Privacy Policy

1. What We Collect

We collect information you provide when creating an account (name, email, username), information about your listings and purchases, and technical data such as IP address and browser type to operate and improve the platform.

2. How We Use It

We use your information to operate your account, process transactions, send order updates, prevent fraud, and improve RePaw.

3. How We Do Not Use It

We do not sell your personal information to third parties. We do not currently use your personal data or the content you upload to train third-party generative AI models. We do not use your personal information to set different prices for different users based on individual browsing or purchase history (sometimes called “surveillance pricing”). If any of these practices change, we will update this Policy and, where required by law, obtain your consent or provide an opt-out.

4. AI and Automated Systems

Some illustrations and marketing copy on this site were created with the help of AI tools and reviewed by a human before publication. Photography of real people (such as our founder Aubrey) and pets is authentic. RePaw does not currently operate a chatbot, automated assistant, or generative AI feature that interacts with users. If we add any automated assistant in the future, it will clearly identify itself as AI, and you may always ask whether you are speaking with a human. We do not use automated decision-making that produces legal or similarly significant effects on you.

5. Payment Information

Payments are processed by Stripe. RePaw does not store your full card number or bank details. Please review Stripe's privacy policy for how payment data is handled.

6. Security

Passwords are hashed using bcrypt and never stored in plain text. Two-factor authentication secrets are encrypted with AES-256-GCM. We use HTTPS for all data in transit.

7. Cookies

We use cookies to maintain your session and remember your preferences. You can disable cookies in your browser settings, but some features may not work correctly.

8. Third-Party Services

We use Google for OAuth sign-in, Stripe for payments, and Cloudinary for image storage. Each service has its own privacy policy governing how they handle data.

9. Your Rights

You can request a copy of your data, correct inaccuracies, or delete your account at any time by contacting us. Account deletion removes your personal data within 30 days, except where we are required to retain it by law. If you are a California resident, you have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of your personal information — and we do not sell or share it. Users in other US states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) may exercise equivalent rights by contacting us.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

11. Children's Privacy

RePaw is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn we have collected such information, we will delete it promptly.

12. Changes to This Policy

We may update this Policy periodically. If we make material changes, we will notify you by email or through a prominent notice on the site.

13. Contact

For privacy questions, email privacy@repaw.com.