Privacy Policy

1. Responsibility and scope

The operator identified above is responsible for Pawmuch account, adoption, support and operational processing. Listing owners and applicants separately control information they receive through their adoption journey. Contact the privacy address above for questions or rights requests.

2. Information we process

We process your verified Google email and account identifier, display name, optional city and Indian state or union territory, adult attestation, legal acceptance and session records. We do not receive your Google password. Adoption information includes animal care details, approximate listing location, photographs, application answers, adoption history, private contact details and conversations. Support cases contain the description and replies you choose to provide, optional diagnostic categories and trace references, and optional private screenshots or photos.

3. Purpose and access

We use this information to authenticate you, provide adoption and messaging services, respond to support cases, investigate failures and abuse, enforce safety rules and maintain the service. Private application answers and conversations remain participant restricted. Support staff require separate permission and your explicit case-scoped sharing before seeing those private records. Operational access is restricted to specifically authorized accounts and audited actions. We do not sell personal information, send marketing campaigns through this service or buy advertising.

4. Anonymous website observations and your choice

When enabled, first-party measurement observes page categories, acquisition and campaign categories, interaction and upload outcomes, visible engagement duration, scroll buckets, coarse device/browser categories, sanitized browser failures and web performance. A random visit identifier is stored in the current tab’s session storage and expires after thirty minutes of inactivity. It is not a persistent returning-person identifier. Measurement uses no analytics cookies, browser fingerprint, IP-derived tracking identity, raw search text, form contents, message bodies, filenames, credentials or session recordings. Security rate limits separately use bounded protected identifiers. Browser blockers, offline use and your preferences can reduce measurement coverage.

Supported Do Not Track and Global Privacy Control signals disable browser collection. You can also disable it in Privacy settings; the browser stores only that preference across visits. Declining measurement does not prevent adoption, signing in, messaging or support. Campaign attribution is limited to observed visits; we do not identify you across devices or visits.

5. Necessary browser storage

A Secure HttpOnly session cookie maintains Google sign-in. A guest support case uses a separate opaque HttpOnly credential scoped to its case page. That credential gives access only to that support case and expires after thirty days; a successful guest reply renews it. Guest cases can be bound to a signed-in verified account only with possession and explicit confirmation. Browser session storage also preserves uncertain form submissions and their retry identity. These workflow mechanisms are separate from optional measurement.

6. Service providers and sharing

Google provides authentication and reCAPTCHA security. Google Cloud provides Firestore, private Cloud Storage, Cloud Run, analytical BigQuery storage and operational monitoring in the configured Mumbai deployment. Cloudflare provides domain and DNS services. Providers may process security and service information under their applicable terms. We share requested adoption information only with relevant participants, support content with authorized case handlers, and operational reports with explicitly authorized signed-in accounts. Lawful safety or legal obligations may require additional disclosure. There are no anonymous report-sharing links; recipients’ downloaded copies cannot be recalled.

7. Retention, deletion and preservation

Detailed anonymous observations and diagnostics are retained for ninety days, with daily aggregate trends for two years. Verified analytical staging artifacts expire after seven days; unresolved ingestion is preserved for investigation. Export artifacts expire after thirty days. Resolved support content is removed one year after resolution and attachments ninety days after closure. Reopened cases restart the applicable resolved/closed period. Non-content support outcomes are retained for two years. Legal holds may delay cleanup.

Account deletion has a thirty-day cancellation period, then revokes provider access and scrubs private content through resumable domain-owned cleanup. Opaque relationship and security tombstones may remain where needed for adoption history, audit, exact object deletion or legal preservation. Identity security audits have a 365-day configured retention. Information lawfully retained by another participant cannot necessarily be recalled. The current production deployment has no scheduled backups or point-in-time recovery.

8. Security and international processing

We apply transport encryption, encrypted private content, hashed opaque credentials, exact resource permissions, recent Google authentication for sensitive staff actions, rate limits, scanning of private images and audit records. No system is completely secure. Providers may process information outside India where needed for their services; applicable transfer obligations and safeguards still apply.

9. Rights, adults and decisions

Depending on applicable law, you may request access, correction, a copy, portability, deletion, restriction, objection or withdrawal, or complain to a competent privacy authority. Contact the privacy address above; identity verification and lawful exceptions may apply. Pawmuch is for adults aged eighteen or older. Tell us if a child has supplied information. Automated security, scanning and permission rules protect workflows; listing owners and applicants make adoption decisions.

10. Changes and contact

Material changes require an updated policy and any renewed acceptance or other choice required by applicable law. Use Help for a website problem and the privacy or security contacts above for those requests. Do not include passwords, tokens or unnecessary personal information in a case or screenshot.

11. Scheduled email and WhatsApp updates

Pawmuch can send summaries of new unread listing, application and message activity at 11 AM and 7 PM India time. Email uses your verified Google address through Brevo. An optional WhatsApp number is private to your account and notification delivery: it is not shown to listing owners, applicants or other users. Meta WhatsApp and its infrastructure process the number and delivery/status information to convey these updates. Brevo processes recipient email and email delivery/status information. These services may process information outside India under their applicable terms.

Saving an optional number with the displayed notification consent records the wording version, time, entry point and resource. Profile numbers supply defaults; an explicitly different listing/application number applies to that resource. Digests include counts and authenticated links, not message bodies, application answers or attachments. Already-read activity is excluded where observed before submission to the provider.

Reply STOP in WhatsApp to withdraw WhatsApp permission for that destination. Use the email opt-out link to stop notification emails. Clearing your profile number removes that default; separate resource overrides remain. Contact settings remain until changed or account deletion. Active consent evidence is retained while needed to demonstrate permission; withdrawn consent and completed delivery/activity records follow the configured private notification retention period. Unknown delivery attempts remain reserved until genuine provider evidence or an audited operator resolution establishes the outcome. Callback payloads are encrypted while awaiting processing and scrubbed after processing; destination suppressions retain a keyed identifier so withdrawal is respected. Account export includes your private contact settings, consent and retained delivery history; deletion removes account-owned private records. Contact the privacy address above to ask about or withdraw processing.