Who handles your data
Patita is a product of Patita Labs, Inc., a US company. For privacy questions, contact hello@patita.app. Legal mailing address: [to be confirmed]. Patita determines how it handles website, business-account and support information. When a clinic uses Patita for records and communications, the clinic generally determines the purposes and Patita acts on its instructions. Your clinic must provide its own privacy notice.
Information we receive
We may receive names, email addresses, phone numbers, clinic details, team roles and account information; pet profiles, appointments, vaccinations, weight and documents linked to their families; messages and support requests; and technical information such as IP addresses, devices, access logs and security events. Sources include you, your clinic, authorized users and service providers. Do not include unnecessary sensitive personal information in notes or messages. Pet information can be personal information when linked to an identifiable person.
How information is used
Service purposes include account administration, coordinating care, delivering communications, responding to requests, managing subscriptions, preventing abuse and meeting legal duties. Depending on the law and context, processing requires consent, contractual necessity, a legal obligation or another permitted basis. Promotional communications are a separate, optional purpose; declining them does not prevent access to the core service. This notice does not replace any specific authorizations required.
Clinics, providers and artificial intelligence
Information is shared with your clinic and its authorized users according to their roles, and with providers needed to deliver the features used. The intended infrastructure includes Supabase, Vercel and Resend. When Ask Patita is used, relevant request context and tool results may be sent to the AI provider to produce a response. Messaging and maps integrations involve their respective providers. Information may also be disclosed to meet legal requirements or in a corporate transaction, subject to applicable protections. Before publication: confirm providers, countries, contracts, AI retention and training terms, and whether any sale, targeted advertising or data sharing requiring an opt-out occurs.
Messages and preferences
Your clinic may communicate through the app, email, SMS or WhatsApp depending on enabled features and your preferences or authorizations. Channel providers also handle information under their own terms. Ask your clinic to update your preferences and use the unsubscribe method in promotional messages. Marketing permission must be separate from care or account notices. Avoid sending sensitive information over a channel you consider unsuitable.
Cookies and similar technologies
The service may use browser storage and cookies for sessions, security and preferences. Before enabling measurement, advertising or other optional technologies, their providers, purposes and duration must be identified and legally required controls offered. Cookie inventory and preference mechanism: [pending production verification]. Merely using the site is not treated as consent.
International processing
Patita operates from the United States. Providers may process information outside your country. Before transferring information, the applicable legal grounds, authorizations and safeguards must be established, together with clinic agreements. A US business address does not remove local obligations. Hosting and access countries, recipients and transfer mechanisms: [to be confirmed].
Retention and security
Retention depends on purpose, the clinic relationship and legal duties. Closing an account does not automatically erase records a clinic must retain. Periods must be defined for accounts, messages, records, technical logs, backups and legal requests, along with deletion or anonymization procedures. Retention schedule: [pending approval]. Technical and organizational safeguards appropriate to the risk are required; no platform can guarantee absolute security. No certification or unverified recovery period is claimed.
Your rights and how to request them
Email hello@patita.app with your country, the right you wish to exercise and enough information to locate your account. Do not send identity documents initially; proportionate verification may be requested if needed. Authorized representatives may act where permitted by law. For clinic-controlled records, you can contact the clinic; Patita will help identify the responsible party. Requests are handled within applicable legal deadlines, with explanations for exceptions. Consent may be withdrawn without affecting earlier lawful processing. Rights are not absolute, and retention duties can limit deletion.
Country information
Colombia: Law 1581 provides rights to know, update and correct information, request proof of authorization and information about use, and revoke authorization or request erasure where applicable. You may complain to the Superintendence of Industry and Commerce after the required prior process. Mexico: the current LFPDPPP provides access, rectification, cancellation and objection (ARCO), plus applicable mechanisms to revoke consent and limit use or disclosure. El Salvador: the Personal Data Protection Law provides access, rectification, cancellation, objection, portability, erasure and restriction, subject to statutory conditions. United States: depending on your state and whether its law applies, you may have access, correction, deletion, portability, certain opt-out and appeal rights. California provides additional rights for businesses covered by the CCPA. Not every state law is presumed to apply to Patita.
Children, changes and contact
The clinic portal is intended for professionals and authorized staff. The minimum age and authorization process for family accounts must be confirmed before launch. If you identify a child’s information processed without required authorization, contact hello@patita.app. Updates will be published with their date and communicated through other channels where required. Updating this notice does not replace fresh consent where necessary. Effective date: [pending approval].