Privacy Notice
This notice was prepared using a structured review of how Pet Platform actually works and what current data-protection law requires. It has not yet been reviewed by a lawyer. We recommend professional legal review as the product and user base grow, and will update this page if that review changes anything.
Who is responsible for your data
Pet Platform is operated by Teodora Sotirova, an individual based in Sofia, Bulgaria (Mladost 1A), as the data controller for the purposes of the GDPR.
Contact
For any question about this notice or your data, email contact@mypetrec.com.
Data Protection Officer
We haven't appointed a Data Protection Officer. At Pet Platform's current scale, one isn't legally required; we'll revisit this if that changes.
What we collect
Creating an account collects your name, email address, and a securely hashed password. Using Pet Platform collects the pet profile details you choose to enter, plus basic technical information (your session, IP address, and device/browser identifier) needed to keep your account secure.
Why we process it
We process account and pet data because it's necessary to provide the service you've asked for (GDPR Article 6(1)(b)). We process technical/session data to keep the service secure and prevent abuse, which is our legitimate interest (Article 6(1)(f)). We don't currently ask for consent-based processing, because no feature (like reminder emails) that would need it exists yet — if one launches, it will be opt-in and covered by an update to this notice.
What we don't do
We don't run analytics, advertising, or tracking scripts of any kind. We don't sell your data or share it with third parties for marketing. We don't use your data to make automated decisions about you.
Who else handles your data
We use a small number of service providers to run Pet Platform: Supabase for database hosting (EU-based data storage), a web hosting provider for the website itself, and Resend for sending account emails like verification and password reset. None of them may use your data for their own purposes.
International transfers
We aim to keep processing within the EU/EEA. Where a provider processes data outside the EEA, an appropriate legal safeguard (such as the EU Standard Contractual Clauses) applies, consistent with that provider's standard terms.
How long we keep it
We keep your account and pet data for as long as your account is active. After you request account deletion, data is kept for 30 days in case you change your mind, then permanently removed. Session records expire automatically after 7 days of inactivity.
Your rights
Under the GDPR you have the right to access, correct, delete, and receive a portable copy of your personal data, to object to processing based on our legitimate interest, and to ask us to restrict processing. Most of these are self-service, described next.
Your controls
You can see and sign out of your active sessions, download a copy of your account and pet data, and request account deletion — processed after a 30-day recovery window, during which you can cancel — all from your Account page. For anything not yet self-service, email contact@mypetrec.com.
Complaints
If you believe we've mishandled your data, we'd like the chance to address it directly first — but you always have the right to complain to Bulgaria's Commission for Personal Data Protection (KZLD), or another EU data protection authority.
Automated decisions
We don't make any automated decisions about you that have a legal or similarly significant effect.
Cookies
We only use cookies and similar storage that are strictly necessary to run the service — for example, keeping you signed in and remembering your language and theme preference. We don't use analytics or marketing cookies, so we don't show a cookie-consent banner.
Security
We use encrypted connections, hashed passwords, and access controls that limit pet data to its owner. No online service can guarantee absolute security, but we take reasonable, proportionate measures to protect your data.
Children
Pet Platform is intended for people old enough to form a binding agreement under the law that applies to them, per our Terms of Use. If we learn we've collected a child's data without appropriate authorization, we'll delete it.
Changes to this notice
We'll update this notice as the product develops and note the effective date at the top of the page.