Privacy Policy

1. Who we are

Trade name

Ceasaris Fauna

Legal entity

To be provided

Chamber of Commerce (KvK)

To be provided

VAT number

To be provided

Address

To be provided

Email

To be provided

Privacy contact

To be provided

Website

https://ceasarisfauna.com

2. What data we collect and why

• Account — email address, password (stored hashed by our authentication provider), optional display name, phone, city and household description. Purpose: providing your account. Basis: contract.
• Pet profiles & health passport — pet details, vaccinations, medications, allergies, weights, documents and notes you add. Purpose: the health-passport feature. Basis: contract.
• Lost & found reports — pet description, photo, city, location, date and the contact details you choose to publish. Purpose: reuniting animals. Basis: consent (you choose to publish).
• Adoption applications — name, email, optional phone, housing situation and message. Purpose: handling your application with the shelter. Basis: steps prior to a contract / consent.
• Community & feed posts — posts, photos, videos, comments and likes. Visible to signed-in members. Basis: contract.
• AI assistant (Jayla) — your conversations, memories you allow it to save and assistant settings. Basis: contract. You can delete conversations and memories at any time.
• Payments & orders — order contents, amount, status, name, email and delivery address for shop orders. Card/bank details are handled by the payment provider, not stored by us. Basis: contract and legal (tax) obligations.
• Video consultations — audio/video is transmitted through a video provider during a live session. Basis: contract.
• Security logs — sign-in events, IP address and browser information for detecting abuse. Basis: legitimate interest (security).

3. Recipients and processors

We only share data with services needed to run the platform:

• Lovable / Lovable Cloud — website hosting, database, authentication and file storage.
• Lovable AI Gateway — processes AI-assistant messages and automatic page translations.
• Stripe and Mollie — payment processing (they receive payment data and email).
• Daily.co — live video consultations.
• DuckDuckGo — search queries when the AI assistant searches the web (query text only, sent from our server).
• OpenStreetMap tile servers and Overpass API — map images and public practice locations. Your browser loads map tiles directly, so these services see your IP address.
• Google Maps — used on some maps; your browser contacts Google when such a map loads.
• Example-image services (placedog.net, cataas.com, picsum.photos, Unsplash) and jsDelivr CDN — some demo images and files load from these, which exposes your IP address to them.
• Participating shelters and veterinary practitioners — only the data needed for your application or consultation.

Some of these providers may process data outside the EEA; in that case they rely on their own transfer safeguards (such as Standard Contractual Clauses). This is under review.

4. Retention

• Account, pets, health data, posts and AI conversations: until you delete them or your account.
• Payment and order records: 7 years (Dutch tax retention obligation).
• Security logs: kept for as long as needed for security investigations; a fixed period is still to be set.

5. Your rights

You have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. You can edit most data yourself in your dashboard. To request deletion use Delete my data. You may also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

6. Children

Anyone may browse the site. To create an account, users under 16 need permission from a parent or guardian, who must agree to these terms on their behalf. Please don't publish children's personal details or recognisable photos in public reports or posts. If you believe a child's data was submitted without permission, request deletion and we will remove it.

7. Cookies

See our Cookie Policy.

8. Contact

Privacy questions: see the privacy contact above. Until a contact address is published, signed-in users can submit requests through Delete my data.