changes will be communicated to Business account owners by email before they take effect.

Questions about this policy: [privacy contact email].