Skip to content

Trust & security

Your clients trust you. You can trust us.

Pet parents share phone numbers, addresses and medical histories with you. Here's exactly how we protect them.

Isolation per business

Every table in our Supabase Postgres database is protected by row-level security policies scoped to your business. Even if application code made a mistake, the database itself refuses to return another business's rows.

Encrypted in transit & at rest

All traffic uses HTTPS/TLS with HSTS. Data is encrypted at rest by our database and storage provider.

Role-based access

Owners decide who sees what. Groomers can see their schedule without seeing revenue; receptionists can bill without editing stock.

Audit log

Changes to invoices, payments and staff are recorded with who did it and when, so mistakes and disputes are easy to trace.

Daily backups

Your data is backed up daily through Supabase's managed backups, so we can recover from accidents.

Secure sign-in

Passwords are hashed by Supabase Auth, sessions use httpOnly cookies, and sensitive server keys never reach the browser.

Hardened web app

Strict Content-Security-Policy and security headers, server-side validation of every form, and public booking endpoints that validate input in the database.

We never sell data

Your clients' and pets' information is yours. We don't sell it, rent it or use it for advertising. Export it anytime.

Responsible disclosure

Found a security issue?

We appreciate researchers who help keep pet businesses safe. Please report vulnerabilities privately and give us reasonable time to fix them.

Report a vulnerability

Read our privacy policy for how we handle personal data.

Give your pet business the software it deserves

Set up in a day, free data migration, and a team that actually picks up the phone.

No credit card · Cancel anytime · Free onboarding