Privacy Policy

[LEGAL ENTITY NAME] ("AirPet") is the data controller for the personal data described here. Registered office: [REGISTERED ADDRESS], Cyprus. Company number [NUMBER].

Data protection contact: [PRIVACY EMAIL]

You give us: your name, email and password (stored hashed, never in plain text); profile details including phone number, address, photo and biography; if you are a sitter, your services, rates, availability, declared skills and gallery photos; details of your pets including name, species, breed, age, weight, photos and notes covering health and behaviour; booking details including dates, times, messages and access notes; and reviews you write.

Payment details are handled by Stripe. We do not store card numbers.

We collect automatically: IP address, browser and device information, pages visited and actions taken, diagnostic information when something goes wrong, and location derived from the address you give us or a map pin you set.

We do not intentionally collect special category data about you. Note that health information about animals is not personal data.

To create and manage your account, show sitter profiles, enable bookings and messaging, process payments and payouts, and send booking emails — all on the basis of performing our contract with you.

To prevent fraud and abuse, fix faults and keep the platform reliable, and publish reviews — on the basis of our legitimate interests in running a safe and functioning marketplace.

To meet tax and accounting duties — on the basis of our legal obligations.

For any non-essential cookies — on the basis of your consent, which you can withdraw at any time.

Other users. Owners see a sitter's public profile, services, rates, skills, gallery, reviews and approximate location. Once a booking is accepted, the two parties see the contact and address details needed to carry it out. We deliberately do not publish a sitter's home description.

Service providers. Supabase (database, authentication and photo storage, in Frankfurt); Vercel (hosting); Stripe (payments and payouts); Resend (booking emails); Stream (in-app messaging, in Dublin); Sentry (error monitoring, in Germany); and Google Maps (addresses and map pins). Each is bound by a data processing agreement.

Others. Authorities where legally required, professional advisers under confidentiality, and a buyer if AirPet is sold or merged.

We do not sell your personal data.

Most data stays in the EU. Some providers, notably Stripe and Google, may process data in the United States. Where that happens, transfers are made under the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Account, profile and pet data: while your account is open, then a limited period afterwards. Bookings and payment records: retained to meet tax and accounting requirements. Messages: retained for a period after the booking ends. Photos: deleted shortly after you remove them or close your account. Error logs and cookie consent records: retained briefly.

Reviews may remain visible after an account closes, in a form that no longer identifies the author.

[SPECIFIC RETENTION PERIODS TO BE CONFIRMED ON LEGAL REVIEW]

You have the right to access your data, correct it, have it erased, restrict how we use it, receive it in a portable format, object to processing based on our legitimate interests, and withdraw consent where processing relies on it.

To exercise any of these, contact [PRIVACY EMAIL]. We will respond within one month. Some rights are limited — for example, we may keep booking and payment records to meet tax obligations even after you ask us to delete your account.

Some cookies are strictly necessary for the site to work, such as keeping you signed in; these do not require consent. Any others are set only with your consent.

You can change or withdraw your choices at any time using the cookie settings link in the footer. Withdrawing is as easy as giving consent. We do not use pre-ticked boxes, and continuing to browse does not count as consent. See our Cookie Policy for detail.

Data is encrypted in transit and passwords are hashed. Access to production data is restricted, and database access is governed by row-level security so users can only reach their own records.

No system is perfectly secure. If a breach occurs that is likely to risk your rights and freedoms, we will notify the Commissioner within 72 hours and tell you where required.

AirPet is not intended for children. You must be 18 or over to use it.

When you upload a photo of yourself, your home or your pet, you agree that we may store it in the EU and display it on the platform, including publicly where it forms part of a sitter's profile or gallery. You can delete photos at any time; they are removed from the platform immediately and from storage shortly afterwards.

Please contact us first at [PRIVACY EMAIL]. You also have the right to complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, or, if you live in another EU country, to your local supervisory authority.

We may update this policy. Material changes will be notified by email or on the platform.