Privacy Policy

Template notice: This document is a starting template and must be reviewed by a qualified lawyer before FurKisses relies on it.

This Privacy Policy explains how FurKisses handles personal data when you visit our website, sign up for an account, or use our software. We have written it to be as clear as possible; if anything is unclear, contact privacy@furkisses.example.

Our role

FurKisses acts in two different roles depending on the data:

• Controller for account data. When you sign up, we decide how to use your name, email, business details, billing information and usage of the Service. This policy describes that processing.
• Processor for your clients' data. When a pet business stores its own clients' and pets' information in FurKisses, such as owner names, phone numbers, addresses, appointment history and pet health notes, the business is the controller and we process that data only on its instructions. If you are a pet owner, please contact the business you deal with about your data; we will help them respond.

Data we collect

• Account and contact data: name, email, phone, business name and address.
• Billing data: subscription plan, invoices and limited payment details. Full card numbers are handled by our payment processors, not stored by us.
• Usage data: log information such as IP address, browser type, pages viewed and actions taken in the app.
• Support data: messages you send us and related correspondence.
• Cookies: see our Cookie Policy.

How we use it

• To provide, maintain and secure the Service
• To process subscription payments and send invoices
• To respond to support requests
• To send service notices, such as security alerts and changes to terms
• To send product updates or marketing, where you have agreed or where the law allows; you can opt out at any time
• To understand how the Service is used and improve it, using aggregated data where possible

We rely on contract, legitimate interests, consent and legal obligations as our legal bases, depending on the activity.

We do not sell data

We do not sell personal data, and we do not use our customers' client data to advertise to their clients.

Hosting and security

The Service is hosted on Supabase infrastructure. We use encryption in transit (TLS) and encryption at rest, role-based access controls, row-level data separation between businesses, and regular backups. Access by our staff is limited to what is needed to operate and support the Service. No system is perfectly secure, but we work to protect data and will notify affected customers of a personal data breach as required by law.

Sub-processors

We use trusted third parties to help run the Service. Categories include:

• Hosting and database providers
• Email delivery providers
• Payment processors
• Messaging providers, such as WhatsApp and SMS gateways
• Error monitoring and analytics tools

Each is bound by contractual obligations to protect the data. A current list is available on request from privacy@furkisses.example.

International transfers

Data may be processed in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.

Retention

We keep account data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations. Client data stored by a business is kept until the business deletes it or closes its account; after closure we delete or anonymise it within a defined period, typically 90 days, except where backups or law require longer.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data, subject to legal exceptions
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

If you are in India, you have rights under the Digital Personal Data Protection Act, 2023, including the right to access information about your data, seek correction and erasure, nominate another person to exercise your rights, and have your grievances addressed. If you are in the EU, UK or a similar jurisdiction, GDPR-style rights apply.

To exercise any right, email privacy@furkisses.example. We may need to verify your identity before responding.

Children

The Service is intended for businesses and is not directed at children.

Changes

We may update this policy from time to time. We will post the new version here and update the date above, and notify account owners of significant changes.

Contact

Privacy questions and grievances: privacy@furkisses.example.