PRIVACY POLICY

Published 2/17/2026

PRIVACY POLICY

Last Updated: February 17, 2026
Effective Date: February 17, 2026

1. INTRODUCTION

Welcome to Petso’s Privacy Policy. This policy describes how Petso Inc. (“Petso”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal information across our platforms:

  • Petso - Pet owner platform
  • Petso Pro - Professional services platform
  • Farmso - Farm management platform

Your privacy is important to us. We are committed to protecting your personal information and being transparent about our data practices.

By using our Services, you consent to the data practices described in this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

Account Information

  • Personal Details: Name, email address, phone number, date of birth
  • Profile Information: Profile photo, bio, location (city/country)
  • Login Credentials: Password (encrypted), linked social accounts
  • Payment Information: Credit card details (stored by Stripe), billing address
  • Professional Information (Petso Pro): License numbers, certifications, insurance details, business registration
  • Farm Information (Farmso): Farm name, registration number, land ownership documents

Pet Information (Petso)

  • Basic Details: Name, species, breed, gender, date of birth, weight
  • Physical Characteristics: Color, markings, special features
  • Microchip Information: Microchip number, registry
  • Medical Records: Vaccination history, medical conditions, allergies, medications
  • Documents: Veterinary records, certificates, photos, videos
  • Behavioral Information: Temperament, training status, special needs

Livestock Information (Farmso)

  • Animal Details: Species, breed, tag numbers, birth dates
  • Health Records: Vaccination history, treatments, veterinary visits
  • Inventory Data: Feed consumption, production metrics
  • Compliance Data: Regulatory certifications, audit records

Content You Create

  • Posts & Comments: Social media posts, comments, reactions
  • Reviews & Ratings: Professional reviews, service ratings
  • Messages: Direct messages, appointment communications
  • Documents: Uploaded files, photos, videos
  • Notes: Personal notes, reminders, annotations

2.2 Information Collected Automatically

Usage Data

  • Platform Activity: Pages viewed, features used, time spent
  • Click Tracking: Buttons clicked, navigation paths
  • Search Queries: Search terms, filters applied
  • Feature Engagement: Features accessed, frequency of use

Device Information

  • Device Type: Mobile, tablet, desktop
  • Operating System: iOS, Android, Windows, macOS
  • Browser Information: Browser type, version
  • Screen Resolution: Display settings
  • Device Identifiers: IP address, device ID (anonymized)

Location Data

  • IP-Based Location: Approximate location from IP address
  • GPS Location: Precise location (only with explicit permission)
  • Service Area: Location for professional service availability
  • Time Zone: For scheduling and notifications

Cookies & Tracking Technologies

  • Essential Cookies: Authentication, security, preferences
  • Analytics Cookies: Usage patterns, performance metrics
  • Functional Cookies: Language preferences, customizations
  • Advertising Cookies: Marketing effectiveness (opt-out available)

2.3 Information from Third Parties

Social Media Login

  • Profile Information: Name, email, profile picture
  • Public Profile Data: From Facebook, Google, Apple
  • Friend Lists: Only with permission

Payment Processors (Stripe)

  • Transaction Data: Payment confirmations, receipts
  • Card Information: Last 4 digits, card type
  • Billing History: Transaction history

Microchip Registries

  • Registration Status: Microchip registration confirmation
  • Owner Verification: Ownership validation

Professional Verification Services

  • License Verification: Professional credential validation
  • Background Checks: Criminal background checks (with consent)
  • Insurance Verification: Coverage confirmation

2.4 Blockchain Data

Decentralized Identifiers (DIDs)

  • DID Creation: Public key, blockchain address
  • Transaction History: Blockchain transactions (public)
  • Verification Status: ZKP verification status

NFT Data

  • Ownership Records: NFT ownership on blockchain
  • Metadata: NFT attributes, creation date
  • Transfer History: Blockchain transaction history

Important: Blockchain data is publicly visible and immutable. We cannot delete or modify blockchain records.

3. HOW WE USE YOUR INFORMATION

3.1 Core Service Delivery

Account Management

  • Create and maintain your account
  • Authenticate your identity
  • Personalize your experience
  • Remember your preferences
  • Multi-device synchronization

Platform Features

  • Petso: Manage pet profiles, health records, appointments
  • Petso Pro: Schedule appointments, manage clients, process payments
  • Farmso: Track livestock, manage compliance, generate reports

Communication

  • Send appointment confirmations
  • Deliver notifications and reminders
  • Respond to support requests
  • Send transactional emails (receipts, confirmations)
  • Platform updates and announcements

3.2 Service Improvement

Analytics & Research

  • Understand usage patterns
  • Identify feature popularity
  • Measure platform performance
  • Conduct A/B testing
  • Improve user interface

Product Development

  • Develop new features
  • Enhance existing functionality
  • Fix bugs and errors
  • Optimize platform speed
  • Improve mobile experience

Machine Learning & AI

  • Personalized recommendations
  • AI health insights (with consent)
  • Predictive analytics
  • Automated moderation
  • Smart search results

3.3 Safety & Security

Fraud Prevention

  • Detect suspicious activity
  • Prevent unauthorized access
  • Verify professional credentials
  • Monitor for abuse
  • Identify fake accounts

Platform Security

  • Maintain system security
  • Prevent cyberattacks
  • Protect against malware
  • Secure blockchain transactions
  • Encrypt sensitive data
  • Comply with laws and regulations
  • Respond to legal requests
  • Enforce Terms of Service
  • Protect our legal rights
  • Cooperate with law enforcement

3.4 Marketing & Promotions

Communication (Opt-Out Available)

  • Send newsletters
  • Promote new features
  • Offer special promotions
  • Recommend services
  • Send surveys and feedback requests

Advertising

  • Display relevant ads
  • Measure ad effectiveness
  • Personalize marketing
  • Retarget visitors (with consent)
  • Partner promotions

3.5 Payment Processing

Transaction Management

  • Process payments
  • Issue refunds
  • Generate invoices
  • Track subscription billing
  • Calculate platform fees

Professional Payouts

  • Distribute earnings
  • Generate tax forms (1099)
  • Maintain financial records
  • Comply with tax regulations

4. HOW WE SHARE YOUR INFORMATION

4.1 With Other Users

Pet Owners & Professionals

When you book an appointment:

  • Shared with Professional: Pet name, species, breed, age, medical history (with your consent), contact information
  • Shared with Owner: Professional name, business name, credentials, location, pricing

Social Features

When you use social features:

  • Public Profile: Display name, profile photo, pet photos (controllable via privacy settings)
  • Posts & Comments: Visible to your followers or publicly
  • Reviews: Visible publicly with your name

Privacy Controls

You control data sharing through:

  • Privacy settings per pet
  • Global search visibility toggle
  • Data sharing consent per appointment
  • Social profile privacy settings

4.2 With Service Providers

We share data with trusted third parties:

Infrastructure & Hosting

  • Cloud Storage: AWS, Google Cloud (data encrypted)
  • CDN Providers: Cloudflare (for performance)
  • Email Services: SendGrid, Amazon SES
  • SMS Providers: Twilio (for notifications)

Payment Processing

  • Stripe: Payment processing, subscription management
  • PayPal: Alternative payment method
  • Information shared: Transaction amount, payment method, billing address

Analytics & Monitoring

  • Google Analytics: Usage statistics (anonymized)
  • Mixpanel: Feature engagement
  • Sentry: Error monitoring
  • Datadog: Performance monitoring

Communication Tools

  • Customer Support: Zendesk, Intercom
  • Marketing Automation: Mailchimp, SendGrid
  • Push Notifications: Firebase, OneSignal

Security & Verification

  • Identity Verification: Stripe Identity
  • Background Checks: Checkr (professionals only, with consent)
  • License Verification: Professional licensing boards
  • Fraud Detection: Sift, MaxMind

4.3 With Business Partners

Microchip Registries

  • Share microchip data for registration
  • Verify ownership status
  • Update contact information

Veterinary Networks

  • Share medical records (with consent)
  • Emergency access to pet information
  • Coordinate care between providers

Travel Authorities (E-Passport)

  • Share vaccination records
  • Provide health certificates
  • Verify travel compliance

4.4 With Regulatory Authorities (When Required)

  • Court orders and subpoenas
  • Law enforcement requests
  • Regulatory investigations
  • Tax authorities (for professionals)
  • Agricultural compliance agencies (Farmso)

Public Health & Safety

  • Animal disease outbreaks
  • Public safety concerns
  • Child/animal abuse reports
  • Emergency situations

4.5 Business Transfers

In the event of:

  • Merger or acquisition
  • Sale of assets
  • Bankruptcy
  • Corporate restructuring

Your data may be transferred to the acquiring entity.

We may share information:

  • When you explicitly authorize
  • For specific purposes you approve
  • Through integrations you enable
  • Via data export features

5. DATA PRIVACY CONTROLS

5.1 Owner Privacy Settings

Pet Profile Privacy

  • Private: Only visible to you
  • Shared with Professionals: Accessible during appointments
  • Global Search: Searchable by microchip/DID
  • Social: Visible in pet social network

Information Visibility Control

Choose what to share:

  • ✓ Pet name and species (required)
  • ☐ Breed and age
  • ☐ Microchip number
  • ☐ Vaccination records
  • ☐ Medical history
  • ☐ Owner contact information
  • ☐ Location/address

Search Privacy

  • Enable/disable global pet search
  • Control QR code emergency information
  • Limit professional directory visibility
  • Hide from social feed

5.2 Professional Privacy Settings

Business Information

  • Display business name and location
  • Show credentials and certifications
  • Control service area visibility
  • Hide/show pricing publicly

Availability

  • Manage calendar visibility
  • Control booking window
  • Set private appointment types

5.3 Communication Preferences

Email Notifications

  • ☐ Appointment reminders
  • ☐ Health record updates
  • ☐ Promotional emails
  • ☐ Newsletter
  • ☐ Product updates
  • ☐ Community digest

Push Notifications

  • ☐ Appointment confirmations
  • ☐ Messages from professionals
  • ☐ Social interactions
  • ☐ Rewards updates
  • ☐ System alerts

SMS Messages

  • ☐ Appointment reminders
  • ☐ Emergency alerts
  • ☐ Verification codes

5.4 Marketing Preferences

Opt-out options:

  • Unsubscribe from marketing emails
  • Disable personalized ads
  • Opt-out of third-party cookies
  • Stop retargeting campaigns
  • Decline promotional SMS

6. DATA RETENTION

6.1 Active Accounts

We retain data while your account is active:

  • Account information: Duration of account
  • Pet profiles: Until deleted by user
  • Health records: Permanent (unless deleted)
  • Appointment history: 7 years
  • Payment records: 7 years (tax compliance)
  • Messages: 90 days (or until deleted)
  • Social posts: Until deleted

6.2 Deleted Accounts

After account deletion:

  • Immediate deletion: Profile information, preferences, settings
  • 30-day grace period: Account recoverable upon request
  • Retained for legal compliance: Transaction records (7 years), tax documents, legal holds
  • Permanently deleted: Pet photos, documents, personal notes (after 30 days)

6.3 Professional Records

Professional accounts retain:

  • Client records: 7 years after last appointment
  • Financial records: 7 years (IRS requirement)
  • License verification: 3 years after expiration
  • Background checks: Duration of platform use

6.4 Blockchain Data

Important: Blockchain data is immutable and cannot be deleted:

  • DIDs: Permanent on Solana blockchain
  • NFT ownership: Permanent blockchain record
  • Transaction history: Publicly visible forever

We can:

  • Remove association with your account
  • Delete off-chain metadata
  • Deactivate DID display on platform

6.5 Backup Retention

Backups retained for:

  • Disaster recovery: 90 days
  • Business continuity: 30 days
  • Point-in-time recovery: 7 days

7. DATA SECURITY

7.1 Technical Safeguards

Encryption

  • Data in Transit: TLS 1.3 encryption
  • Data at Rest: AES-256 encryption
  • Database Encryption: Encrypted databases
  • Backup Encryption: Encrypted backups

Access Controls

  • Multi-factor authentication (MFA)
  • Role-based access control (RBAC)
  • Principle of least privilege
  • Regular access audits
  • IP whitelisting for admin access

Infrastructure Security

  • AWS security best practices
  • Firewall protection
  • DDoS mitigation (Cloudflare)
  • Intrusion detection systems
  • Regular security patches

7.2 Organizational Safeguards

Employee Training

  • Annual security training
  • Privacy awareness programs
  • Incident response training
  • GDPR/CCPA compliance training

Access Limitations

  • Need-to-know basis only
  • Confidentiality agreements
  • Background checks for employees
  • Termination procedures

Third-Party Security

  • Vendor security assessments
  • Data processing agreements
  • SOC 2 Type II certification required
  • Regular audits

7.3 Security Practices

Regular Testing

  • Quarterly penetration testing
  • Annual security audits
  • Vulnerability scanning
  • Code security reviews

Monitoring

  • 24/7 security monitoring
  • Anomaly detection
  • Automated alerts
  • Incident response team

Certifications

  • SOC 2 Type II compliant
  • PCI DSS Level 1 (via Stripe)
  • GDPR compliant
  • CCPA compliant

7.4 Blockchain Security

Wallet Security

  • You control private keys
  • Hardware wallet support
  • Multi-signature options
  • Key recovery mechanisms

Smart Contract Security

  • Audited smart contracts
  • Bug bounty program
  • Formal verification
  • Upgrade mechanisms

7.5 Data Breach Response

In case of a breach:

  1. Immediate containment: Isolate affected systems
  2. Investigation: Determine scope and impact
  3. Notification: Inform affected users within 72 hours
  4. Remediation: Fix vulnerabilities
  5. Reporting: Notify regulators as required

8. YOUR RIGHTS & CHOICES

8.1 Access Rights

You have the right to:

  • View your data: Access all personal information we hold
  • Download your data: Export in machine-readable format (JSON, CSV)
  • Request copies: Receive copies of specific records

How to exercise: Account Settings > Privacy > Download My Data

8.2 Correction Rights

You have the right to:

  • Update information: Edit profile, pet details, preferences
  • Correct inaccuracies: Fix errors in your data
  • Complete incomplete data: Add missing information

How to exercise: Edit directly in your account or contact support

8.3 Deletion Rights (“Right to be Forgotten”)

You have the right to:

  • Delete account: Permanently remove your account
  • Delete specific data: Remove individual pet profiles, posts, documents
  • Withdraw consent: Revoke previously granted permissions

Exceptions:

  • Legal obligations (tax records, court orders)
  • Contract performance (active subscriptions)
  • Legitimate interests (fraud prevention)
  • Blockchain data (immutable)

How to exercise: Account Settings > Privacy > Delete Account

8.4 Portability Rights

You have the right to:

  • Export data: Structured, machine-readable format
  • Transfer data: Move to another service
  • API access: Programmatic data access (Enterprise)

Data included:

  • Account information
  • Pet profiles and records
  • Appointment history
  • Documents and photos
  • Social posts

How to exercise: Account Settings > Privacy > Export Data

8.5 Objection Rights

You have the right to object to:

  • Marketing communications: Opt-out anytime
  • Data processing: Object to specific uses
  • Profiling: Opt-out of automated decisions
  • AI analysis: Decline AI health insights

How to exercise: Privacy Settings or email privacy@petso.com

8.6 Restriction Rights

You have the right to:

  • Limit processing: Restrict how we use data
  • Freeze account: Temporarily suspend (not delete)
  • Limit sharing: Reduce third-party sharing

8.7 Automated Decision Rights

You have the right to:

  • Human review: Request manual review of automated decisions
  • Explanation: Understand AI/algorithm decisions
  • Opt-out: Decline automated processing

8.8 Complaint Rights

You have the right to:

  • File complaints: With supervisory authorities
  • Contact regulators: Data protection agencies
  • Seek remedies: Legal recourse

Supervisory Authorities:

  • EU: Your local Data Protection Authority
  • California: California Attorney General
  • Canada: Office of the Privacy Commissioner

9. REGIONAL PRIVACY RIGHTS

9.1 European Union (GDPR)

  • Consent: You’ve given explicit permission
  • Contract: Necessary for service delivery
  • Legal Obligation: Required by law
  • Legitimate Interest: Our business needs (with your rights considered)

EU-Specific Rights

  • Right to data portability
  • Right to restriction of processing
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge complaint with supervisory authority

International Transfers

  • Standard Contractual Clauses (SCCs)
  • EU-US Data Privacy Framework participation (pending)
  • Adequacy decisions where applicable

Data Protection Officer

Contact: dpo@petso.com

9.2 California (CCPA/CPRA)

California Consumer Rights

  • Right to Know: What data we collect and how we use it
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of sale/sharing (we don’t sell data)
  • Right to Non-Discrimination: Equal service regardless of privacy choices
  • Right to Correct: Fix inaccurate information
  • Right to Limit: Limit use of sensitive personal information

Do Not Sell My Personal Information

We do NOT sell your personal information.

We may share data for business purposes as described in this policy.

Shine the Light Request

California residents can request disclosure of third-party sharing for marketing purposes.

How to exercise: Email privacy@petso.com with “California Privacy Rights”

9.3 Canada (PIPEDA)

Canadian Rights

  • Right to access personal information
  • Right to challenge accuracy
  • Right to withdraw consent
  • Right to file complaint with Privacy Commissioner

Contact: privacy@petso.com or Office of the Privacy Commissioner of Canada

9.4 Brazil (LGPD)

Brazilian Rights

  • Access to personal data
  • Correction of incomplete/inaccurate data
  • Anonymization, blocking, or deletion
  • Portability to another provider
  • Information about public/private sharing
  • Revocation of consent

9.5 Other Regions

We comply with local privacy laws in:

  • Australia (Privacy Act)
  • Japan (APPI)
  • South Korea (PIPA)
  • Singapore (PDPA)
  • United Kingdom (UK GDPR)

10. CHILDREN’S PRIVACY

10.1 Age Restrictions

  • Under 13: Not permitted (COPPA compliance)
  • 13-17: Parental consent required
  • 18+: Full account access

10.2 Parental Controls

Parents/guardians of users 13-17 can:

  • Access their child’s account
  • Control privacy settings
  • Review activity
  • Delete account
  • Limit features

10.3 Children’s Data Collection

For users 13-17, we collect:

  • Minimum necessary information
  • No behavioral advertising
  • No selling of data
  • Enhanced privacy protections

10.4 Verification

We may require:

  • Age verification during signup
  • Parental consent forms
  • ID verification for disputed ages

10.5 Reporting Underage Users

If you believe a user is under 13:

  • Email: privacy@petso.com
  • Subject: “Underage User Report”
  • We will investigate and take action

11. COOKIES & TRACKING

11.1 Types of Cookies

Essential Cookies

Purpose: Platform functionality
Examples: Authentication, security, session management
Can opt-out: No (required for service)

Analytics Cookies

Purpose: Usage statistics, performance monitoring
Examples: Google Analytics, Mixpanel
Can opt-out: Yes

Functional Cookies

Purpose: Preferences, customization
Examples: Language, theme, layout preferences
Can opt-out: Yes (will reset preferences)

Advertising Cookies

Purpose: Marketing, retargeting
Examples: Facebook Pixel, Google Ads
Can opt-out: Yes

Browser Settings:

  • Block all cookies
  • Block third-party cookies
  • Delete cookies regularly
  • Private/incognito mode

Platform Settings: Account Settings > Privacy > Cookie Preferences

11.3 Do Not Track

We honor Do Not Track (DNT) signals:

  • Disable analytics tracking
  • Stop behavioral advertising
  • Limit third-party cookies

11.4 Mobile Tracking

Mobile Identifiers

  • Advertising ID (iOS/Android)
  • Device identifiers (anonymized)
  • App-specific IDs

Opt-out:

  • iOS: Settings > Privacy > Tracking
  • Android: Settings > Google > Ads > Opt out

12. THIRD-PARTY SERVICES

12.1 Payment Processing (Stripe)

Data shared:

  • Payment card information
  • Billing address
  • Transaction amount
  • Email address

Stripe’s Privacy Policy: stripe.com/privacy

Control: Required for payments, no opt-out

12.2 Cloud Storage (AWS)

Data stored:

  • Documents and photos
  • Database backups
  • User-generated content

AWS Privacy Policy: aws.amazon.com/privacy

Security: Encrypted at rest and in transit

12.3 Social Media Login

Providers: Facebook, Google, Apple

Data received:

  • Profile information
  • Email address
  • Profile photo

Control: Choose social login or email signup

12.4 Analytics Services

Google Analytics:

  • Usage patterns
  • Demographics (aggregated)
  • Device information

Opt-out: Google Analytics Opt-out Browser Add-on

12.5 Communication Services

SendGrid/Twilio:

  • Email/SMS delivery
  • Contact information
  • Message content

Control: Opt-out of non-essential communications

13. INTERNATIONAL DATA TRANSFERS

13.1 Data Storage Locations

Primary servers located in:

  • United States (AWS US-East-1)
  • European Union (AWS EU-West-1)
  • Asia-Pacific (AWS AP-Southeast-1)

13.2 Transfer Mechanisms

EU to US:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Explicit consent where required

Other Regions:

  • SCCs for international transfers
  • Local data residency options (Enterprise)

13.3 Data Localization

Enterprise customers can request:

  • Data residency in specific regions
  • Local data processing only
  • Restricted international transfers

14. DATA ACCURACY & QUALITY

14.1 Our Commitment

We strive to:

  • Maintain accurate records
  • Update information promptly
  • Verify professional credentials
  • Remove outdated data

14.2 Your Responsibility

You are responsible for:

  • Providing accurate information
  • Updating changed details
  • Correcting errors
  • Verifying pet medical records
  • Maintaining current contact information

14.3 Professional Verification

We verify:

  • Professional licenses (annually)
  • Business registration
  • Insurance coverage
  • Background checks (initial and periodic)

14.4 Dispute Resolution

If you dispute data accuracy:

  1. Contact support@petso.com
  2. Provide correct information
  3. Include supporting documentation
  4. We investigate within 30 days
  5. Corrections made or explanation provided

15. CHANGES TO PRIVACY POLICY

15.1 Notification of Changes

We will notify you of material changes via:

  • Email to registered address
  • In-app notification
  • Banner on website
  • Update to “Last Updated” date

15.2 Notice Period

  • Material changes: 30-day notice before effective
  • Minor changes: Effective upon posting
  • Legal requirements: Immediate if required by law

15.3 Your Options

If you disagree with changes:

  • Export your data
  • Delete your account
  • Opt-out of new features
  • Contact us with concerns

15.4 Continued Use

Continued use after effective date constitutes acceptance of updated Privacy Policy.

15.5 Version History

Previous versions available at: petso.com/privacy/archive

16. CONTACT US

16.1 Privacy Team

Email: privacy@petso.com
Response Time: Within 48 hours

Subject Line Guidance:

  • Data Access Request
  • Data Deletion Request
  • Privacy Concern
  • GDPR Inquiry
  • CCPA Request

16.2 Data Protection Officer (DPO)

Email: dpo@petso.com
Scope: EU/EEA data subjects

16.3 Mailing Address

Petso Inc.
Privacy Department
123 Pet Plaza, Suite 500
San Francisco, CA 94105
United States

16.4 Regional Contacts

EU Representative:
Petso EU Privacy Services
Email: eu-privacy@petso.com

UK Representative:
Petso UK Privacy Services
Email: uk-privacy@petso.com

16.5 Regulatory Authorities

EU: Your local Data Protection Authority
California: California Attorney General
Canada: Office of the Privacy Commissioner

Find supervisory authorities: petso.com/privacy/authorities

17. SPECIFIC PROCESSING ACTIVITIES

17.1 AI & Machine Learning

Purpose:

  • Personalized recommendations
  • Health insights (opt-in)
  • Predictive analytics
  • Image recognition (pet photos)
  • Content moderation

Data used:

  • Usage patterns
  • Pet health records (with consent)
  • User interactions
  • Uploaded images

Your control:

  • Opt-out of AI processing
  • Request human review
  • Delete AI-generated insights

17.2 Blockchain Processing

Purpose:

  • DID creation and management
  • NFT minting and transfers
  • Immutable record keeping
  • Zero-knowledge proofs

Important limitations:

  • Blockchain data is public
  • Cannot be deleted or modified
  • Transactions are permanent
  • We don’t control the blockchain

17.3 Biometric Data

Face recognition (optional):

  • Pet photo organization
  • Lost pet matching
  • Facial feature tagging

Control:

  • Opt-in only
  • Can be disabled anytime
  • Biometric data encrypted
  • Not shared with third parties

17.4 Location Data

Collection:

  • IP-based location (automatic)
  • GPS location (with permission)
  • Service area (professionals)

Uses:

  • Find nearby professionals
  • Emergency pet location
  • Location-based recommendations
  • Time zone adjustments

Control:

  • Disable GPS access
  • Use approximate location only
  • Clear location history

18. PROFESSIONAL-SPECIFIC PRIVACY

18.1 Client Data Responsibilities

As a professional, you must:

  • Use client data only for service delivery
  • Maintain confidentiality
  • Not share without permission
  • Secure data appropriately
  • Delete when no longer needed

18.2 Professional Profile Privacy

You control:

  • Business information visibility
  • Credential display
  • Service area publication
  • Pricing transparency
  • Calendar availability

18.3 Client Communication

  • Messages stored for 90 days
  • Encrypted in transit
  • Not used for marketing
  • Accessible to both parties
  • Can be deleted by either party

18.4 Reviews & Ratings

Display:

  • Public on professional profile
  • Average rating calculated
  • Recent reviews highlighted

Privacy:

  • Reviewers identified by name
  • Professionals cannot remove negative reviews
  • False reviews can be disputed
  • Moderation for inappropriate content

19. TRANSPARENCY & ACCOUNTABILITY

19.1 Data Processing Records

We maintain records of:

  • Processing activities
  • Legal basis for processing
  • Data retention schedules
  • Third-party processors
  • International transfers

19.2 Privacy Impact Assessments

We conduct assessments for:

  • New features with privacy implications
  • High-risk processing activities
  • Automated decision-making
  • Large-scale data processing

19.3 Audits & Certifications

  • Annual privacy audits
  • SOC 2 Type II certification
  • GDPR compliance reviews
  • Security certifications
  • Third-party assessments

19.4 Breach Notification

In case of data breach:

  • Investigation within 24 hours
  • User notification within 72 hours
  • Regulatory notification as required
  • Public disclosure if significant
  • Remediation plan published

20. ADDITIONAL INFORMATION

20.1 Anonymous Data

We use anonymized/aggregated data for:

  • Industry research
  • Statistical analysis
  • Platform improvement
  • Public reporting

Anonymization process:

  • Remove personally identifiable information
  • Aggregate with other users
  • Cannot be re-identified
  • Not subject to privacy rights

20.2 Research & Development

We may use data for:

  • Product research
  • Feature testing
  • Academic partnerships
  • Industry studies

Safeguards:

  • Anonymization when possible
  • Ethical review board approval
  • User consent for identifiable data
  • Secure research environments

20.3 Legacy Data

For inactive accounts (2+ years):

  • Anonymization of personal data
  • Retention of statistical data
  • Deletion of sensitive information
  • Option to reactivate within 30 days

BY USING PETSO SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.

Questions? Contact privacy@petso.com

Last Updated: February 17, 2026
Version: 2.0

© 2026 Petso Inc. All rights reserved.