Privacy for PawTrimly, the demo and licensing.

PawTrimly keeps grooming business records on your device. Website hosting, license administration, voluntary correspondence and any purchase processing involve the separate data flows explained below.

Website visits and hosting

Cloudflare provides website/app hosting, Worker API delivery and security. Requests can involve IP addresses, URLs, times, browser/system details and routing/security metadata. Worker observability is disabled, but Cloudflare still performs network/security processing and Web Analytics where enabled. Provider retention depends on the service and lawful operational needs; no fixed period is promised. PawTrimly has no newsletter signup, customer login or automatic helpdesk. Stripe/Link's own fraud processing is described separately.

Cloudflare Web Analytics

Cloudflare Web Analytics is enabled, excluding EU visitors from RUM (Real User Monitoring), as confirmed in the account settings. We use limited traffic statistics and page-performance measurements to understand use of the site and improve its speed and reliability, without advertising or profiling individuals. Where RUM operates, it measures visits, page views, page-load performance and Core Web Vitals, with dimensions such as hostname/path, referrer, country, browser, operating system and device type. Cloudflare states that Web Analytics uses no cookies or localStorage to collect these metrics and does not fingerprint individuals for analytics. Its JavaScript beacon uses browser performance information and sends measurements to Cloudflare, usually through the site's /cdn-cgi/rum endpoint when proxied, or cloudflareinsights.com. The configured Analytics hostname is pawtrimly.com; automatic injection and subdomain coverage depend on the active rules and requests. This is not a guarantee that every demo request is measured or that one test proves worldwide behavior. Cloudflare makes statistics accessible for the previous six months; this is an access window, not a guarantee that every underlying record or backup is deleted at six months. EU RUM exclusion does not remove technical request/security processing for hosting. We do not combine these statistics with support correspondence or the demo's local business records. A cookie-free design alone does not establish a blanket exemption from applicable consent requirements. Additional measurement that legally requires consent must not be enabled without that consent. Do not enter real customer data in the demo.

Cloudflare Web Analytics

Cloudflare privacy policy · Cloudflare data processing addendum

Messages you choose to send

The mailto link opens your own email application; the website does not send a message or sign you up for marketing. Support mail at support@pawtrimly.com is now received and sent through paid Google Workspace Business Starter. The owner has confirmed successful incoming and outgoing tests with an external mailbox; the tested outgoing message used Google, not Resend. These tests do not guarantee delivery to every recipient. Cloudflare Email Routing is disabled. Historical correspondence may remain in the owner’s separate free Gmail inbox; no completed migration or deletion of those messages is claimed. New customer inquiries are not forwarded to that old inbox. Gmail previously sent support messages through Resend SMTP; the Resend account and records are retained. Google processes the contact details, mail metadata, content and attachments needed for the Workspace service and historical Gmail storage. Cloudflare processed the former incoming route. Resend may process outgoing content, sender/recipient details and delivery metadata when used. Correspondence is handled manually to answer inquiries, provide support and handle privacy requests. Providing information is voluntary; without sufficient contact details or context we may be unable to reply. Send only necessary information, without customer records, passwords or license keys. The licensing backend uses a separate Resend API workflow for license delivery, as described below; human support correspondence continues through Google Workspace.

Checkout and transaction information

Purchases are initially offered for US and UK billing addresses, for business and consumer buyers. Stripe Managed Payments provides hosted checkout; customers see Link as the merchant of record identified in checkout and the receipt. PawTrimly provides the software, license administration and product support. Stripe/Link collects the billing and payment information needed for the transaction. PawTrimly's own forms do not collect full card numbers or security codes. Its backend verifies provider payment data and records purchase email, selected billing country and buyer type, order/payment references, currency, amount, payment/refund status and fulfillment state. Billing information must be truthful and match the selected supported country; discrepancies require review rather than automatic license delivery.

Licensing, devices and restricted administration

Initial activation sends the license key and a random installation identifier to the licensing API. License records contain a keyed lookup hash, masked key fragments, status, device allowance and administrative metadata; device records contain pseudonymous hashes, activation/verification times and signed grants. These identifiers can be linked to an order and are not anonymous. The browser stores its installation identity and signed grant separately from business records. Security/rate limiting uses temporary keyed IP/time buckets; Cloudflare also processes technical request data. The operator's admin service uses Cloudflare Access and MFA, with identity and access metadata, to protect license and order administration.

Your local grooming business records

Clients, dogs, appointments, grooming history, notes, photos and business settings stay in the app’s browser/device IndexedDB. They are not uploaded to a grooming cloud database. The installation identity and signed license grant have a separate local store. There is no automatic business-data sync or cloud backup.

The groomer is responsible for appropriate handling of their customers’ information and regular manual backups. Exported ZIPs contain personal records and photos and are not encrypted. User-selected save/share destinations are controlled by the user. Clearing browser storage, storage eviction or device loss can erase local records.

License and installation emails

After a payment is confirmed, the backend queues a license and installation guide for the purchase email through Resend's API. This is separate from human support mail in Google Workspace. Resend processes message content, sender/recipient details and delivery metadata. A license key must appear in the delivery email; the backend temporarily holds an encrypted delivery payload and removes it after provider acceptance or cancellation. Acceptance is not a guarantee of inbox delivery. Failed or uncertain delivery can require operator review. Do not send customer records or complete license keys in support messages.

Purposes and legal bases

GDPR Article 6(1)(b) applies where necessary for requested pre-contract steps and to provide purchased licensing, activation, delivery and support. Article 6(1)(f) covers proportionate site/security operations, license-abuse prevention, responding to general inquiries and defending claims, and the limited non-advertising Analytics purposes and safeguards described above. We consider users' rights and their right to object; the local grooming database is not used for advertising profiling. Article 6(1)(c) applies to necessary legal obligations, including applicable privacy requests and record-keeping. Information necessary for payment or licensing is needed to complete that service; optional correspondence is voluntary. Emailing us is not marketing consent. Stripe/Link may use its own automated fraud/security assessments under its notice; Optional AI processing is described separately below.

Correspondence retention

Customer correspondence controlled by PawTrimly is retained for 12 months after the relevant support or inquiry case is closed, not simply from the arrival date of an email. After that period, messages are deleted as part of a regular monthly retention review. Longer retention applies where necessary to comply with a legal obligation or to establish, exercise or defend legal claims. This is a manual operating policy, not an automatic deletion mechanism. It does not guarantee deletion from Cloudflare or Google systems or backups within 12 months; their independent processing and deletion rules may differ.

Licensing, transaction and technical retention

We retain the minimum license and device information needed to administer the lifetime entitlement, support devices, enforce revocation and address justified claims. Purchase contact details, transaction references and fulfillment records are kept while needed to deliver or administer the purchase, handle refunds/disputes, meet applicable legal duties or establish, exercise or defend claims; they are not all automatically kept forever merely because the license is lifetime. We review continuing need during regular monthly retention reviews and delete or minimize data no longer justified. Core license/order records are not automatically erased by the current worker. Encrypted delivery content can remain during unresolved delivery review. Scheduled operations clean up temporary abuse buckets and expired unused checkout capabilities, subject to service failures or delays. The separate 12-month-after-case-closure rule below covers correspondence controlled by PawTrimly, not independent provider records or backups.

Providers and international processing

Cloudflare provides hosting and Web Analytics and handled the former Email Routing service. Its Self-Serve Subscription Agreement incorporates a Data Processing Addendum (DPA). Within that DPA, Cloudflare acts as a processor or subprocessor for covered personal data, including covered Customer Content and Customer Logs; other processing is governed by the applicable service terms and privacy policy. The DPA provides Standard Contractual Clauses (SCCs) for restricted transfers and the Data Privacy Framework for covered transfers to the United States, subject to its terms. The owner has accepted the Cloudflare terms. Google Workspace Business Starter now handles support mail under the accepted Cloud Data Processing Addendum (CDPA): Google processes covered Customer Personal Data on the customer's instructions. Processing may take place internationally under the CDPA's location and transfer provisions, not necessarily only in the EU. Historical messages in the separate free Gmail inbox remain subject to consumer Google terms; Workspace's CDPA does not automatically cover that inbox, and new customer inquiries are not forwarded there. Resend's DPA is incorporated into its customer agreement. Resend acts as a processor for covered Customer Data, while it acts independently for account, billing and service-usage data as described in its privacy policy. Its primary processing is in the United States; its DPA incorporates SCCs for relevant transfers outside the EEA. The owner has confirmed accepting Resend's terms and its account DPA. These documents define their scope and safeguards; they are not a certification of PawTrimly's overall compliance. We promise neither EU-only storage nor fixed deletion or backup periods for all provider systems. Our 12-month correspondence policy does not override providers' independent lawful or operational retention. You may request information about applicable transfer safeguards at support@pawtrimly.com.

Cloudflare Email Routing · Google privacy policy · Google retention and deletion · Google transfer frameworks · Resend · Resend DPA · Google Workspace CDPA

Stripe/Link and cloud processing

Stripe/Link processes transaction, payment, security and fraud information under its applicable terms and privacy notice; its controller or processor role depends on the activity. Payment data and technical services can be processed internationally. Its own retention and transfer arrangements are described by Stripe, not set by PawTrimly's correspondence policy. Cloudflare D1 stores license/order metadata, not grooming records. The production database is configured for the EU jurisdiction; that restricts the database's operation and persistence, not every Worker request, support action or other provider's processing. We do not promise EU-only processing or account-specific transfer safeguards that have not been verified.

Stripe / Link · Stripe Managed Payments · Cloudflare D1

Privacy when using the PawTrimly AI assistant

The AI assistant is optional and helps you use PawTrimly. Your question, up to four recent conversation messages, your chosen language and public product information are sent through a Cloudflare server to OpenAI to prepare a response.

The assistant does not automatically retrieve your salon database, client and pet data, photos, license keys or payment information. Do not enter these or other confidential details in the chat.

Conversation content stays in the memory of the open page. PawTrimly does not save it in its database or application logs. Clearing the conversation or refreshing the page removes its local copy.

OpenAI receives the submitted text and generates a response. We disable saving responses for later retrieval, but this does not mean the provider retains no data at all. OpenAI may generally retain abuse-monitoring data for up to 30 days, subject to applicable exceptions. We do not guarantee processing exclusively within the EU.

To prevent abuse and control costs, we store limited metadata: pseudonymous source identifiers, timestamps, request reservations and a budget usage counter. Their continuing need is reviewed manually each month; unnecessary data is deleted or minimized.

We process data to provide the help you request — under GDPR Article 6(1)(b), where applicable — and to ensure security and prevent abuse under GDPR Article 6(1)(f).

AI can be mistaken or unavailable. It does not check your orders, administer licenses or approve refunds. For support or privacy matters, email support@pawtrimly.com.

OpenAI — data controls

Privacy requests

Contact the operator at the support/privacy address above for access, correction, erasure or restriction, to object to processing based on legitimate interests, or for portability where its conditions apply. If processing is based on consent, you may withdraw it without affecting earlier lawful processing; this prelaunch does not use email marketing consent. You may complain to a competent supervisory authority, including the President of Poland’s Personal Data Protection Office (UODO), or the authority in your place of residence, work or alleged infringement. Rights depend on the applicable legal conditions and exceptions. You can request information about applicable international-transfer safeguards at the same address.

UODO · GDPR / RODO / RGPD

Optional advertising measurement

Optional Meta advertising measurement is blocked unless you explicitly accept it. With consent, an isolated measurement page receives PageView/ViewContent on public marketing pages, InitiateCheckout after a real checkout is created and Purchase only after the payment service confirms payment. Purchase includes the license price of USD 79 or USD 129 and a pseudonymous identifier that prevents duplicate counting; it is not a record of every sale and may be lost if you do not return, decline, use GPC or block tracking. Meta receives technical network/browser information (including IP address), cookie/advertising identifiers and events, which it may link to its services and use under its own policies. We do not deliberately send names, email, phone, client/pet records, AI chat, keys, payment details or Stripe session/capability IDs; automatic advanced matching/events and CAPI are not used. Consent is used for this optional advertising processing and device access. A US-targeted campaign does not limit who can visit the website. GPC and rejection block measurement; Privacy choices / Do not sell or share allows withdrawal without affecting purchase or licensed offline use. Our necessary choice cookie lasts 180 days for acceptance or 366 days for rejection; clearing browser storage may remove it. A pseudonymous sent-event marker on the isolated measurement origin expires logically after 30 days and is removed on the next use; it can remain in browser storage longer if you do not return. Transmission is marked before sending to prevent retries. These are our browser-storage rules, not promises about Meta retention or deletion. Meta can process data internationally, including in the United States; the recipient roles and international-transfer information are described below and in Meta's policies. Where applicable, this sharing can be treated as sale/sharing for targeted advertising under US privacy law. Withdrawal stops future dispatch and removes our advertising cookies where possible, but cannot recall already sent data or remove Meta-domain cookies. Contact support@pawtrimly.com to exercise applicable rights. The existing 12-month correspondence policy and other privacy sections remain unchanged.

Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, receives Pixel data. Under Meta Business Tools Terms, Meta is a processor for specified matching, measurement and analytics services and a joint controller with PawTrimly for the specified collection and transmission of event data. Meta's subsequent processing is separate. The Controller Addendum assigns website notices and controls to PawTrimly and rights under Articles 15–20 for data stored after joint processing to Meta; you may exercise rights against either joint controller. Meta's Privacy Policy describes its own legal bases, rights contacts, retention criteria and international transfers, including processing in the United States and other countries. Applicable safeguards are described there and in Meta's Data Processing Terms; no EU-only storage or account-specific transfer guarantee is made here. The essence of the joint-controller arrangement is available in the linked Controller Addendum. Meta's retention is not limited by our browser-storage periods.

Meta Controller Addendum · Meta Privacy Policy

Interactive demo data

Use fictional data only. Demo records, sample photos and preferences are stored locally in IndexedDB on the demo origin in your browser; sessionStorage identifies the session for reload/restoration. Records and edits are not uploaded to PawTrimly. A reset restores sample business data. Later demo starts attempt to clean up closed sessions, but crashes, restored sessions or browser limitations may leave data behind. There is no guaranteed immediate cleanup, deletion on closing a tab or fixed local retention period. Clear the demo site’s data in browser settings to remove local data; browser eviction can also remove it. The demo has no cloud backup or export. The marketing site selects language through its URL without saving a language preference. Cloudflare still processes hosting metadata when pages or demo assets load.

Facebook and external destinations

Facebook is an optional external destination for updates and feature suggestions, opened only by selecting its link. We do not embed social widgets; following does not guarantee notifications. Optional Meta Pixel measurement is described in the advertising section and requires marketing consent. Facebook controls information submitted on its platform under its own policies. PawTrimly does not collect feature suggestions or email addresses on this website.

Separate services and changes

PawTrimly Plus remains separate and In Development. No Plus subscription, mailing list or grooming cloud sync is activated by this notice. If processing changes to a new purpose, we will provide the relevant information before that new use.