Privacy Policy
This document is a draft based on the current implementation. It is not legal advice and has not been approved by counsel. Items awaiting a founder or legal decision are marked below.
This Privacy Policy is a draft based on the current implementation. It is not a final policy and has not been approved by counsel.
Who we are
PawBook is appointment-book and operations software for grooming salons, operated by Jolie-Ann Monteiro as an unincorporated business. PawBook is not an incorporated company.
Data we process
We process the data you provide to run your salon: business and owner identity (including the login email), employees, customers and their animals, appointments, payments and payroll records, imported contact lists, and contact-form submissions. We also record a small amount of non-identifying usage telemetry (no personal data).
Why we process it
To operate your booking, checkout, and payroll, to authenticate you, to manage your subscription and billing, and to provide support. Usage telemetry is aggregate and contains no personal data.
Service providers
We rely on Supabase (authentication, database, and file storage) and Stripe (payment processing). Card details are handled by Stripe and are never stored by PawBook. Email confirmation uses Supabase's email templates.
Storage and access
Data is stored in our database and is separated per salon by access controls. Each salon's records are visible only to that salon's members.
Cookies and analytics
We do not use advertising cookies, marketing pixels, or third-party analytics. The only storage in your browser is for your login session and your language preference.
Retention, correction, export, and deletion
You can correct records directly in the app, export your salon data, and delete records. Deleted items stay recoverable in Trash for 30 days, after which an owner can permanently delete them. Records are retained on a category-specific schedule; exact retention periods are pending qualified legal and accounting review.
Where data is stored
Supabase and Stripe are based in the United States, so some data is processed there. Cross-border disclosures are pending legal review.
Privacy requests and contact
To request access, correction, or deletion of your data, email our privacy team or use the Contact page.
Security incidents
We maintain an incident-response runbook. Any notification obligations are pending legal review.