Security & Compliance

Your Pet's Data is Protected

Records are encrypted in transit with TLS and stored on Supabase (AWS) with row-level security, so the database refuses to return another account's data. The specifics are below — we would rather show you the mechanism than describe it with an adjective.

Security Features

Encryption

All data in transit is encrypted using TLS. Data at rest is protected by Supabase's infrastructure encryption.

Secure Infrastructure

Data is hosted on Supabase (AWS infrastructure) with automated backups and redundancy built in.

Access Controls

Role-based access control with Supabase Row Level Security (RLS) ensures users only access their own data.

Regular Audits

We perform regular dependency audits and security reviews as part of our development process.

Incident Response

We are committed to transparent communication. In the event of a security incident, we will notify affected users promptly.

Privacy Practices

PIPEDA Alignment

As a Canadian company, PetVitale follows practices aligned with the Personal Information Protection and Electronic Documents Act (PIPEDA).

GDPR-Aligned Practices

PetVitale follows practices aligned with GDPR principles and respects user privacy rights including data access, deletion, and portability.

Data Storage & Backup

All data is stored on Supabase infrastructure (AWS) with automatic daily backups. Supabase's infrastructure maintains SOC 2 Type II compliance.

Your Data Privacy

What We Collect

We collect only the information necessary to provide PetVitale services: pet health records, vaccination history, appointment information, user contact data, and billing information. We do not sell your data to third parties.

Data Retention

Health records are retained for the duration of your account. Upon account deletion, data is securely deleted within 30 days. You can request data export at any time in a portable format (JSON/CSV).

Third-Party Access

We only share your data with veterinary clinics and providers that you explicitly authorize. We do not share data with advertisers or analytics companies. Our service providers (payment processors, hosting providers) sign Data Processing Agreements.

Your Rights

You have the right to access, correct, delete, and port your data. You can manage sharing permissions with providers at any time. Contact privacy@petvitale.com to exercise your privacy rights.

Security Concerns or Vulnerabilities?

If you discover a security vulnerability or have concerns about our security practices, please contact our security team immediately.

We take all security reports seriously and will respond within 24 hours.

Trust PetVitale With Your Pet's Care

Get Started