Privacy Policy

Last updated: 2026

1. Introduction

DoggyStyle CRM ("we," "us," or "our") operates a cloud-based customer relationship management (CRM) platform designed for animal boarding, daycare, and grooming facilities (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.

This policy applies to two categories of individuals:

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not access the Service.

2. Information We Collect

2.1 Subscriber Account Information

When a business signs up, we collect:

2.2 Staff User Information

Subscriber administrators may create staff accounts containing: full name, email address, username and password (hashed), role and permission assignments, and location assignments.

2.3 End Customer Information

Subscribers enter information about their customers (pet owners) into the platform. This data is controlled by the Subscriber and processed by us:

2.4 Pet Information

For each pet associated with a customer, we collect:

2.5 Vaccination and Health Records

We collect vaccination records including: vaccine name, dates administered and expiring, administering veterinarian, and supporting documents.

2.6 Reservation, Service, and Care Records

Booking details including check-in/check-out dates and times, boarding space assignments, special requests, arrival condition notes, add-on services, and daily care task records.

2.7 Financial Information

Invoice amounts, line items, tax calculations, payment amounts, payment methods (type only—e.g., credit card, cash, check), and reference numbers.

Important: We do not directly collect or store credit card numbers, bank account numbers, or other sensitive payment credentials. All payment card processing is handled by our third-party payment processor, Stripe, Inc. We store only Stripe-generated identifiers.

2.8 Membership Information

Membership plan enrollment, status, check-in/check-out records, punch card usage, and guest pass tracking.

2.9 Communication and Marketing Records

Email messages sent through the platform (subject, body, delivery status), communication channel, and marketing campaign send logs.

2.10 Documents and Files

Uploaded documents such as vaccination certificates, service agreements, medication authorizations, incident reports, and grooming consent forms.

2.11 Automatically Collected Information

We do not use third-party analytics, advertising trackers, tracking pixels, or behavioral profiling tools.

3. How We Use Your Information

4. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal information. We share data only with the following service providers:

4.1 Stripe, Inc. (Payment Processing)
4.2 Resend (Email Delivery)
4.3 Legal Disclosures

We may disclose your information if required by law, in response to a subpoena or court order, at the request of law enforcement, or to protect the rights, property, or safety of our users or the public.

5. Multi-Tenant Data Isolation

Each Subscriber's data is logically isolated from all other Subscribers' data. Every database record is scoped to the Subscriber's unique identifier. Subscriber A cannot view, modify, or access any data belonging to Subscriber B.

6. Cookies and Session Management

We use only strictly necessary cookies:

We do not use advertising, analytics, or social media cookies.

7. Email Marketing and CAN-SPAM Compliance

Subscribers on Pro and Enterprise plans may use the Marketing Hub to send email campaigns. Every marketing email includes an unsubscribe link. Unsubscribe requests are processed immediately, require no login, and are honored permanently. Transactional emails are not affected by marketing unsubscribes.

8. Data Retention

8.1 Active Accounts

While a Subscriber's account is active, all data is retained and available through the Service.

8.2 Account Cancellation Lifecycle

Grace Period (Days 1–30): Read-only access. All data intact and exportable. Self-service reactivation available.

Export-Only Period (Days 31–90): Login disabled. Data export remains available. Final warning email sent 7 days before deletion.

Permanent Deletion (Day 90+): All customer, pet, vaccination, reservation, membership, communication, marketing, document, and staff records are permanently and irreversibly deleted.

8.3 Financial Record Retention

In compliance with U.S. tax law, invoice and payment records are retained for seven (7) years after account cancellation in anonymized form (customer names and identifiers are removed). This retention is required by law and cannot be overridden.

8.4 Audit Log Retention

Audit logs of significant account actions are retained indefinitely with user identifiers anonymized after purge.

9. Data Export and Portability

Subscriber administrators can export their complete data set at any time (active accounts) or during the 90-day retention window (cancelled accounts). Exports are delivered as a ZIP file containing CSV and JSON files covering company information, customers, pets, vaccinations, reservations, invoices, payments, and memberships.

10. Data Security

In the event of a data breach, we will notify affected Subscribers and, where required by law, the appropriate regulatory authorities, within 72 hours of becoming aware of the breach.

11. Data Processor Role

With respect to end customer data, DoggyStyle CRM acts as a data processor. The Subscriber is the data controller and determines what end customer data is collected and how it is used. Subscribers are responsible for obtaining necessary consents, responding to data access/correction/deletion requests from their end customers, and ensuring their marketing activities comply with applicable laws.

If you are an end customer and wish to access, correct, or delete your personal information, please contact the animal care facility that entered your information into our platform.

12. Your Rights

All Users
California Residents (CCPA/CPRA)

You have the right to know what personal information we collect, delete your information, opt out of the sale of personal information (we do not sell personal information), and non-discrimination for exercising your rights.

EEA, UK, and Swiss Residents (GDPR)

You have rights of access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases for processing are: performance of a contract, legitimate interests (security, fraud prevention), and legal obligation (tax record retention).

13. Children's Privacy

The Service is designed for use by businesses and their adult customers. We do not knowingly collect personal information from children under the age of 16. Subscriber accounts may only be created by individuals who are at least 18 years old.

14. International Data Transfers

DoggyStyle CRM is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify Subscribers of material changes by email and by posting the updated policy with a revised "Last Updated" date. Continued use of the Service constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy, please contact us at the email address listed on your billing receipt.

← Back to home