Privacy Policy — Metaglider

1. Information processed

Account information includes your email, account identifier, sign-in provider, verification status, and optional authenticator enrollment. Google sign-in may supply your name and profile image. Firebase handles authentication credentials.

Workspace information includes business names, public intake-link names, memberships, settings, and agreement records. Care information includes dog profiles, health and behavior details, routines, emergency and veterinary contacts, links, social-media preferences, drafts, submissions, and optional import content. Do not include unnecessary sensitive information about people.

We and our infrastructure providers also process technical information such as IP addresses, browser and device information, request logs, timestamps, errors, and security events. Where configured, signup abuse controls use a keyed hash derived from an IP address.

2. Why information is used

We use information to authenticate accounts, save and retrieve care details, operate workspaces, deliver submissions and service messages, provide support, diagnose failures, prevent abuse, record agreements, and meet legal obligations. We do not use care forms for targeted advertising.

3. Who receives information

Your unfinished drafts and reusable dog profiles are not made available to sitters through their workspace. When you submit a form, the selected sitter receives that submission. Workspace names and published intake links are public. Authorized operators and service providers may process records for support, security, and service operation; private does not mean inaccessible to all administrators.

Providers include Google Firebase for authentication and database storage, Vercel for hosting, and Resend when configured for service notifications. Firebase sends authentication emails. If AI-assisted import is enabled and you request an import, extracted PDF text or pasted text is sent to Anthropic to suggest answers. Review what you import and do not provide information you lack permission to share.

We may disclose information when legally required, to address fraud or security threats, to protect lawful rights, or in a business transfer subject to applicable privacy obligations. We do not sell your personal information or share it for cross-context behavioral advertising.

A sitter may retain copies outside Metaglider and is responsible for their own handling of those copies. External sites, sign-in services, and care providers have their own practices and notices.

4. Browser storage and tracking

The service uses browser storage and authentication tokens to keep you signed in and support account functions. Infrastructure and sign-in providers may use cookies or similar technologies for operation and security. Optional Firebase App Check uses Google reCAPTCHA when configured, which may process browser, device, and interaction information for abuse prevention.

Metaglider does not currently include advertising trackers or cross-site behavioral analytics. It does not change its necessary service processing in response to a Do Not Track signal. Third-party sign-in or security services may recognize your browser across services according to their own policies.

5. Retention and deletion

Records currently remain stored until removed through an operational process; automatic expiry is not implemented. Retention decisions consider the purpose of the record, account activity, support needs, security, legal obligations, and disputes. Submitted forms and agreement audit records are retained separately from editable drafts.

You can request access, correction, deletion, or account closure using the contact below. We may need to verify your identity and retain information where law or a legitimate ongoing purpose requires it. Removing a record from active systems may not immediately remove backups or a sitter’s independent copies. We will explain relevant limitations when responding.

6. Your choices and rights

You can review saved information in your account, edit supported draft and profile fields, choose whether to use imports, and decide which sitter receives a submission. Submitted forms preserve the answers sent at that time; contact us and your sitter about corrections. You can enable optional authenticator protection in account security settings.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of information, or to object to or restrict certain processing. Contact us to make a request or raise a concern. We will not unlawfully discriminate against you for exercising applicable rights.

7. Security and processing locations

We use authentication, server-side access checks, and workspace permissions to restrict access. No service can guarantee complete security. Protect your credentials and contact us promptly about suspected misuse.

Providers may process information in the United States and other countries where they operate. Those countries may have different privacy laws. This notice does not replace any transfer safeguards or other obligations required by applicable law.

8. Children

Accounts are intended for adults aged 18 or older. We do not knowingly seek personal information from children under 13. Contact us if you believe a child has provided personal information so we can investigate and address it.

9. Policy updates

We will post updated versions with a date and provide notice of material changes through the service or email as appropriate. Where required, we will obtain consent before using previously collected information for a materially different purpose.