Privacy, plainly.

The short version

Shelters own their data — every animal, adopter, donor, and record belongs to the organization that entered it, exportable in full at any time, no strings. We don't sell data, we don't run ads, and we only collect what the product needs to work.

What we collect

Account data: your name, email, and a salted password hash. Organization data: everything your shelter enters — animals, medical records, contacts, applications, donations, photos and videos, website content. Adopter data submitted through public forms (applications, waitlist signups, volunteer signups) is collected on behalf of the shelter it was submitted to, and that shelter controls it.

We keep minimal technical logs (errors and usage counters) to keep the service healthy. We do not use tracking pixels or third-party analytics on your dashboard, and we add no advertising trackers of our own to shelters' public sites. A shelter can optionally connect its own analytics (Google Analytics, Tag Manager, Meta Pixel, or Plausible) to its public pages; those trackers belong to and are controlled by the shelter, which is responsible for disclosing them in its own privacy policy.

Shelters can also connect outside tools through API keys and webhooks (for example Zapier or Make). Data sent to a connected tool is chosen and controlled by the shelter, governed by that tool's own privacy policy, and every connection can be revoked by the shelter at any time.

Where it lives

Everything runs on Cloudflare's global platform — database (D1), file storage (R2), and compute (Workers). Data in transit is encrypted with TLS; data at rest is encrypted by Cloudflare's infrastructure. Payments, when enabled, are processed by Stripe — card numbers never touch our servers.

AI features

Some features send content to AI providers to do their job: photos for profile drafts and photo review (Anthropic), text for bios, replies, and marketing drafts (Anthropic, with Cloudflare Workers AI as fallback). This happens only when someone at your shelter triggers the feature, the content sent is only what the feature needs, and AI output never publishes anywhere without a human approving it. Every AI action is logged in your organization's audit trail. Our AI providers do not train on this data.

Email and unsubscribing

We send transactional email (application updates, reminders you configure) and, for supporters who opted in, shelter newsletters. Every non-essential email carries a one-click unsubscribe that works immediately and is honored permanently through a suppression list.

Cookies

One cookie: your session, so you stay signed in. HttpOnly, Secure, first-party. That's the whole list.

Deleting data

Shelters can delete animals, contacts, and records at any time, and deletion removes the underlying files too. To delete an entire organization and account, email us and we'll complete it within 30 days. Adopters who want their application data removed can ask the shelter they applied to, or email us directly.

Questions

Write to privacy@viatutela.pet — a human reads it. If we ever make a meaningful change to this policy, we'll email every account before it takes effect.