Privacy Policy

Last updated: February 17, 2026

1. Information We Collect

When you create an account or memorial on Paws Rainbow, we collect:

  • Email address (for authentication and notifications)
  • Memorial content you provide (pet name, story, dates, photos)
  • Payment information (processed securely by Stripe — we never store card details)
  • Anonymized IP hashes (for candle lighting deduplication only)

2. How We Use Your Information

  • To create and display your pet memorial pages
  • To process payments via Stripe
  • To send important account emails (payment confirmation, memorial reminders)
  • To improve our service

3. Data Retention

We never hard-delete your memorial data. Even if a free memorial expires after 7 days, the data is soft-archived and can be restored at any time by upgrading to a paid plan. Paid memorials are stored permanently.

4. Third-Party Services

We use the following third-party services:

  • Supabase — database, authentication, and file storage
  • Stripe — payment processing
  • Vercel — hosting and analytics
  • Resend — transactional emails

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies.

6. Your Rights

You have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Deletion — request deletion of your personal data (memorial data may be retained in soft-archive as described in our retention policy)
  • Data Portability — request a machine-readable copy of your data
  • Withdraw Consent — withdraw your consent for data processing at any time

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell your personal information.

To exercise any of these rights, please contact us at support@pawsrainbow.com.

7. Children's Privacy

Paws Rainbow is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@pawsrainbow.com and we will promptly delete such information.

8. Security

We use industry-standard security measures including HTTPS encryption, secure authentication via Supabase Auth, and PCI-compliant payment processing via Stripe.

9. Contact

If you have questions about this privacy policy, please contact us at support@pawsrainbow.com.