Privacy policy

1. Information we collect

Information you provide

• Account information: When you create an account, we collect your name, email address, and password. If you create an organization, we collect the organization name, city, state, and contact email.
• Organization data: Information you enter about your rescue operations, including dog profiles (names, breeds, medical status, behavioral notes, photos), foster home profiles (names, addresses, contact information, home details, capabilities), adoption applications (applicant names, contact information, home details, references), medical records, and foster check-in updates.
• Payment information: If you subscribe to a paid plan, payment is processed by Paddle, who acts as the merchant of record. We do not store your full credit card number, expiration date, or CVV on our servers. Paddle's handling of your payment information is governed by Paddle's privacy policy.
• Communications: If you contact us by email or through the Service, we collect the content of your communications.

Information collected automatically

• Usage data: We collect information about how you interact with the Service, including pages visited, features used, and actions taken.
• Device and browser information: We collect your IP address, browser type, operating system, and device type.
• Cookies: We use essential cookies to maintain your login session and preferences. We do not use advertising cookies or third-party tracking cookies.

Information from free tools

When you use our free tools (such as the Foster Home Capacity Calculator or Adoption Time Predictor), we collect the data you enter into the tool. If you provide your email address to save results, we store your email, rescue name, and the tool data you entered.

2. How we use your information

We use your information to:

• Provide, maintain, and improve the Service
• Process your subscription and payments
• Send you transactional emails related to your account (welcome emails, password resets, billing confirmations)
• Respond to your questions and support requests
• Monitor and analyze usage patterns to improve the Service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We may send you occasional product updates about new features or relevant content. You can unsubscribe from these communications at any time by clicking the unsubscribe link in any email or by contacting us directly.

3. How we share your information

We do not sell, rent, or trade your personal information to third parties.

We may share your information in the following limited circumstances:

• Service providers: We use third-party services to operate the Service, including Supabase (database hosting), Paddle (payment processing and merchant of record), and email delivery services. These providers access your data only as necessary to perform their services and are obligated to protect it.
• Public adoption application forms: If you enable the public adoption application feature, applicant-submitted information (applicant name, contact details, application responses) is shared with your organization through the Service. Applicants are informed that their information will be shared with the rescue organization.
• Legal compliance: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: If PupOps is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

4. Data retention

• Active accounts: We retain your data for as long as your account is active and as needed to provide the Service.
• After cancellation: When you cancel your subscription, your account switches to read-only mode for 90 days. During this period you can export your data. After 90 days, we will send you an email notification before scheduling your data for permanent deletion.
• Free tool data: Data submitted through free tools (capacity calculator, adoption predictor) is retained indefinitely unless you request deletion.
• Deletion requests: You may request deletion of your data at any time by contacting us at hello@pupops.io. We will process deletion requests within 30 days, except where we are required by law to retain certain information.

5. Data security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit using TLS (HTTPS)
• Encryption of data at rest using AES-256
• Row-level security policies that restrict data access to authorized organization members
• Regular security monitoring and access logging
• Secure authentication through Supabase Auth

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information, subject to legal retention requirements.
• Export: You may export your data at any time using the export features within the Service.
• Objection: You may object to our processing of your personal information in certain circumstances.

To exercise these rights, contact us at hello@pupops.io. We will respond to requests within 30 days.

7. Children's privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

Note: The Service may store information about minors (such as children's ages listed on foster home or adoption application profiles) that is provided by adult users in the course of managing rescue operations. This information is provided by and accessible only to authorized adult users within the organization.

8. International data

The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer. We process data from Canadian users in accordance with applicable Canadian privacy legislation.

9. California privacy rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

To exercise your CCPA rights, contact us at hello@pupops.io.

10. Cookies

We use only essential cookies necessary for the Service to function:

• Session cookies: Maintain your login state and authentication
• Preference cookies: Remember your settings (such as dark mode preference)

We do not use advertising cookies, analytics cookies from third-party ad networks, or cross-site tracking cookies. We may use a simple, privacy-respecting analytics tool to understand aggregate usage patterns (such as which features are most used), but this does not involve tracking individual users across websites.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect. The "Last Updated" date at the top reflects the most recent revision.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: hello@pupops.io
Website: https://pupops.io