Legal

Privacy Policy

Effective date: August 5, 2026 · Last updated: August 5, 2026

FurryVax ("FurryVax," "we," "us," or "our") provides a vaccination management platform for veterinary clinics, consisting of a clinic portal, an inventory management system, and a pet-owner mobile app (together, the "Platform"). This Privacy Policy explains what personal data we collect through the Platform, why we collect it, who we share it with, and the rights you have over it.

This Policy applies to veterinary clinics and their staff who use the clinic portal ("Clinics"), and to pet owners who use the owner app ("Owners"). By creating an account or using the Platform, you agree to the collection and use of information as described here.

1. What information we collect

From clinics

Clinic name, business address, phone number, and email address
Login credentials (your password is never stored by us in readable form — it is handled entirely by our authentication provider, Supabase, using industry-standard hashing)
Names, email addresses, and roles of every team member you add to your clinic account

From pet owners

Your name, email address, and phone number
Your pet's name, breed, date of birth, weight, photo, and any behavior notes or clinical notes your clinic records
Vaccination records: which vaccines were administered, when, and when the next dose is due
Visit history logged by your clinic
Vaccination certificates you request, and the certificates themselves (as PDF files)
Your reminder preferences (e.g. whether you've opted in to email or WhatsApp reminders, and your preferred reminder timing)
Login credentials, handled the same way as described above for clinics

What we do not collect

The Platform does not use tracking cookies, third-party advertising trackers, or behavioral analytics. We do not sell personal data to anyone, for any reason.

2. How we use this information

To operate the core service: storing and displaying vaccination records, patient profiles, and inventory data for your clinic
To send vaccination reminders and certificate notifications by email and, where enabled, WhatsApp
To generate vaccination certificates on a clinic's behalf
To let a clinic manage its own team members' access to the Platform
To maintain an internal activity log within a clinic's account, so clinic owners can see which staff member performed which action — this log is visible only to that clinic's own team, never to us or to any other clinic
To provide customer support when you contact us
To keep the Platform secure and investigate misuse

3. Who can see your data

The Platform is built so that each clinic can only ever see its own patients, records, and inventory — this is enforced at the database level, not just hidden in the interface. One clinic cannot see another clinic's data under any circumstance through normal use of the Platform.

Within a single clinic, any team member the clinic owner has added (vets or staff) can see that clinic's full patient records — this is a deliberate design choice reflecting how clinics actually operate, where reception staff and veterinarians both need shared access to the same patients.

A pet owner can see only their own pets' records, never another owner's.

4. Third parties we share data with

We use the following service providers to operate the Platform. Each only receives the specific data needed to perform its function, and each has its own privacy and security practices:

Supabase

Our database, authentication, and file storage provider. All clinic, patient, and owner data described above is stored with Supabase.

Resend

Our email delivery provider. Recipient email addresses and message content (e.g. reminder emails, certificate emails, invite emails) pass through Resend to be delivered.

WhatsApp Business Platform (Meta)

Used to deliver vaccination reminders over WhatsApp, where a clinic has this enabled. Recipient phone numbers and reminder message content pass through this provider to be delivered.

Vercel

Hosts the Platform's web applications. Standard web server logs (such as IP address and browser type) may be processed by Vercel as part of serving the Platform.

We do not share your data with any other third party, and we do not sell personal data.

5. Data storage and security

Data is stored on Supabase's infrastructure. in data centers located in the Asia region.
Access to clinic and patient data is restricted by row-level security rules enforced at the database level — a logged-in user's access is limited to their own clinic's data by the database itself, not just by the app's interface.
Passwords are never stored in plain text; authentication is handled by Supabase using industry-standard hashing.
We recommend clinics use a strong, unique password and enable this on any team member accounts they create.

6. How long we keep your data

We retain clinic and patient data for as long as the associated clinic account remains active. If a clinic closes its account, we will delete or anonymize associated data within 30 days, except where we are required to retain it for legal, accounting, or dispute-resolution purposes.

7. Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Withdraw consent for any processing that relies on your consent, at any time
Request erasure of your personal data, subject to our legal obligations to retain certain records
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity
File a complaint with us, and if unresolved, with the Data Protection Board of India

To exercise any of these rights, contact us using the details in Section 10 below. A clinic owner can also directly edit or remove patient records for their own clinic through the clinic portal at any time.

8. Children's data

The Platform is intended for use by adults. Pet owner accounts should be created and managed by an adult (18 years or older). We do not knowingly collect account data from minors. If you believe a minor has created an account without appropriate parental involvement, please contact us and we will address it.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the Platform or in applicable law. We will update the "Last updated" date above when we do. Material changes will be communicated to clinics and owners through the Platform or by email.

10. Grievance Officer & contact

In accordance with the Digital Personal Data Protection Act, 2023, the Grievance Officer for FurryVax is:

Aryaman Rajput

Email: contact.furryvax@gmail.com

Address: A-47, Ashok Vihar, Phase 2, Delhi 110052

For any questions, requests, or complaints about this Privacy Policy or how your data is handled, please reach out using the details above.

11. Governing law

This Privacy Policy is governed by the laws of India. Any disputes arising under it are subject to the exclusive jurisdiction of the courts of the National Capital Territory of Delhi.