Privacy Policy
Draft for review · Last draft update: September 26, 2026
This is an informational template, not legal advice. The operator must verify all data practices, complete the contact and retention details, and obtain qualified legal review before publishing a final policy.
Privacy contact to complete: [Legal entity name] · [Privacy contact email] · [Mailing address, if required].
1. Information processed
For business accounts, My Dog Desk handles the business name, contact details, plan, staff login credentials (stored as a hash), service settings, and billing status. For bookings, it handles pet-owner contact information, booking details, pet information such as care instructions and vaccine dates, and, if uploaded, pet documents. Staff may also enter notes, schedules, report cards, and itemized charges. Customers and staff can submit optional experience ratings and written feedback; customer feedback is visible to that business's staff. Technical information necessary to operate the site, such as request logs and browser-stored login tokens, may also be processed.
2. Why information is used
Information is used to provide booking, check-in, pet care record, staff, owner portal, and checkout features; support account access; prevent abuse; and respond to support or legal requests. Each pet care business also decides how it uses customer and pet records within its own operations. Customers should contact their pet care business about its own care and privacy practices.
3. Service providers and transfers
- Replit and its infrastructure: application hosting and associated service infrastructure.
- Stripe: subscription billing when enabled, and booking payments through the individual business's connected Stripe account. My Dog Desk does not store full card numbers.
- Twilio, if configured: delivery of opted-in SMS reminders using phone numbers and message content.
- OpenAI, if the optional AI assistant is used: processing the messages sent to that assistant to generate a response.
Before approval, confirm all additional infrastructure, service providers, locations of processing, and any cross-border transfer disclosures.
4. Storage, access, and retention
My Dog Desk uses access controls to separate business accounts and protect staff and owner views. No online service can guarantee absolute security. The retention schedule and process for deleting accounts, backups, and uploaded files must be established and added here before this draft becomes final.
5. Your choices and requests
Businesses can review and update some records through their dashboard. Pet owners can review information in their booking lookup or portal. For access, correction, export, or deletion requests, contact your pet care business or the My Dog Desk privacy contact once it is published. Availability of particular rights depends on applicable law and the parties' roles.
6. Browser storage and minors
The app uses browser storage to keep login tokens and support signed-in sessions. Any additional analytics, tracking, or advertising cookies should be disclosed before use. My Dog Desk business accounts are intended for adults acting for their businesses; pet businesses should avoid entering children's information unless necessary and legally permitted. The final minimum-age and minors policy requires review.
7. Changes and contact
Before publishing, specify the operator's legal name, privacy contact, applicable rights and jurisdiction, retention periods, any tracking technology, all processors and international transfers, and how users will be notified of material policy changes.