Privacy Policy - PawSpace

PawSpace ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Services"). Please read this policy carefully. By using our Services, you consent to the data practices described in this policy.

1. Scope of This Policy

This Privacy Policy applies to all information collected through our Services, as well as any related services, sales, marketing, or events. This policy does not apply to information collected by third parties, including any websites, services, or applications that may be linked to our Services.

2. Information We Collect

We collect information in the following ways:

Information You Provide Directly

Email address (required for account creation)
Name or username (optional)
Profile picture (optional)
Pet-related information you choose to share (names, types, stories, photos)
Payment information (processed securely through third-party payment processors)
Communications with us (support requests, feedback)

Information Collected Automatically

IP address and approximate location
Browser type, version, and settings
Device information (type, operating system, unique identifiers)
Usage data (pages visited, time spent, click patterns)
Referral URLs and how you arrived at our Services

User-Generated Content

Pet stories and memorial content you create
Comments and interactions with other users
Memorial page information
Requests and generated content from current live features

Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to collect information about your browsing activities. See our Cookie Policy for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and maintain our Services
To personalize and improve your experience
To communicate with you about updates, support, and promotional offers (with your consent)
To analyze usage patterns and improve our Services
To comply with legal obligations and enforce our Terms of Service
To detect, prevent, and address technical issues, fraud, and security threats
To conduct research and develop new features

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data based on the following legal grounds:

Consent: When you have given us explicit consent to process your data for specific purposes
Contract: When processing is necessary to fulfill our contractual obligations to you
Legitimate Interests: When processing is in our legitimate business interests, such as improving our Services, provided these interests are not overridden by your rights
Legal Obligation: When we need to comply with legal requirements

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
With Your Consent: When you have given us permission to share your information
Legal Requirements: When required by law, subpoena, or other legal process
Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users
Business Transfers: In connection with a merger, acquisition, or sale of assets
Aggregated Data: We may share anonymized, aggregated data that cannot identify you

6. Third-Party Services

Our Services may contain links to third-party websites and integrate with third-party services. We use the following categories of third-party services:

Analytics Providers: To help us understand how our Services are used and to improve user experience
Payment Processors: To securely process payments and manage subscriptions
AI Services: To support current AI-powered features and generated content
Cloud Hosting and Infrastructure: To host, operate, and deliver our Services reliably

These third parties have their own privacy policies. We are not responsible for the privacy practices of these third parties.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

TLS/SSL encryption for data in transit
Encrypted data storage
Access controls limiting who can view your data
Regular security assessments and monitoring
Incident response procedures

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Account Information: Retained while your account is active and for a reasonable period thereafter
User Content: Retained until you delete it or request deletion
Server Logs: Typically retained for 90 days
Legal Requirements: Some data may be retained longer to comply with legal obligations

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to Access: Request a copy of the personal information we hold about you
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure: Request deletion of your personal information (subject to certain exceptions)
Right to Data Portability: Request your data in a structured, commonly used format
Right to Restriction: Request that we limit how we use your data
Right to Object: Object to certain processing of your data
Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data

To exercise any of these rights, please contact us at the information provided below. We will respond to your request within 30 days (or as required by applicable law).

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: Request information about the categories and specific pieces of personal information we have collected, the sources, purposes, and third parties with whom we share it
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of the sale or sharing of your personal information (Note: We do not sell personal information)
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
Right to Correct: Request correction of inaccurate personal information
Right to Limit: Limit the use and disclosure of sensitive personal information
Categories of Personal Information Collected: Identifiers, internet activity, geolocation data, and user-generated content

To exercise your rights, contact us at support@griefur.com or submit a request through your account settings.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

In addition to the rights listed in Section 9, you have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

International Data Transfers: When we transfer your data outside the EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Protection Officer: For GDPR-related inquiries, contact our Data Protection Officer at support@griefur.com.

12. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we learn that we have collected personal information from a child under 13, we will promptly delete that information.

For users between 13 and 18, we recommend that parents or guardians review and discuss this Privacy Policy with their children.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want your online activity tracked. Our Services currently do not respond to DNT signals. However, you can manage your cookie preferences through your browser settings.

14. International Data Transfers

Our Services are operated from the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers are located.

We take appropriate measures to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Email: support@griefur.com

Data Protection Officer: support@griefur.com

Mailing Address: PawSpace Privacy Team, United States

We will respond to your inquiry within 30 days.

17. Regulatory Compliance

GDPR: We comply with the EU General Data Protection Regulation for users in the European Economic Area and United Kingdom.
CCPA/CPRA: We comply with the California Consumer Privacy Act and California Privacy Rights Act for California residents.
COPPA: We comply with the Children's Online Privacy Protection Act and do not knowingly collect information from children under 13.
PIPEDA: We respect the privacy rights of Canadian users under the Personal Information Protection and Electronic Documents Act.
We also strive to comply with other applicable privacy laws and regulations worldwide.