Version 1.7 — Last updated: 11 April 2026
petboard ("we", "us", "our") is a SaaS platform that helps pet service operators (boarding facilities, trainers, daycare providers, sitter networks) manage their business. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the petboard website at petboard.in or any petboard-powered intake form.
This policy applies to all users of the Platform, including operators who manage their business through petboard and pet parents who submit intake forms or receive WhatsApp updates.
This policy is published in compliance with:
Under the Digital Personal Data Protection Act, 2023 (DPDPA), petboard's role depends on whose personal data is being processed:
This distinction matters because it determines who is accountable to each data principal. If you are a pet parent, your primary point of contact for any privacy concern is your operator. If your operator is non-responsive, you may contact petboard's Grievance Officer (Section 11) and we will forward your request to the relevant operator and follow up.
| Data | Required? |
|---|---|
| Business name | Yes |
| Phone number / WhatsApp | Yes |
| Email address | Optional |
| City | Yes |
| Business type, modules, staff details | Yes |
| Logo, brand color | Optional |
| Data | Required? |
|---|---|
| Name, phone, email | Name & phone required |
| Dog details (name, breed, age, weight, photo) | Name required |
| Health & vaccination info | Optional |
| Behavioral, feeding, toileting notes | Optional |
| Emergency contact | Optional |
| Data | Purpose |
|---|---|
| Operator account info | Operating the SaaS platform, authenticating users, managing subscriptions |
| Pet parent intake data | Providing intake information to the operator for the purpose of pet care |
| Pet profile photo and vaccination certificates | Verification of pet identity and vaccination status. Shared with the operator to provide pet care. |
| Structured care update records (notes, timestamps, recipients) | Recording that an update was sent to a parent. Photos and videos attached to care updates are not stored by PetBoard — they are delivered directly to parents via WhatsApp from the operator's device. |
| Analytics data | Understanding aggregate website usage to improve the Platform |
We process your data only for the purposes stated above. We will not use your data for purposes beyond what is disclosed here without obtaining fresh consent.
We rely on the following legal bases for processing your data:
petboard does not knowingly collect data from individuals under 18 years of age. If we become aware that we have collected data from a child, we will delete that data promptly.
All data is stored on Supabase, hosted on AWS infrastructure in Mumbai, India (ap-south-1). Your data resides within Indian territory.
| Data Type | Retention Period |
|---|---|
| Operator account data | While the account is active, plus 90 days after deletion request |
| Intake form submissions | While the operator account is active; deleted upon operator account deletion |
| Boarding/stay records & media updates | While the operator account is active; deleted upon operator account deletion |
| Care photos and videos | Not retained. PetBoard does not store care photos or videos. They are delivered directly to pet parents via WhatsApp from the operator's device. |
| Pet profile photo and vaccination certificates | While the operator account is active; deleted upon operator account deletion |
| Consent records | Duration of account/stay plus 3 years (legal compliance) |
| Analytics data | Managed by Google Analytics (anonymised, see Section 10) |
We share data only as necessary for delivering our services. We do not sell personal data to third parties. The following subprocessors may process your data on our behalf:
| Subprocessor | Data Shared | Location | Purpose |
|---|---|---|---|
| Supabase | All stored operator and pet parent data (structured records, intake photos, vaccination certificates). Does not store care photos or videos. | India (AWS Mumbai, ap-south-1) | Primary database and file storage. Supabase Privacy |
| Vercel | HTTP request data, application logs | Multi-region (primary function region: US East; CDN edge: global) | Web app and API hosting. Pet parent personal data is stored in India via Supabase; Vercel processes only request metadata at edge nodes. Vercel Privacy |
| Brevo (formerly Sendinblue) | Operator email address and intake alert content | European Union | Transactional email delivery (intake alerts, digest emails). Brevo Privacy |
| Resend | Operator email address and notification content | USA | Transactional email delivery (onboarding, notifications). Resend Privacy |
| Google Analytics 4 | Anonymised browsing data (only with consent) | USA | Website usage analytics — marketing site only, not operator dashboard. Google Privacy |
| Operators | Intake form data (pet parent name, phone, dog details, health info) | India (via petboard Platform) | So the operator can provide pet care services. Operators are Data Fiduciaries for the data they manage on petboard (see Section 2 and the DPA). |
| Government / regulators | As required by law | India | Legal compliance, law enforcement, or a lawful order. |
We will notify operators in writing (email or WhatsApp) at least 15 days before adding or changing any subprocessor that handles pet parent personal data.
We implement reasonable security practices:
Under the DPDPA and SPDI Rules, you have the following rights:
To exercise any of these rights, contact us at hello@petboard.in. We will respond within 30 days.
Our website uses Google Analytics 4 to understand how visitors interact with our pages. Google Analytics is loaded only after you provide explicit consent via our cookie consent banner. If you reject cookies, no analytics scripts are loaded.
When you accept cookies, Google Analytics sets the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique visitors | 2 years |
_ga_<ID> | Maintains session state | 2 years |
We have enabled IP anonymisation. Your full IP address is never stored by Google. We do not use analytics data for advertising or profiling.
How to opt out:
In accordance with the DPDPA 2023 and the Information Technology Act 2000, petboard has designated a Grievance Officer to receive and address data protection concerns:
Grievance Officer, petboard
Email: hello@petboard.in
Location: Bangalore, Karnataka, India
Mailing address: available upon written request to the email above
Response SLA: acknowledgment within 48 hours; resolution within 30 days of receipt.
If you are a pet parent seeking to exercise your rights over data held by an operator, please contact your operator directly first — they are the Data Fiduciary (see Section 2). If the operator is unresponsive or the matter concerns petboard itself, you may contact the Grievance Officer above and we will route your request appropriately.
If you are not satisfied with our resolution, you may file a complaint with the Data Protection Board of India established under the DPDPA 2023.
We may update this Privacy Policy from time to time. When we make material changes:
© 2026 petboard. All rights reserved.
Version 1.7 — Last updated: 11 April 2026