1. Who controls your data
Pawxis is operated by [COMPANY LEGAL NAME] (“we,” “us”), located at [COMPANY ADDRESS]. For data that a Groomer stores about their own Clients and pets, the Groomer is the controller and Pawxis acts as a processor on their behalf. For account, billing, and security data about Groomers, Pawxis is the controller.
2. Data we collect
- Account data. Name, email address, phone number, password (stored hashed), business details, and preferences.
- Client and pet records. Information Groomers enter about their Clients and pets, such as names, contact details, addresses, pet profiles, notes, and appointment history.
- Booking and messaging data. Appointments, availability, and the content and delivery status of SMS and email reminders.
- Payment data. Subscription and deposit transactions are processed by Stripe. We receive limited details such as status and the last digits of a card; we do not store full card numbers.
- Device and usage data. IP address, device and browser information, and log data, used to operate the Service and for security and abuse prevention.
3. How we use data
- Provide, maintain, and improve the Service, including bookings, routing, reminders, and payments.
- Authenticate users and keep accounts and sessions secure.
- Send transactional messages such as booking confirmations, reminders, and account notices.
- Prevent, detect, and investigate fraud, abuse, and security incidents, including rate-limiting and IP-based protections.
- Comply with legal obligations and enforce our terms.
4. SMS and email consent
Groomers are responsible for obtaining consent from their Clients before contacting them by SMS or email through the Service, and for honoring opt-outs. Clients can opt out of SMS at any time by replying STOP to a message; replying HELP requests help. We process these messages to deliver reminders and confirmations and do not sell message content.
5. Cookies and local storage
We use strictly necessary cookies to keep you signed in and to secure your session, and we use your browser’s local storage to remember your theme preference. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for details.
6. How we share data
We do not sell personal data. We share it only as needed to run the Service, with service providers acting on our instructions:
- Stripe — subscription billing and, via Stripe Connect, Client deposit processing paid to Groomers.
- Twilio — delivery of SMS reminders and notifications.
- Email provider — delivery of transactional email.
- Hosting and infrastructure providers — hosting, storage, and operational tooling.
We may also disclose data to comply with law, enforce our terms, or protect rights and safety, and in connection with a merger, acquisition, or sale of assets.
7. Retention
We keep personal data for as long as an account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, and security obligations. Groomers can delete Client and pet records they control; some data may persist in backups for a limited time before being overwritten.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise a right, contact [CONTACT EMAIL]. If your data is held by a Groomer as controller, we may direct your request to that Groomer. We will respond consistent with applicable law.
9. Security
We use technical and organizational measures designed to protect personal data, including encrypted transport, hashed passwords, and access controls. No system is perfectly secure, so we cannot guarantee absolute security.
10. Children
The Service is intended for business users and is not directed to children. We do not knowingly collect personal data from children.
11. International transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.
12. Changes and contact
We may update this policy and will revise the effective date above when we do. For privacy questions or requests, contact [COMPANY LEGAL NAME] at [CONTACT EMAIL], [COMPANY ADDRESS].
