enpet Privacy Policy

This policy explains what personal data enpet collects, why, who sees it, and what you can do about it. It covers the enpet application — the business console, the owner portal and the booking links — operated by ENPET LLC of Acton, Massachusetts, United States. Our marketing site at enpet.ai has its own privacy page.

Two kinds of people use enpet

Business account holders — grooming salons, boarding facilities, daycares, walkers and trainers — run their bookings, clients, billing and messaging on enpet. For the records a business keeps about its own clients, the business is the data controller: it decides what to collect and how long to keep it. enpet processes those records on the business's behalf, to provide the service.

Pet parents and clients appear in enpet because a business they use entered their details, or because they created an owner account themselves. Both are covered below.

What we collect

From a business account: the owner's name, email address and phone number; the business name, address and timezone; the staff accounts the owner creates; and everything the business enters to run its operation — services, prices, availability, clients, pets, bookings, notes, invoices and messages. Billing status comes from Stripe; card details go to Stripe directly and enpet never sees a card number.

From a pet parent: what the business entered about you (name, contact details, pets, visits, invoices) and, if you use the owner portal, what you enter yourself — your account, your pets, bookings, messages and preferences.

From everyone: technical records of each request (IP address, browser, time) kept for security and troubleshooting, and support correspondence.

How we use it

To provide the service: schedule and confirm bookings, send reminders and invoices, deliver messages between a business and its clients, and keep records. To bill businesses for their plan. To keep accounts secure and prevent abuse. To answer support requests. To meet legal obligations, such as tax records. We do not sell personal data and we do not run advertising.

AI features

Some features use an AI model — drafting a message, summarising a visit, suggesting a caption. When you use one, the text or records you asked it to work on are sent to our AI providers (Anthropic, and OpenAI for some features) to produce that answer, and nothing else. We do not use your data to train AI models.

Who receives data

We share personal data only with the businesses you deal with and with the service providers that operate parts of enpet for us:

• Stripe — payments, payouts and subscription billing. Stripe handles card details; enpet and the business see only the last four digits.
• SendGrid — delivery of the emails enpet sends.
• Twilio — delivery of text messages, where a business has texting enabled.
• Anthropic and OpenAI — the AI features described above.
• Akamai (Linode) — the servers, storage and backups that run enpet, located in the United States.

Each provider may use the data only to provide its service to us. If you use enpet from outside the United States, your data is processed in the United States.

Text messages

A business on enpet texts you only if you agreed to it: by ticking the text-message box on its booking page, on its sign-up page, or on the page a link it emails you opens. The texts are about your appointments, your pets and your account with that business; offers and promotions are never sent by text. Message frequency varies, and message and data rates may apply. Reply STOP to a business's number to stop its texts, START to receive them again, or HELP for help. The full terms are in the Text Message Terms.

Mobile phone numbers and SMS consent collected for text messaging are never shared with or sold to third parties or affiliates for marketing or promotional purposes. Twilio, listed above, receives your number only to deliver the business's texts.

How long we keep it

For as long as an account is active. When an account closes, records that the law requires a business to keep — invoices and payment records, typically for six to seven years — are kept for that period and then deleted; everything else is deleted on request or after a reasonable time. Backups are kept for a limited period and then expire.

Security

Data is encrypted in transit (TLS 1.2 or later) and at rest. Payment information goes directly to Stripe, a PCI DSS Level 1 provider. Access to a business's data is limited by role-based permissions inside that business's account, and platform administration is restricted to named operators.

Your rights

Under the GDPR (EU and UK), the CCPA (California) and similar laws you may ask to see the data held about you, correct it, have it deleted (subject to legal retention duties), receive a copy in a machine-readable format, or object to a use of it.

If you are a business account holder, most of this is in your account settings; for anything else, write to admin@enpet.ai.

If you are a pet parent, the first place to go is the business itself — it is the controller of your records, and its contact details are on the invoice or appointment page that brought you here. If the business does not respond within 30 days, contact enpet directly at admin@enpet.ai.

Other providers on enpet

If a pet care business invited you to enpet, your account starts with provider browsing turned off. You will see the business that invited you and anyone else you connect to yourself — not a directory of other providers.

You can turn browsing on at any time under Account → Privacy & Data → Providers. It is your choice alone: no provider can turn it on or off for you, in either direction.

We do not tell your providers what you look at. Whether you browse, what you search for, and which providers you view are never reported to any business — not individually, not in a list, and not in an export. A business may see an anonymous count of how many of their clients also use other enpet providers, and only once they have enough clients for that number to reveal nothing about any individual.

Separately, enpet only emails or notifies you about providers you do not already use if you have asked us to. That is a different setting from browsing, and it is off unless you turn it on — choosing to look around is not the same as agreeing to be marketed to.

Businesses on enpet may ask us not to promote competing providers to their clients. That agreement limits what we send you; it never limits what you can look at.

Cookies and local storage

The application uses only what it needs to work: a session cookie, your language and display preferences, and the record of your cookie choice. It runs no advertising trackers, marketing pixels or third-party analytics. If we ever add optional analytics, we will ask for your consent first and describe it here.

Children

enpet accounts are for adults. We do not knowingly collect personal data from anyone under 18, other than pet-care records a business keeps about its clients' pets.

Changes to this policy

The version and effective date are shown at the top. When we make a material change we will update them and tell account holders in the application.

Contact

ENPET LLC, Acton, Massachusetts, United States — admin@enpet.ai