Privacy Policy

SmarterPaws acts as a controller for rescue staff accounts, marketing-site visitors, and people who contact us. SmarterPaws acts as a processor for the applicant, adopter, foster, donor, dog, medical, cost, donation, message, and document data that rescues manage in the product. For that data the rescue is the controller, so applicants and others should direct their requests to the rescue they applied to.

• Account and profile information: name, email, phone, organization, role, and hashed passwords.
• Billing information: plan tier, billing interval, and status. Card data is handled by Stripe, not by us.
• Usage and device logs: IP address, browser, pages viewed, and timestamps.
• Communications and marketing leads, including messages you send us and information you submit through our forms.

We use information to provide, secure, and improve the Service, authenticate users, process subscription payments, respond to requests, send service messages, and comply with law. We do not sell personal information and we do not use it for third-party advertising.

Application data submitted through a rescue's forms is collected on behalf of that rescue and used only to let the rescue manage it. Deletion and access requests for that data go to the rescue.

The optional AI application-scoring feature produces a suggested score, a recommendation, and risk flags as decision support only. Staff make all final decisions, and rescues control whether the feature is turned on.

• Supabase and our hosting provider: database, authentication, storage, and hosting.
• Stripe: billing and Connect donations.
• Twilio: SMS.
• Resend or our then-current email provider: transactional email.
• An AI model provider accessed through our AI gateway: application scoring.

We do not sell data. We disclose information only to the providers listed above, to comply with law, to protect rights and safety, or in connection with a merger or acquisition.

We keep account data while an account is active plus a reasonable legal period. Customer data is kept according to the rescue's instructions and our Data Processing Addendum, and is deleted or returned after termination.

We use row-level tenant isolation, encrypted connections, hashed credentials, scoped access, and server-side validation.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict processing, and to withdraw consent. California residents have CCPA and CPRA rights, and we do not sell or share personal information. Individuals in the EEA and the UK have GDPR and UK GDPR rights.

Send controller-level requests to sofia@smarterpaws.ai. For data controlled by a rescue, contact that rescue. We do not discriminate against anyone for exercising these rights.

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

We operate in the United States. Transfers of customer data are governed by our Data Processing Addendum where required.

We post changes to this policy with a new date. We provide notice of material changes.

sofia@smarterpaws.ai, or [LEGAL ENTITY NAME], [MAILING ADDRESS]. Operated by [LEGAL ENTITY NAME], a [STATE] limited liability company.