Privaatsuspoliitika

Data Controller

Rentbox Eesti OÜ (registry code 17268244) operates PetMate and is the controller for the processing described in this policy.

Registered address: Nööbi tn 10, Aespa alevik, Kohila vald, Rapla maakond 79705, Eesti

Privacy contact: privacy@petmate.ee

1. Information We Collect

• Account data: name, email, password (hashed), profile photo
• Pet data: pet profiles, photos, health records, location
• Usage data: pages visited, features used, interactions
• Device data: browser type, IP address, device identifiers
• Location data: approximate location for nearby pet discovery (with consent)

2. How We Use Your Data

• Providing and improving PetMate services
• Matching pets with potential adopters
• Sending notifications about matches, messages, and events
• Preventing fraud and ensuring platform safety
• Analytics to improve user experience

3. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers (processors): listed below, each only for the purpose stated
• Other users: your public profile and pet listings are visible
• Legal authorities: when required by law

Processors and what they receive

• Hosting and storage: our servers and object storage hold the service database, uploaded photos and documents.
• Stripe Payments Europe (Ireland): payment details, billing e-mail and the purchase, when you buy a subscription, boost or listing. Card numbers never reach our servers.
• OpenStreetMap Foundation (United Kingdom): map tiles and static maps load only after you press “Show map”; the request carries your IP address and the shown coordinates. Address search and reverse geocoding are made from our server, so your IP address is not sent.
• Anthropic (United States) and OpenAI (United States): the text and photos you submit to AI features (assistant, breed detection, health analysis, symptom checker) and, for OpenAI, a pseudonymous user identifier derived from your account. Used only when you invoke the feature.
• DeepL (Germany), Google Cloud Translation (United States) or LibreTranslate: the text of a message or listing you ask to translate, depending on which provider is configured.
• Google Analytics (United States): page views and product events, only after you opt in to analytics cookies. PostHog receives server-side product events under the same opt-in when configured.
• Sentry (United States): error reports (browser and server), which can include your IP address and the page you were on, so we can fix failures.
• Cloudflare Turnstile (United States): a bot-protection check on the sign-up and password-reset forms; it receives your IP address and browser signals.
• Google and Facebook (Meta Platforms Ireland): only if you choose to sign in with them; they tell us your name, e-mail and avatar.
• Twilio (United States): your phone number and the verification code when you verify a phone number by SMS.
• Expo (United States) and browser push services (Apple, Google, Mozilla): the device token and the notification text, only for devices and browsers where you enabled push notifications. Message pushes never contain the message body.

Transfers outside the EEA rely on the European Commission’s adequacy decisions (United Kingdom, EU–US Data Privacy Framework participants) or Standard Contractual Clauses. Contact us for the current list of sub-processors.

4. Cookies

We use essential cookies for authentication and preferences. Analytics cookies are optional and require consent. See our Cookie Policy for details.

5. Your Rights (GDPR)

• Access: request a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion of your account and data
• Portability: export your data in a standard format
• Objection: opt out of marketing communications

Exercise these rights through Settings or by contacting privacy@petmate.ee.

6. Data Retention

We keep personal data only for as long as it is needed to provide the service, meet legal obligations, resolve disputes, and protect the platform. Account deletion removes or anonymizes data unless a longer retention period is required for a specific record.

7. Security

We use security controls including TLS in transit and password hashing. No system is 100% secure — report suspected vulnerabilities to security@petmate.ee

8. Children

PetMate is not intended for users under 16. We do not knowingly collect data from children.

9. Contact

Privacy contact: privacy@petmate.ee