Privacy Policy

1. Two kinds of information

It helps to separate them. Your account information is data about you as our customer, and we decide how it is handled. Your kennel records are the dogs, litters, buyers, documents and finances you enter; you decide what goes in and how it is used, and we process it on your instructions in order to run the service.

2. What we collect

• Account details: your name, email address, password (hashed, never stored in readable form), and if you enable it, two-factor authentication settings.
• Kennel records you enter: dogs, pedigrees, litters, weights, health and vaccination history, medications, tasks and expenses.
• Details of people you deal with: names, email addresses, phone numbers and notes for buyers, waitlist applicants, co-owners and veterinary contacts.
• Documents and files you upload, such as registration papers, health certificates and contracts.
• Billing information: your plan, subscription status and invoice history. Card details are entered directly with Stripe and never reach our servers.
• Technical and security logs: IP address, browser type, sign-in attempts and a record of significant changes to records, used to keep accounts secure and to investigate problems.

3. Why we use it

To provide the service and keep your records available to you; to authenticate you and protect accounts against unauthorised access; to take payment and manage subscriptions; to send transactional email such as verification, password resets, invitations and contract notifications; to support you when you ask for help; and to diagnose faults and improve reliability.

We do not sell your information, we do not use your kennel records to train machine learning models, and we do not send marketing email to the buyers or applicants stored in your account.

4. Who else processes it

We use a small number of providers to run the service. Each is contractually limited to processing data on our behalf.

• Amazon Web Services (S3) — Stores uploaded documents and files. Processed in the United States.
• Stripe — Processes subscription and invoice payments. Card details are handled by Stripe and never reach our servers. Processed in the United States.
• Resend — Delivers transactional email such as verification, password reset and contract notifications. Processed in the United States.

We may also disclose information where we are legally required to, or to protect the rights and safety of our users. If the business is ever sold or reorganised, your information may transfer as part of it, and we will tell you first.

5. Payments

Payments are handled by Stripe. We store your Stripe customer and subscription identifiers, your plan, and invoice records. We never see or store full card numbers.

6. Security

Data is transmitted over encrypted connections. Passwords are hashed with Argon2id. Uploaded files are scanned for malware before they are made available, and are stored in access-controlled storage rather than served publicly. Significant changes to records are written to an audit log. Access within your account is governed by the roles you assign to team members. No system is perfectly secure, so please use a strong, unique password and enable two-factor authentication.

7. Cookies and local storage

We set a session cookie so you stay signed in; it is strictly necessary for the service to work. Your light or dark theme preference is stored in your browser. We do not use advertising or cross-site tracking cookies.

8. How long we keep it

We keep your records for as long as your account is open. If you close your account, we delete or anonymise your records within 90 days, except where we must keep something longer to meet a legal or accounting obligation, such as invoice and payment records. Security logs are kept for a limited period and then removed. You can export your data at any time before closing your account.

9. Your rights

Depending on where you live, you may have the right to see the information we hold about you, correct it, delete it, receive a copy in a portable format, object to certain processing, or complain to a data protection authority. To exercise any of these, contact us at info@puplitter.com. If your request concerns records held inside a breeder account, we will pass it to the account owner, since they decide what is stored there.

10. Children

The service is intended for business use and is not directed at children under 16, and we do not knowingly collect their information.

11. International transfers

Our providers are based in the United States, so your information may be processed there. Where required, we rely on appropriate safeguards for those transfers.

12. Changes and contact

We will post any update to this policy on this page and change the date above. If a change is material we will notify account owners by email. This policy is issued by [Registered company name], [Registered business address]. For privacy questions, contact info@puplitter.com.