petboard

Privacy Policy

Last updated: 25 March 2026

1. Introduction & Scope

petboard ("we", "us", "our") is a SaaS platform that helps pet service operators (boarding facilities, trainers, daycare providers, sitter networks) manage their business. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the petboard website at petboard.in or any petboard-powered intake form.

This policy applies to all users of the Platform, including operators who manage their business through petboard and pet parents who submit intake forms or receive WhatsApp updates.

This policy is published in compliance with:

Digital Personal Data Protection Act, 2023 (DPDPA)
Information Technology Act, 2000 and the Sensitive Personal Data or Information Rules, 2011 (SPDI Rules)

2. Personal Data We Collect

From Operators (via signup and dashboard)

Data	Required?
Business name	Yes
Phone number / WhatsApp	Yes
Email address	Optional
City	Yes
Business type, modules, staff details	Yes
Logo, brand color	Optional

From Pet Parents (via intake forms)

Data	Required?
Name, phone, email	Name & phone required
Dog details (name, breed, age, weight, photo)	Name required
Health & vaccination info	Optional
Behavioral, feeding, toileting notes	Optional
Emergency contact	Optional

Automatically collected

Pages visited, time spent (via Google Analytics, only if you consent to cookies)
Device type, browser, approximate location (city-level, anonymised IP)

We do not collect identity documents, payment information, or Aadhaar data. There is no KYC, payment processing, or financial data collection on the Platform at this time.

3. Purpose of Data Collection

Data	Purpose
Operator account info	Operating the SaaS platform, authenticating users, managing subscriptions
Pet parent intake data	Providing intake information to the operator for the purpose of pet care
Pet photos and media	Sending WhatsApp updates to pet parents on behalf of the operator
Analytics data	Understanding aggregate website usage to improve the Platform

We process your data only for the purposes stated above. We will not use your data for purposes beyond what is disclosed here without obtaining fresh consent.

4. Legal Basis & Consent

We rely on the following legal bases for processing your data:

Consent — Operators consent by creating an account. Pet parents consent by submitting an intake form. Cookie analytics require separate consent via the cookie banner.
Legitimate interest — Operating the Platform and providing SaaS services to pet operators.
Legal obligation — Complying with applicable laws where required.

5. Children's Data

petboard does not knowingly collect data from individuals under 18 years of age. If we become aware that we have collected data from a child, we will delete that data promptly.

6. Data Storage & Retention

Storage Location

All data is stored on Supabase, hosted on AWS infrastructure in Mumbai, India (ap-south-1). Your data resides within Indian territory.

Retention Periods

Data Type	Retention Period
Operator account data	While the account is active, plus 90 days after deletion request
Intake form submissions	While the operator account is active; deleted upon operator account deletion
Boarding/stay records & media updates	While the operator account is active; deleted upon operator account deletion
Pet photos & media	While the stay is active; operators may delete at any time
Consent records	Duration of account/stay plus 3 years (legal compliance)
Analytics data	Managed by Google Analytics (anonymised, see Section 10)

We share data only as necessary for delivering our services. We do not sell personal data to third parties.

Third Party	Data Shared	Purpose
Supabase	All stored data (as data processor)	Database hosting, file storage. Supabase Privacy Policy
Railway	API request data, application logs	API server hosting. Railway Privacy Policy
Vercel	Website request data	Website hosting. Vercel Privacy Policy
Google Analytics	Anonymised browsing data (only with consent)	Website usage analytics. Google Privacy Policy
Operators	Intake form data (parent name, phone, dog details, health info)	So the operator can provide pet care services. Operators are independent data controllers for the data they receive.
Government / regulators	As required by law	Legal compliance, law enforcement

8. Data Security

We implement reasonable security practices:

Encryption in transit — All data transmitted over TLS/SSL (HTTPS)
Encryption at rest — Database encrypted at rest via Supabase/AWS
Row Level Security (RLS) — Database-level access controls on Supabase
Rate limiting — API endpoints are rate-limited to prevent abuse
Input validation — All form submissions validated server-side
Security headers — Helmet.js security headers applied

9. Your Rights

Under the DPDPA and SPDI Rules, you have the following rights:

Right to Access — Request a summary of personal data we hold about you.
Right to Correction — Request correction of inaccurate data.
Right to Erasure — Request deletion of your personal data. Operators can request account deletion; pet parents can request deletion of their intake and stay data.
Right to Withdraw Consent — Withdraw your consent at any time by contacting us.

To exercise any of these rights, contact us at hello@petboard.in. We will respond within 30 days.

10. Cookies & Analytics

Website (www.petboard.in)

Our website uses Google Analytics 4 to understand how visitors interact with our pages. Google Analytics is loaded only after you provide explicit consent via our cookie consent banner. If you reject cookies, no analytics scripts are loaded.

When you accept cookies, Google Analytics sets the following cookies:

Cookie	Purpose	Duration
`_ga`	Distinguishes unique visitors	2 years
`_ga_<ID>`	Maintains session state	2 years

We have enabled IP anonymisation. Your full IP address is never stored by Google. We do not use analytics data for advertising or profiling.

How to opt out:

Click "Reject" on the cookie consent banner
Click "Cookie Settings" in the website footer to change your preference
Install the Google Analytics Opt-out Browser Add-on

11. Grievance Redressal

In accordance with the DPDPA and IT Act, we have designated the following contact for privacy concerns:

Grievance Officer

Email: hello@petboard.in

We will acknowledge your grievance within 48 hours and resolve it within 30 days.

If you are not satisfied, you may file a complaint with the Data Protection Board of India established under the DPDPA 2023.

12. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes:

The "Last updated" date at the top will be revised
For material changes, we will notify registered providers via email
Where required, we will seek fresh consent

13. Contact Us

petboard