Privacy notice
Petdocus is in early access. This notice describes what the service does today. A full privacy policy and data processing agreement for organizations will replace it before the service leaves early access.
Who we are
Petdocus (petdocus.com) is operated during its free pilot by Condria Eduard-Dragos, a private individual based in Romania, who is the controller for account data.
Privacy contact: condriaeduarddragos@gmail.com — or use the contact form and start your message with "Privacy request". We answer within one month.
What we collect
- Account: your name, email address and password (stored only as a secure hash), and optional two-step verification settings.
- Organizations: organization name, country and language; who is a member, their role and permissions.
- Change history: for every change, who made it, when, what changed, and a shortened IP address (the last part removed).
- Contact form: your name, email and message, sent to our inbox to answer you.
We don't use advertising or tracking cookies. The app uses one essential cookie to keep you signed in.
Why we use it
- To provide the service you signed up for (contract).
- To keep the service secure and to keep an accountable change history (legitimate interest).
- To answer your messages (legitimate interest / your request).
Where it is stored
The database and files are stored by Cloudflare in the European Union (EU jurisdiction). Emails are sent through Cloudflare Email Service. Cloudflare acts as our processor. We don't sell personal data, don't use it for advertising, and don't share it with anyone else unless the law requires it.
How we protect it
- Encrypted connections (HTTPS) everywhere; passwords stored only as secure hashes.
- Access to data only through permission checks on the server; two-step verification for admins.
- Every change is logged in a tamper-evident history.
- If a breach ever puts your data at risk, we notify the data protection authority and, where required, you.
How long we keep it
Account data is kept while your account exists. The change history is append-only and kept for the life of the records it describes. Contact messages are deleted when no longer needed to answer you.
Data entered by organizations
Rescues and clinics decide what they record about the people they work with (for example adopters or fosters). For that data the organization is responsible, and Petdocus processes it on their behalf.
Your rights
You can ask for access to, correction or deletion of your personal data, ask us to restrict or object to processing, and ask for a copy of your data. You can also complain to your data protection authority — in Romania, ANSPDCP (dataprotection.ro).
Age
Petdocus is for people aged 18 and over.