Privacy Policy

Version 2.1 — Published 25 September 2026; Section 10A updated 27 September 2026 (the Google Ads tag’s hashed email; the “Analytics only” choice; reporting now starts 27 September 2026; Meta’s browser and ad-click identifiers in sign-up reporting). The event reporting described in Section 10A starts on 27 September 2026. Sections 17 and 18 updated 5 October 2026 (complaints are acknowledged within 48 hours and resolved within one month).

What changed in Version 2.1. It adds Section 10A (Advertising Measurement): with your consent, we tell Google and Meta when someone who clicked our ad signs up for or pays petboard, so we can measure our ads. It also updates Sections 7, 10, 11 and 13 to match. Nothing else changes. Until 27 September 2026, we send Google and Meta none of the sign-up, booking or payment events described in Section 10A, and after that date only for accounts created on or after it.
Version 2.0 — new-entity restatement. This Privacy Policy is a full restatement by counsel for PetBoard Technologies Private Limited (CIN U62099KA2026PTC223226), effective 1 August 2026. It describes our processing under the Digital Personal Data Protection Act, 2023.

This privacy policy (“Privacy Policy”) describes how PetBoard Technologies Private Limited (CIN - U62099KA2026PTC223226), a company based out of Bangalore, Karnataka, India (hereinafter referred to as “we”, “us” “our” or “Company”) collect, use, and disclose information pertaining to its customers, users, visitors (hereinafter referred to as “you”, “your” or “User”) obtained via any method including this website https://www.petboard.in/ or any mobile application or other tools (“Platform”).

Please read the following to learn about our practice of category and the purposes of data and information to be processed, secure collection, use, disclosure and dissemination of information practices, the contact details of the relevant Grievance Officer, the manner in which an User can exercise its rights which includes the right to withdraw its consent for processing of such data and right to grievance redressal. This Privacy Policy applies in India to all Users who access, use, or interact with Website or services, regardless of their country of residence

By visiting this Website or by virtue of any commercial relation (“Services”), you agree to be bound by the terms and conditions of this Privacy Policy. If you disagree, please do not use or access our Website or Services. This Privacy Policy is to be read and interpreted along with our Terms of Use (“Terms”). Any and all capitalized terms not defined herewith shall have the meanings as referred in the Terms.

1. About the Company

The Company is a Software-as-a-Service (SaaS) platform designed to facilitate the management and delivery of pet care services by connecting pet care businesses, service providers, kennels, groomers, trainers, and other operators ("Operators") with pet owners and guardians ("Pet Parents"). Through the Platform, Operators can manage bookings, customer interactions, pet profiles, service records, communications, and other operational activities, while Pet Parents can access and manage information relating to their pets and services received.

The Company operates as a technology and infrastructure provider that supports the operational requirements of Pet Parents and Operators, through the Platform while implementing reasonable technical and organisational measures to safeguard personal data processed through the Platform. The Company's Services are intended to streamline administrative and operational processes within the Pet care ecosystem, enhance communication between Pet Operators and Pet Parents, maintain relevant Pet care records, and facilitate the efficient delivery of Pet care services.

2. Role of the Company in Processing Data:

Under applicable data protection laws, including the Digital Personal Data Protection Act, 2023 ("DPDPA"), the Company's role may vary depending on the nature of the Personal Data being processed and the purpose for which such Personal Data is processed.

(a) Operator Account Data- Where an Operator collects, accesses, stores, uses, shares, or otherwise processes Personal Data of pets, employees, contractors, or other individuals in connection with the Operator's provision of pet care services, the Operator shall act as an independent Data Fiduciary in relation to such processing and shall be solely responsible for complying with its obligations under applicable data protection laws, including the DPDPA. The Company does not control the Operator's independent processing activities and shall not be responsible for the Operator's compliance with applicable legal requirements.

(b) Pet Parent and Pet Care Data- In respect of Personal Data collected, uploaded, stored, or managed by Operators through the Platform for the purpose of providing pet care services, including pet profiles, vaccination records, booking records, stay records, care notes, communications, and related service information, the relevant Operator acts as the Data Fiduciary, while the Company acts as a Data Processor. In such cases, the Company processes Personal Data solely on behalf of and in accordance with the documented instructions of the relevant Operator.

This distinction determines who is primarily responsible for decisions relating to the collection, use, retention, correction, deletion, and disclosure of Personal Data. If you are a pet parent and have any questions, requests, or concerns regarding Personal Data collected by an Operator through the Platform, you should first contact the relevant Operator. Where appropriate, the Company may assist Pet, Parents and Operators in responding to such requests in accordance with applicable laws and contractual obligations.

3. Intended Use and Purpose

The Company processes personal data for the purpose of providing, operating, maintaining, and improving the Platform and the services offered through it. Such processing may include facilitating customer on-boarding, managing pet profiles, vaccination records, bookings, stay records, care updates, communications between pet service providers and pet owners, user account administration, technical support, security monitoring, legal compliance, and other activities necessary for the operation of the Platform.

The Company processes personal data only for legitimate business purposes, to fulfil contractual obligations, to comply with applicable laws, and to provide the services requested by users of the Platform. Personal data shall not be processed for purposes incompatible with those disclosed in this Privacy Policy unless otherwise permitted by applicable law or with the consent of the relevant individual.

The Company processes Personal Data in accordance with applicable law, including the DPDPA. Depending on the nature of the processing activity, the Company may process Personal Data on the basis of consent, performance of a contract, compliance with legal obligations, legitimate uses or other lawful grounds permitted under applicable law.

Where consent is required, the Company will seek your consent through clear affirmative action on the Platform, including during account registration, submission of forms, onboarding processes, or other interactions through which Personal Data is provided. By providing your consent through the Platform, you agree to the collection, use, storage, disclosure, and processing of your Personal Data for the purposes described in this Privacy Policy.

Consent provided by Users is intended to be free, specific, informed, unconditional, and unambiguous. Users may withdraw their consent at any time through the mechanisms made available by the Company or by contacting the Company using the details provided in this Privacy Policy. Withdrawal of consent shall not affect the lawfulness of processing undertaken prior to such withdrawal. However, if consent is withdrawn, the Company may be unable to provide certain features, functionalities, or Services that require the processing of the relevant Personal Data.

Where Personal Data is provided on behalf of another individual, including a family member, employee, representative, or other person, you represent and warrant that you are authorised to provide such Personal Data and, where required by applicable law, have obtained all necessary notices, permissions, and consents to enable the Company to process such Personal Data in accordance with this Privacy Policy.

5. Categories of Data Collected

The Company directly or through Operator may collect, receive, store, process, and otherwise handle the following categories of information as necessary for the provision, operation, maintenance, security, and improvement of the Platform (collectively referred to as "Personal Data").

Category of Data Information (“Personal Data”)
Operator Information business name, business type, name of the business owner or authorised representative, phone number, email address, city or location, account credentials, subscription details, staff information, account preferences, branding information, registration details, tax identification details or any other information provided in connection with onboarding, verification or use of the Platform.
Pet Information pet name, pet category, specific breed, age, weight, gender, profile photograph, behavioural information, feeding preferences, dietary requirements, medical information relating to the pet, vaccination records and certificates, care instructions, boarding history, stay records, activity records, activity records, microchip or identification details and other information relating to a pet that is linked to or associated with an identifiable pet parent, owner, guardian or caregiver
Service and Operational Information booking details, enquiries, reservation information, check-in and check-out records, care updates, service history, notes, activity logs, operational records, service preferences, incident reports, service preferences and other records generated through the use of the Platform.
Payment and Subscription Information
subscription information, billing information, invoice details, transaction identifiers, payment status, refund information and other payment-related information, excluding complete payment card information processed directly by third-party payment service providers
Technical and Device Information Internet Protocol (IP) address, browser type and version, device information, operating system, session identifiers, access logs, usage logs, timestamps, diagnostic information, network information and similar technical information.
Communication Information support requests, enquiries, feedback, complaints, notifications, correspondence, emails, messages, communication preferences and records of interactions with the Company
Analytics and Usage Information user interactions with the Platform, pages visited, features accessed, session duration, navigation patterns, clickstream data, aggregated usage statistics, aggregated usage information and other analytical information relating to the use of the Platform.
Information Voluntarily Provided by Users information submitted through forms, surveys, reviews, testimonials, uploaded content, photographs, documents, attachments, support interactions and any other information voluntarily provided through the Platform

6. Purpose of Data Collection

The Company collects Personal Data in digital or other forms to operate, administer, maintain, secure, and provide the Platform and related services. We collect only such Personal Data as is reasonably necessary for the purposes described in this Privacy Policy and in accordance with applicable laws. The Company does not intentionally collect government-issued identification numbers, Aadhaar details, financial account information, payment card information, or any other categories of Personal Data that are not reasonably necessary for the operation of the Platform and the services offered through it. We request that you do not share any Personal Data that is not necessary for your use of the Platform unless specifically requested by us.

The Company may process Personal Data for one or more of the purposes described below, or for any purpose that is compatible with, incidental to, or reasonably necessary for the operation, administration, security, improvement, and provision of the Platform and related services, as permitted under applicable law.

Purpose Data (Key Elements) Basis
To create, administer, verify, and maintain Operator accounts and subscriptions Operator Information including business name, business type, contact person details, email address, phone number, city, account credentials, subscription details, staff information, and account preferences and related account information Necessary to provide the Platform and services requested by the User and for purposes consented to by the User
To create, maintain, update, and manage pet profiles and pet care records and related information Pet Information including pet name, type, breed, age, weight, gender, profile photographs, feeding preferences, behavioural information, vaccination records, vaccination certificates, medical information relating to the pet, boarding history, and care instructions Necessary to provide the Platform and services requested by the User and for purposes consented to by the User
To manage boarding, day care, grooming, training, and other pet service activities Service and Operational Information including booking records, stay records, check-in and check-out details, care notes, activity records, service history, and related operational information Necessary to provide the Platform and services requested by the User
To record and facilitate communications between Operators and pet parents, any service providers, and the Company Communication Information including messages, enquiries, support requests, notifications, feedback, complaints, and correspondence To facilitate communication, provide support, and ensure effective service delivery
To provide customer support, troubleshoot issues, resolve disputes, and respond to user requests Contact information, support requests, correspondence records, and technical information Necessary to provide support, address user requests, and protect the Company's rights and interests
To operate, maintain, monitor, secure, and improve the Platform, infrastructure, related services, maintain Platform functionality, performance, and security Technical and Device Information including IP address, browser type, device information, operating system, session identifiers, access logs, timestamps, and diagnostic information Necessary for Platform administration, security, fraud prevention, service improvement, and other legitimate uses permitted under applicable law
To analyse usage patterns, improve user experience, develop new features, conduct research, testing, reporting, and business analytics Analytics and Usage Information including pages visited, features accessed, session duration, navigation patterns, and aggregated usage statistics Based on user consent where required and for service improvement and other legitimate uses permitted under applicable law
To process subscriptions, payments, invoices, refunds, and related transactions Payment and Subscription Information, account information, transaction records, and billing information Necessary to provide services requested by the User and comply with applicable legal and accounting requirements
To comply with legal, regulatory, and contractual obligations Transaction records, consent records, account information, communications, logs, and other information required for compliance purposes Required to comply with applicable laws, regulatory requirements, legal proceedings, or lawful requests from authorities
To detect, investigate, prevent fraud, misuse, unauthorised access, and security incidents and violations of applicable terms Access logs, account activity records, device information, technical information, and security monitoring records To protect the Platform, Users, and the integrity of services offered through the Platform
To establish, exercise, or defend legal claims and enforce contractual rights Any information relevant to a dispute, claim, investigation, audit, or enforcement action Necessary to protect and enforce the Company's legal rights and obligations

7. Security and Data Protection

The Company implements and maintains appropriate administrative, organizational and technical safeguards and physical safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, misuse, or destruction and to preserve its confidentiality, integrity, and availability. Such safeguards may include:

We do not sell or rent Personal Data to third parties. In the unlikely event of a Personal Data breach, we will notify the Data Protection Board of India and affected Data Principals and any other competent authority as required by law, within the timelines prescribed under applicable data protection laws. The Company regularly reviews and updates its security measures to address evolving cybersecurity risks, technological developments and operational requirements.

Operators are responsible for maintaining the confidentiality of their account credentials and for taking reasonable steps to secure the devices, networks and systems used to access the Platform. Where Pet Parents access Platform features through secure tokenised links, they are responsible for maintaining the confidentiality of such links and preventing unauthorised access to their devices. While the Company implements reasonable safeguards to protect Personal Data, no method of transmission over the Internet or method of electronic storage is completely secure. To the maximum extent permitted by applicable law, the Company shall not be liable for any unauthorized access to, loss of, or alteration of Personal Data resulting from circumstances beyond its reasonable control, including cyberattacks, failures of telecommunications networks, internet service providers, hosting providers, or other third-party service providers.

8. Children's Data

By accessing or using the Platform, Users represent and warrant that they are at least 18 years of age. The Platform is not directed toward children below the age at which valid consent for data processing may be provided under applicable law. Users should not provide, and should ensure that they do not upload, submit, or otherwise make available through the Platform, any Personal Data relating to a child unless they are legally authorised to do so and such disclosure is necessary for the use of the Platform or related services.

The Company does not knowingly collect or process Personal Data of minors. If the Company becomes aware that Personal Data relating to a child has been collected or processed in a manner that is inconsistent with applicable law or this Privacy Policy, the Company may take appropriate steps, including restricting access to such information, deleting such information, or taking any other action required or permitted under applicable law. Parents, guardians, or other authorised representatives who believe that a child may have provided Personal Data through the Platform may contact the Company using the contact details provided in this Privacy Policy to request review, correction, or deletion of such information, subject to applicable law.

9. Data Storage & Retention

The Company stores and processes Personal Data using reputable cloud infrastructure and service providers. Personal Data is currently hosted primarily within India. The Company may change its hosting providers, infrastructure, or data storage locations from time to time in accordance with applicable law and operational requirements.

The Company retains Personal Data only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, provide the Platform and related services, comply with legal and regulatory obligations, resolve disputes, enforce agreements, protect its rights and interests, and maintain appropriate business and operational records.

Category of Data Retention Period
Operator Account Information During the active account period and for up to 90 days thereafter, unless a longer retention period is required for legal, compliance, audit, dispute resolution, security, or operational purposes.
Pet Information (including pet profiles, vaccination records and certificates) During the active account period of the relevant Operator and for a reasonable period thereafter as necessary for service continuity, record-keeping, legal, compliance, or dispute resolution purposes.
Service and Operational Records During the active account period and for a reasonable period thereafter as necessary for operational, audit, legal, compliance, security, and dispute resolution purposes.
Consent Records and Audit Logs During the account or service relationship and for up to three (3) years thereafter, or such longer period as required by applicable law.
Care Photos and Videos The Company does not intentionally retain care photos or videos through the Platform except where necessary for service delivery, troubleshooting, legal compliance, dispute resolution, or system backups.
Technical, Security, Analytics and Usage Information Retained as long as reasonably necessary for security, troubleshooting, compliance, and Platform improvement.

In exceptional cases, specific Data elements may be retained for a longer duration if:

Once the retention period expires, all Personal Data, including backups, is securely deleted, anonymised, or irreversibly destroyed using industry-standard security measures unless otherwise specified. We periodically review our data retention schedules to ensure ongoing compliance with applicable laws and to uphold the principle of data minimisation.

We take the principles of Data minimisation and removal seriously and have internal policies in place to ensure that we only ever ask for the minimum amount of data for the associated purpose and delete that Data promptly once it is no longer required.

10. Personal Data Sharing and Third-Party Service Providers

We may share Personal Data only as necessary to provide , operate, maintain, secure, support, and improve the Platform and related services, comply with applicable laws, or protect the security and integrity of the Platform, Company, Users, and others, or for other purposes described in this Privacy Policy. We do not sell or rent Personal Data. The only Personal Data we share for advertising purposes is the advertising measurement described in Section 10A, and only if you consent to it. We follow a strict principle of limited disclosure, ensuring that any sharing of Data is lawful, proportionate, and consistent with the purposes described in this Privacy Policy.

Affiliates and Group Companies The Company may share Personal Data with its affiliates, subsidiaries, or parent entities solely for the purposes set forth in this Privacy Policy, such as Service delivery, administration, security management, internal operations, internal auditing, or compliance. All intra-group transfers are governed by confidentiality agreements and appropriate safeguards.
Operators and Authorised Personnel To facilitate bookings, manage pet profiles and records, provide pet care services, communicate with pet parents, administer services through the Platform, and perform activities requested by Users. Operators are independent businesses and may process Personal Data in accordance with their own privacy practices and applicable laws.
Third-Party Service Providers We engage select third-party service providers to support our operations, such as secure cloud hosting, data storage, and system monitoring. These providers process and store Data only on our instructions and under strict contractual terms consistent with applicable data protection laws. They are not authorized to use or disclose Personal Data for any purpose other than the provision of contracted services.
Professional advisors We may disclose limited personal information to professional advisors such as legal counsel, auditors, insurers, or financial consultants, but only when necessary for legitimate business purposes such as audit, risk assessment, legal compliance, or enforcement of contractual rights.
Law Enforcement Agencies; Protection and Safety We may disclose your personal information to government or law enforcement officials: (a) for the security, compliance, fraud prevention and safety purposes; (b) as required by law, lawful requests or legal process, such as to respond to subpoenas or requests from government authorities; (c) where permitted by law in connection with any legal investigation; and (d) to prosecute or defend legal claims.
Court/Government Agencies/Regulatory Authorities We may disclose the information if required to do so by law, a court or a government agency, only in the good faith belief that such action is necessary (a) to comply with a legal obligation, (b) to protect or defend our rights, interests or property, (c) to prevent or investigate possible wrongdoing in connection with the Services, (d) to act in urgent circumstances to protect the personal safety of Users or the public; or (e) to protect against legal liability.
Website Uses From time to time, we may post testimonials on the Website that may contain certain Personal Data. We obtain your consent to post your name along with your testimonial. If you wish to update or delete your testimonial, you can contact us at our official email provided in the Privacy Policy.
Corporate Restructuring In the event of a merger, acquisition, reorganization, or sale of business assets, Personal Data relevant to the transaction may be transferred to the acquiring entity. Any such entity will be required to use and protect the information in accordance with this Privacy Policy and applicable laws.

10A. Advertising Measurement (Google Ads and Meta)

The event reporting in the first two rows of the table below starts on 27 September 2026. The last row describes cookies that run only if you accept them.

We advertise petboard on Google and on Meta (Facebook and Instagram). To see which of our ads lead businesses to sign up for and pay for petboard, and to improve those ads, we report some of those events back to Google and Meta. We report these events only if you clicked “Accept all” on our current cookie banner before signing up, and you signed up on or after 27 September 2026. If you clicked “Reject all” or “Analytics only”, or did not answer, we send nothing described in this section, and the Google Ads tag and Meta Pixel do not load (with “Analytics only”, Google Analytics runs with its advertising features turned off).

This applies only to people who sign up for a petboard account. We never send information about your customers or their pets to Google or Meta.

Recipient When What we send What we never send
Google Ads (Google LLC) Only if you reached us by clicking a petboard ad on Google, within 90 days of that click: when you first pay petboard, and when you create your second booking in petboard (or first reach the free-plan booking limit) The click identifier Google attached to your ad click (“gclid”); the date and time of the event; for your first payment, the amount you paid petboard in ₹ Your name, email (except the hashed copy the Google Ads tag sends from our website, described in the last row), phone number, business details, or any customer or pet information
Meta (Meta Platforms, Inc.) When you create your petboard account Your email address, converted by us into a SHA-256 hash before it leaves our servers, which Meta uses to match the event to a Meta account if you have one; the event type (sign-up), its date and time, and an event reference number; the page address (www.petboard.in/signup); and Meta’s own identifiers for your browser and for a Facebook or Instagram link you clicked to reach us: the “_fbp” and “_fbc” values the Meta Pixel sets on our website, or, if that cookie is not set and you arrived from a Facebook or Instagram link, the click identifier (“fbclid”) from that link, which Meta uses for the same matching Your name (except the hashed copy the Meta Pixel sends from the sign-up page, described in the next row), phone number, business details, or any customer or pet information
Google Ads tag and Meta Pixel (in your browser, on our marketing, sign-up and login pages only) While you browse those pages The pages you visit, your IP address, and your browser and device details, through cookies; on our sign-up page, a hashed copy of the name and email you type in (sent by the Meta Pixel); and, when you type your email address into a form on those pages (such as sign-up or login), a hashed copy of it (sent by the Google Ads tag, which Google uses to match your visit to a Google account if you have one) Nothing from your petboard dashboard, and nothing about your customers or pets

Purpose: to measure whether our ads work, and to let Google’s and Meta’s systems show our ads to businesses more likely to find petboard useful, including people who have visited our website.

Legal basis: your consent under section 6 of the Digital Personal Data Protection Act, 2023.

Google and Meta’s role: Google and Meta receive this data under their own terms and privacy policies (Google, Meta). They may also use it for purposes described there, such as improving their advertising systems. They process it on servers outside India, including in the United States.

How long it is kept: We keep the click identifier with your account record for as long as described for Operator Account Information in Section 9. Our record of what we sent holds only a hashed copy of the click identifier and is deleted with your account. Google and Meta keep what they receive under their own retention policies, which we do not control.

Withdrawing your consent: you can withdraw at any time, as easily as you gave it, and it does not affect your petboard account or service in any way.

What withdrawal cannot do: we cannot recall events already sent. To ask Google or Meta about data they hold, use their privacy tools (links above) or contact our Grievance Officer (Section 18), who will help you.

If you are not satisfied with how we handle a request or complaint, you may complain to the Data Protection Board of India.

11. Third-Party Service Providers

We may engage independent third-party vendors, service providers, contractors, infrastructure partners, payment facilitators, analytics providers, communication service providers, customer support tools, and other technology partners to support the operation, maintenance, security, hosting, processing, storage, and delivery of the Platform and Services.

We may share Personal Data for purposes including but not limited to cloud hosting, infrastructure management, payment processing, customer support, communication services, analytics, monitoring, security, and system administration.

Service Provider Purpose Privacy Policy
Supabase Cloud database, infrastructure and data storage services https://supabase.com/privacy
Vercel Application hosting and content delivery services https://vercel.com/legal/privacy-policy
Brevo Transactional email and communication services https://www.brevo.com/legal/privacypolicy/
Google Analytics Website analytics and performance measurement services https://policies.google.com/privacy
RazorPay Payment processing https://razorpay.com/privacy-policy/
Sentry Error monitoring https://www.sentry.com/privacy
Cloudflare Network security https://www.cloudflare.com/en-in/privacypolicy/
Anthropic Reading a price list an Operator chooses to upload during setup, to draft their services and prices; and drafting answers in the in-app help assistant from the Operator’s question, our help articles and their own settings (from 18 October 2026, once zero data retention is confirmed) https://www.anthropic.com/legal/privacy

Google Ads and Meta are not listed here because they receive data under their own terms, not only on our instructions. See Section 10A.

While we endeavour to engage reputable service providers and implement commercially reasonable safeguards, contractual protections, and due diligence measures, such Service Providers are independent entities and operate under their own policies, procedures, systems, and privacy practices. We do not own, manage, or control the operations of such third parties and cannot guarantee their performance, security practices, availability, or compliance at all times.

Accordingly, to the maximum extent permitted under applicable law, we shall not be liable for any acts, omissions, defaults, security incidents, breaches, delays, failures, errors, or unlawful conduct attributable to any independent Service Provider, except to the extent directly caused by our own wilful misconduct or violation of applicable law.

12. Rights you have over your Data:

Users are responsible for ensuring that the Personal Data provided to the Company is accurate, complete, and not misleading, and for complying with their obligations under applicable law. Users should not impersonate another person or provide false particulars while using the Platform. Subject to applicable law, you may exercise the following rights in relation to your Personal Data processed by the Company:

To exercise any of the above rights, please contact us using the details provided in this Privacy Policy. The Company may take reasonable steps to verify your identity before processing any request and may decline or limit requests where permitted or required by applicable law.

13. Use of Cookies and Similar Technologies

The Platform may use cookies, pixels, tags, local storage objects, and similar technologies ("Cookies") to operate, secure, maintain, and improve the Platform and related services.

Cookies are small text files or similar technologies that may be stored on a User's device when accessing or using the Platform. Cookies help us recognise Users, remember preferences, maintain security, improve functionality, understand how the Platform is used, and enhance the overall user experience. We may use the following categories of Cookies:

The Company may use third-party analytics providers, including Google Analytics or similar services, to collect information regarding the use and performance of the Platform. Such providers may use Cookies or similar technologies to generate aggregated statistics and usage insights.

Where required by applicable law or our cookie management practices, analytics and similar non-essential Cookies will only be used after obtaining the User's consent. Users may withdraw or modify their consent preferences at any time by clicking “Cookie choices” (at the foot of our website’s pages, below the sign-up and login forms, or in Settings → Compliance & Data), or through their browser settings.

Information collected through Cookies may include device information, browser information, IP address, usage information, session information, pages visited, interactions with Platform features, and other technical or analytics-related information.

Users may control or disable certain Cookies through their browser settings. However, disabling certain Cookies may affect the functionality, availability, or performance of some features of the Platform.

The Company may update the Cookies and tracking technologies used by the Platform from time to time to support operational, security, analytical, or service-related requirements.

14. Modifications

The Company reserves the rights, at its sole discretion, to change, modify, add, remove or impose restrictions on features or services or any portion to the Privacy Policy in whole or in part, at any time. However, our commitment to protecting Users privacy will remain our main emphasis. Changes in this Privacy Policy will be effective when they are updated on the Website. You are requested to keep checking the Privacy Policy from time to time for any changes made. Your continued use of the Website after any changes are posted will be considered acceptance of those changes. However, material changes to this Privacy Policy will be communicated to Users via a prominent notice on our Website prior to their effective date.

15. Consequences of Not Providing Personal Data

If you choose not to provide your Personal Data, which is mandatory to process your request or provide Services, we may not be able to provide the corresponding experience.

16. Contact Us

Please contact us for any questions, concerns or requests relating to the Privacy Policy or any of our data protection practices. Below are the contact details:

Registered Address – Bangalore, Karnataka, India

Email – hello@petboard.in

Website - https://www.petboard.in/

17. Grievance Redressal Mechanism

We are committed to upholding the rights of Users and to ensure transparency, accountability, and trust, we have established a Grievance Redressal Mechanism to address any concerns or grievances raised by the Users regarding their Personal Data in Annexure-1 of this Privacy Policy.

The Company maintains a formal grievance redressal system to handle User concerns promptly and fairly. Complaints regarding Data handling, access requests, or withdrawal of consent can be submitted to our designated Grievance Officer. The Grievance Officer shall acknowledge a complaint within forty-eight (48) hours of receiving it and resolve it within one (1) month of receiving it.

18. Details of Grievance Redressal Officer:

Name – Mr. Sahil Verman, Director

Email – hello@petboard.in and grievance@petboard.in

Annexure-1

Grievance Redressal Mechanism

Users may submit their grievances or concerns regarding their Personal Data in a Complaint Form as prescribed in Annexure-2 through the following channels:

Name- Mr. Sahil Verman, Director

Email- hello@petboard.in and grievance@petboard.in

Upon receiving a grievance, we will promptly acknowledge the receipt and provide a unique reference number for future correspondence. The acknowledgement will include information about the expected resolution timeline.

Our Grievance Officer will initiate an investigation into the reported grievance. This may involve gathering additional information, reviewing relevant policies and procedures, and consulting with relevant stakeholders.

Once the investigation is complete, we will communicate our findings and proposed resolution to the User. If necessary, we may request further clarification or provide additional information to ensure transparency and understanding.

If the User is not satisfied with the proposed resolution, they have the option to escalate the grievance to higher levels of management within our Company. We will provide clear instructions on how to escalate the grievance and ensure that it is promptly reviewed by the appropriate authority.

After considering all relevant information and perspectives, we will make a final decision on the grievance and communicate it to the User in writing. This decision will be binding unless challenged through legal means as per the provisions of the Applicable Laws.

We will maintain records of all grievances received, including details of the complaint, investigation, resolution, and any corrective actions taken as required by applicable laws. This information will be securely stored in accordance with data protection requirements.

We will treat all information provided with the utmost confidentiality and will only share it with individuals involved in investigating and resolving your grievance.

We are committed to continuously improving our Grievance Redressal Mechanism to ensure effectiveness and efficiency. Feedback from Users will be actively sought and used to inform enhancements to our processes and procedures.

Annexure-2

Complaint Form: Personal Data Grievances

Please complete this form if you wish to file a complaint or express concerns regarding handling your Personal Data by the Company. We take data privacy seriously and will address your concerns promptly and confidentially.

Personal Information:

Full Name
Email Address:
Phone Number:
Address:
Filed by (Self or legal heir)

Details of Grievance:

Date of Incident
Nature of Grievance (e.g., unauthorised access, data breach, misuse of personal data):
Description of Grievance (please provide as much detail as possible):
Any supporting evidence or documentation (if available):

Resolution Expectations:

Desired Outcome or Resolution
Contact details for Communication

Declaration:

I hereby declare that the information provided above is true and accurate to the best of my knowledge. I understand that providing false information may result in the dismissal of my grievance.

By submitting this form, I consent to the processing of the personal information provided solely for the purpose of investigating and resolving the grievance.

Signature-

Date-

© 2026 PetBoard Technologies Private Limited. All rights reserved.
Version 2.1 — Published 25 September 2026; Section 10A updated 27 September 2026 (the Google Ads tag’s hashed email; the “Analytics only” choice; reporting now starts 27 September 2026; Meta’s browser and ad-click identifiers in sign-up reporting). The event reporting described in Section 10A starts on 27 September 2026.
Section 11 service providers: Anthropic added 2 October 2026, effective 18 October 2026.