Privacy Policy

Last updated: July 22, 2026

At PawsRx, we take your privacy seriously. This Privacy Policy explains how PawsRx, LLC ("PawsRx," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website, platform, and services (collectively, the "Service").

By using PawsRx, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following types of information to provide and improve the Service:

Account information

• Name, email address, and phone number
• Home address, which a practice you book with uses to open your client file
• Account credentials

Pet health information

• Pet name, species, breed, age, and weight
• Health history, symptoms, and current medications
• Veterinary consultation notes and communications

Payment information

• Payment details are processed securely through Stripe. PawsRx does not store your full credit card number, CVV, or other sensitive payment credentials on our servers.

Usage information

• Basic device and browser information, pages visited, and interactions with the platform to help us improve the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide and deliver the Service, including connecting you with licensed veterinarians and passing your appointment requests to the practice you chose.
• Communicate with you about your account, your questions, your appointments, and service updates.
• Process payments where a practice charges through PawsRx. There is no consumer subscription to manage.
• Improve, personalize, and develop new features for the platform.
• Comply with legal obligations and enforce our Terms of Service.

3. Who We Share Your Information With

We never sell your personal information for money. We do share it with Meta for advertising, which California law counts as sharing for cross-context behavioral advertising, and you can switch that off at any time using the Do Not Sell or Share My Personal Information link in the footer. Otherwise we share data only with trusted partners who are necessary for delivering the Service:

• Independent licensed veterinariansreceive your pet's health information to conduct clinical assessments and, where appropriate, prescribe treatment.
• The veterinary practice you book with receives your name, contact details, your pet, and anything you told us about the visit, so they can confirm the appointment and open a client file.
• Stripe processes your payment information securely. We do not have access to your full payment details.
• Resend handles transactional emails such as booking confirmations and account notifications on our behalf.
• Supabase provides our database and authentication infrastructure.

We may also disclose information when required by law, to protect our rights, or in connection with a merger or acquisition.

4. Data Storage and Security

Your data is stored in the United States using Supabase, a secure cloud database infrastructure. We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Access controls and authentication for all internal systems
• Regular security reviews and monitoring

While we take reasonable steps to protect your data, no system is 100% secure. We encourage you to use strong passwords and keep your account credentials private.

5. Veterinary Records and Pet Health Information

Veterinary medical records are not subject to the federal Health Insurance Portability and Accountability Act (HIPAA), which applies only to human health information held by covered entities. PawsRx is not a HIPAA-covered entity and does not represent itself as HIPAA-compliant. Instead, your pet's health information is protected under applicable state veterinary record confidentiality statutes, the AVMA Principles of Veterinary Medical Ethics, and PawsRx's own internal data security practices, which include encryption in transit and at rest, access controls, and limits on third-party sharing.

6. Cookies and Similar Technologies

Two kinds of storage are used on this site, and they are treated differently because they are different things.

Strictly necessary, always on. Sign-in session cookies set by our authentication provider, Supabase, which keep you logged in as you move between pages; and a small cookie recording your answer to the cookie banner, so we do not ask again on every page. Without these the Service cannot function, so they are not subject to a choice.

Analytics, your choice. Google Analytics 4, with IP anonymization enabled, sets first-party cookies (_ga and a property-specific companion) that last up to two years and let us count visits and see which pages are used. PostHog, a product analytics service, sets a first-party cookie (beginning ph_) and matching local storage entries that last up to one year and show us how features like search and booking actually get used, so we can fix the ones that do not work. If you accept analytics yourself, from the banner or from Cookie Settings, PostHog also records a replay of your visit: the pages, the clicks, and the scrolling, with anything you type into a form masked in your browser before it is sent to PostHog. A replay never starts on the notice-only default described below; only an explicit yes starts one, and turning analytics off stops it. We also keep a first-touch record in your browser's local storage noting how you first arrived (referring site and any campaign tags), so we can tell which channels bring people here. None of it is loaded or written unless analytics is switched on for you.

We also use Vercel Web Analytics, which is cookieless: it stores nothing on your device and reports aggregate page traffic only. Because it does not read from or write to your device, it runs regardless of your analytics choice.

How the choice is made and changed. Visitors in Europe and the United Kingdom are asked before any analytics loads, and nothing non-essential runs until they accept. Elsewhere, analytics runs with the banner on screen and one click stops it. Either way you can change your mind at any time using the Cookie Settings link in the footer of every page. Turning analytics off deletes the analytics cookies and the first-touch record already on your device, and we ask again after six months rather than treating an old answer as permanent.

If your browser sends a Global Privacy Control (GPC) signal, we treat it as an instruction to switch analytics off and honor it automatically, without showing you a banner.

We embed a Meta advertising pixel, which sets _fbp and _fbc cookies and lets Meta match your visit to your account with them so we can advertise to you elsewhere. It is off unless you turn it on, in every country, and turning it off deletes those cookies from this device. We do not sell analytics data. California residents can opt out of sharing at any time using the Do Not Sell or Share My Personal Information link in the footer, and a Global Privacy Control signal does it automatically.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your data within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as billing records, or an appointment history a practice must keep).

8. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct any inaccurate or incomplete information.
• Delete your personal data, subject to legal retention requirements.
• Export your data in a portable format.

To exercise any of these rights, please contact us at hello@pawsrx.io. We will respond to your request within 30 days.

9. California Privacy Rights (CCPA) — Do Not Sell My Personal Information

PawsRx does not sell personal information. We do not share your data with advertisers or unrelated third parties. If you are a California resident and want to formally opt out of any future sale or sharing, email hello@pawsrx.io with the subject line "Do Not Sell" and we will record your request.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose about you.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. PawsRx does not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise your California privacy rights, please contact us at hello@pawsrx.io.

10. Children's Privacy

PawsRx is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has created an account or provided personal information through the Service, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and notify you via email or through the platform.

Your continued use of the Service after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

PawsRx, LLC
Email: hello@pawsrx.io
Web: https://pawsrx.io