Privacy Policy
Last updated June 2026 · Effective for all users of petolina.com and the Petolina mobile app
1. About this policy
Petolina Inc. ("Petolina") collects, uses, and discloses personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA") and applicable provincial privacy laws, including Quebec's Act respecting the protection of personal information in the private sector ("Law 25") for Quebec residents. We have designated a Privacy Officer who is accountable for our handling of personal information; you can reach them at privacy@petolina.com.
2. What we collect
We collect three categories of information:
- Account information you provide: name, username, email, phone, bio, avatar, password (stored hashed with bcrypt).
- Service information you create: posts, comments, marketplace listings, sitter and vet profiles, reviews, questions, answers, lost-pet sightings, bookings, photos, and location data you choose to share.
- Operational information: IP address, user agent, basic usage analytics, and rate-limit counters. We use Vercel Analytics, which is privacy-focused and does not set cookies.
- Mobile app information (Petolina iOS/Android app): if you grant permission, we access your camera and photo library (profile and pet photos, marketplace and missing-pet images), microphone (vet consult video calls), and location (to find nearby sitters, vets, and missing-pet sightings). We also store a push-notification token if you enable notifications. You can change or revoke these permissions at any time in your device settings.
3. Why we collect it
We collect personal information to (a) operate Petolina, (b) verify you and protect the platform from abuse, (c) connect pet owners with sitters and vets, (d) process payments, (e) communicate with you about the service, and (f) comply with Canadian law.
4. Sensitive information
We don't collect government IDs or financial account numbers directly. Payment information (credit card, bank account) is collected by our payment processor, Stripe, and never stored on our servers. Vet licence documents are stored privately on Cloudflare R2 and accessed only by Petolina admins for verification purposes.
5. Who we share it with
We share personal information only with:
- Service providers who help us operate the platform: Vercel (hosting), Neon (database), Cloudflare (storage), Stripe (payments), Resend (email), Twilio (SMS), Google Maps (geocoding), Daily.co (video consultations).
- Other users when you choose to: public profiles, public posts, reviews, and marketplace listings are visible to others.
- Lawful authorities when required by a valid Canadian court order, subpoena, or other legal process.
We do not sell or rent personal information to advertisers or data brokers.
6. Where we store it
Personal information is stored on servers operated by Vercel and Neon in Canadian and U.S. data centres. By using Petolina you consent to cross-border transfer of your personal information for processing.
7. How long we keep it
- Active account data: kept while your account is active.
- Booking records: kept for 7 years after the booking date for tax and dispute purposes.
- Deleted account data: removed from active systems within 30 days, and purged from backups within 90 days.
- Aggregate, non-identifying statistics (e.g., total bookings per month) may be kept indefinitely.
8. Your rights
Under PIPEDA you have the right to:
- Access a copy of your personal information. Use the export tool in your profile or email hello@petolina.com.
- Correct inaccurate information by editing your profile or contacting us.
- Delete your account and associated personal information. Use the delete tool in your profile or email us.
- Withdraw consent for non-essential processing (notifications) in your profile settings.
- File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Quebec residents (Law 25): in addition to the above, you have the right to data portability (to receive your computerized personal information in a structured, commonly used format), the right to be informed of and object to automated decision-making, and the right to request that we stop disseminating information or de-index it where the law allows. We do not sell your information or use it for profiling-based advertising. To exercise any of these rights, contact our Privacy Officer at privacy@petolina.com. You may also complain to the Commission d'accès à l'information du Québec.
9. Cookies
We use only cookies that are strictly necessary to operate the Service, such as the authentication session cookie. We do not use advertising or cross-site tracking cookies. For details, see our Cookie Policy.
10. Children
Petolina is not directed at people under 18. We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Security
We use encryption in transit (HTTPS) and at rest, bcrypt password hashing, two-factor login codes, rate limiting on sensitive endpoints, and access controls for administrators. No system is perfectly secure; if we ever discover a breach involving your personal information we will notify you and the Office of the Privacy Commissioner without undue delay.
12. Changes
We may update this policy. Material changes will be communicated by email or in-product banner before they take effect.
13. Contact
Privacy questions, access requests, and deletion requests go to our Privacy Officer: privacy@petolina.com. Mailing address: Petolina Inc., 1006-3980 Carrigan Crt, Burnaby, BC, Canada.