Effective date: February 13, 2026 · Last updated: February 13, 2026
1. Who We Are
Pawsies (pawsi.es) is an animal rescue management platform operated by Odoson Olenghi SL, a company registered in Spain. When this policy refers to "Pawsies," "we," "us," or "our," it means Odoson Olenghi SL.
Pawsies provides software for animal shelters, rescue organizations, foster networks, and colony caretakers to manage animal intake, adoptions, medical records, documents, tasks, and finances.
For any privacy-related questions or requests, you can reach us at: privacy@pawsi.es
2. What Data We Collect
2.1 Account Information
When you create a Pawsies account, we collect the information you provide during registration and account setup:
Name and email address
Organization name and type
Password (stored in hashed form — we never store plaintext passwords)
Role within your organization (e.g., admin, volunteer, caretaker)
2.2 Organization and Animal Data
Pawsies stores the data you and your team enter while using the platform. This is the core content of the service and belongs to your organization:
Animal records (species, breed, name, medical history, photos, microchip numbers, intake and outcome data)
Location and colony information
Adoption records and adopter contact details
Foster placement records
Medical treatment records and veterinary notes
Documents you upload (invoices, medical files, contracts, etc.)
Task and workflow data
Financial records (income, expenses, donations)
2.3 Usage Data
We collect minimal technical data necessary to operate and improve the service:
IP address (for security and abuse prevention)
Browser type and version
Pages visited within Pawsies and general usage patterns
Date and time of access
Error logs and performance data
2.4 Payment Data
If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe provides us with limited information such as the last four digits of your card, card brand, expiration date, and billing address for record-keeping and invoicing purposes. Stripe's privacy policy is available at stripe.com/privacy.
2.5 What We Do Not Collect
We do not collect:
Data from third-party trackers or advertising networks
Behavioral data for profiling or targeted advertising purposes
Data from social media accounts unless you explicitly provide it
Biometric data
3. How We Use Your Data
We use your data for the following purposes:
Providing the service: Operating, maintaining, and improving the Pawsies platform, including processing your animal records, managing user accounts, and enabling collaboration within your organization
Billing and payments: Processing subscriptions and payments through Stripe, managing invoices, and handling billing inquiries
Communication: Sending you service-related notifications (e.g., account verification, security alerts, system updates, billing notices). We will never send unsolicited marketing emails without your explicit consent
Security: Protecting against unauthorized access, fraud, and abuse of the platform
Legal compliance: Meeting our obligations under applicable laws and regulations
Service improvement: Analyzing aggregate, anonymized usage patterns to improve the platform. We do not build individual user profiles for this purpose
4. Legal Basis for Processing (GDPR)
Under the EU General Data Protection Regulation (GDPR), we process personal data based on the following legal grounds:
Contract performance (Art. 6(1)(b)): Processing necessary to provide the Pawsies service as agreed when you create an account and accept our terms of service
Legitimate interest (Art. 6(1)(f)): Processing necessary for security, fraud prevention, service improvement, and basic analytics, balanced against your rights and freedoms
Legal obligation (Art. 6(1)(c)): Processing necessary to comply with tax, accounting, and other legal requirements
Consent (Art. 6(1)(a)): Where applicable, such as for optional marketing communications. You may withdraw consent at any time
5. Who We Share Data With
We do not sell, rent, or trade your personal data. We do not share your data with advertisers or data brokers. We share data only with the following parties, and only to the extent necessary:
Stripe — Payment processing. Stripe acts as an independent data controller for payment data. See Stripe's privacy policy for details
Hosting provider — Our servers are located in the European Union. Your data is processed and stored on infrastructure provided by our hosting provider solely for the purpose of operating the service
Your organization's team members — Data entered into Pawsies is accessible to other members of your organization based on the permissions set by your organization's administrators
Legal authorities — If required by law, court order, or valid government request, we may disclose data to the extent legally required
If we ever need to add additional third-party service providers (e.g., email delivery, analytics), we will update this policy and, where required, notify you in advance.
6. Data Storage and Security
6.1 Where We Store Your Data
All data is stored on servers located within the European Union. If this changes in the future, we will ensure appropriate safeguards are in place (such as Standard Contractual Clauses) and update this policy accordingly.
6.2 How We Protect Your Data
We implement industry-standard security measures including:
Encryption in transit (TLS/HTTPS for all connections)
Encryption at rest for sensitive data
Hashed passwords using modern algorithms (bcrypt or equivalent)
Regular security updates and patching
Access controls limiting who can access production systems
Regular backups with encryption
While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly addressing any security incidents.
6.3 Enterprise Tier: Isolated Infrastructure
Organizations on the Enterprise plan may opt for isolated database infrastructure. This means your organization's data is stored in a dedicated, logically separated database instance, providing an additional layer of data isolation.
7. Data Retention
We retain your data according to the following principles:
Active accounts: Your data is retained for as long as your account is active and you continue to use the service
After account deletion: When you delete your account or request deletion, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain certain data (e.g., billing records for tax compliance, which may be retained for up to 5 years as required by Spanish tax law)
Organization data: When an organization account is fully closed, all associated animal records, documents, and team member data will be deleted within 30 days. We can provide a full data export before deletion upon request
Backups: Data may persist in encrypted backups for up to 90 days after deletion, after which it is permanently removed
8. Your Rights
Under the GDPR and other applicable data protection laws, you have the following rights regarding your personal data:
Right of access — You can request a copy of the personal data we hold about you
Right to rectification — You can request correction of inaccurate or incomplete data. Much of your data can be edited directly within Pawsies
Right to erasure ("right to be forgotten") — You can request deletion of your personal data, subject to legal retention requirements
Right to data portability — You can request your data in a structured, commonly used, machine-readable format (e.g., CSV or JSON)
Right to restrict processing — You can request that we limit how we use your data in certain circumstances
Right to object — You can object to processing based on legitimate interests
Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at privacy@pawsi.es. We will respond to your request within 30 days. If you believe your rights have not been adequately addressed, you have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD) or your local supervisory authority.
9. Cookies
Pawsies uses only essential cookies that are strictly necessary for the platform to function. These include:
Session cookies — To keep you logged in and maintain your session while using the platform
Security cookies — To help prevent cross-site request forgery (CSRF) and other security threats
Language preference — To remember which language you chose, and to stop offering you a translation you have already declined
We do not use tracking cookies, advertising cookies, or any third-party cookies. We do not use analytics services that place cookies on your device. Because we use only essential cookies, no cookie consent banner is required under the EU ePrivacy Directive.
10. Children's Privacy
Pawsies is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to delete that data promptly. If you believe a child has provided us with personal data, please contact us at privacy@pawsi.es.
11. International Users
Pawsies is operated from Spain and our servers are located in the European Union. If you access Pawsies from outside the EU, please be aware that your data will be transferred to and processed in the EU. By using Pawsies, you consent to this transfer. The EU is generally considered to have strong data protection standards, and your data benefits from the protections of the GDPR regardless of your location.
12. Our Role as Data Processor
In many cases, your organization is the data controller for the animal records, adopter details, and other content entered into Pawsies, and we act as a data processor on your organization's behalf. This means:
Your organization determines what data is entered and how it is used within Pawsies
We process this data only to provide the service and in accordance with your organization's instructions
We do not use your organization's data for our own purposes beyond providing and maintaining the service
If a third party (e.g., an adopter) wishes to exercise their data rights regarding information your organization entered, they should contact your organization directly. We will assist your organization in fulfilling such requests
For organizations that require a formal Data Processing Agreement (DPA), please contact us at privacy@pawsi.es and we will provide one.
13. Third-Party Links
Pawsies may contain links to third-party websites or services (for example, links to Stripe for payment management). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
14. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes:
We will update the "Last updated" date at the top of this policy
For significant changes that affect how we handle your data, we will notify you by email or through a prominent notice within the Pawsies platform at least 14 days before the changes take effect
Continued use of Pawsies after changes become effective constitutes acceptance of the updated policy
15. Contact Us
If you have any questions about this privacy policy or our data practices: