Privacy Policy

1. Who this applies to

This policy covers two kinds of people: Customers (boarding/training businesses and their staff who use PawOps to run day-to-day operations) and Clients (dog owners whose information a Customer enters into PawOps, and who may optionally use the PawOps client portal to view their dog's photos and updates). If you are a Client with questions about your data, please contact the business that boards or trains your dog directly — they control what's entered into PawOps on your behalf.

2. What we collect

• Account & business data: business name, staff names, email addresses, and roles.
• Client & dog data entered by a Customer: client names, phone numbers, email addresses, and addresses; dog names, breeds, medical and behavioral notes, feeding/medication schedules, and photos.
• Operational records: stay and booking details, care logs (feeding, walks, medication), staff task assignments, invoices and payment records, and communications logged with clients (calls, texts, emails).
• Messages sent through PawOps: SMS and voice call metadata (via Twilio) and email content (via Resend) when a Customer sends updates or invoices to a client.
• Client portal activity: if a Client signs in to the portal, we store their sign-in email and the messages/booking requests they submit.
• Connected accounts (optional): if a Customer connects a Google Calendar or Google Ads account, we store the access tokens needed to sync appointment data or display ad performance, scoped only to that Customer's own business. We request the minimum scopes needed for each feature and never access a connected account for any purpose the Customer hasn't enabled.
• Device data: push notification subscriptions, so we can deliver real-time alerts to a staff member's phone or browser.

3. How we use it

We use collected data solely to operate and improve PawOps for the Customer that entered it: running the scheduling, care-logging, billing, communication, and reporting features described in the product, and — where a Customer opts in — an AI assistant (“Sage”) that helps draft client updates or summarize information already logged in the app, using Anthropic's Claude API. We do not sell personal data, and we do not use one Customer's data to benefit another Customer.

4. Service providers we use

PawOps is built on top of the following infrastructure and service providers, each of which processes data only as necessary to provide their part of the service:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Twilio — SMS and voice calling.
• Resend — transactional email delivery.
• Anthropic — AI features (Sage), when enabled by a Customer.
• Google — Calendar and Ads integrations, when a Customer chooses to connect their own Google account.

5. Data retention & deletion

We retain Customer and Client data for as long as a Customer's account is active, plus a reasonable period afterward for backups and legal/accounting purposes. A Customer can request deletion of their business's data, or a Client can request deletion of their own information, by contacting us at the address below — subject to records we're required to retain (e.g., invoices, for tax purposes).

6. Your choices

Clients can request access to, correction of, or deletion of their personal information by contacting the Customer business directly, or by contacting us if that isn't possible. Customers can disconnect a connected Google account at any time from Settings, which revokes PawOps' access to that account.

7. Security

Data is stored with row-level access controls so that one Customer's business data is never visible to another. Sensitive financial fields are additionally restricted to authorized roles within a Customer's own account. No method of storage or transmission is 100% secure, but we take reasonable technical and organizational measures to protect information in our care.

8. Changes to this policy

We may update this policy as PawOps evolves. Material changes will be reflected by updating the “Last updated” date above.

9. Contact

Questions about this policy or your data can be sent to gabriel.tierra.business@gmail.com.