Privacy Policy

This Privacy Policy explains how 360Pet, operated by MyPet360.app LLC, collects, uses, and protects information when you use the 360Pet app and website.

360Pet is a pet-friendly discovery platform. It is the discovery and lifestyle side of the MyPet360 ecosystem. MyPet360 (mypet360.app) is a separate app for pet health records and is covered by its own privacy policy. This policy applies only to 360Pet.

To create an account, 360Pet collects your email address and a password you choose. Your password is stored only as a secure hash by our authentication provider. Your email is used to sign you in, send verification codes and account-recovery messages, and identify your subscription.

You may optionally add and verify a phone number (see Phone number verification). Administrators can see your email and role to manage the app.

360Pet does not collect pet profiles, pet health records, medications, vaccinations, or documents. Those features live in the separate MyPet360 app. 360Pet only helps you discover pet-friendly places.

If you choose to verify a phone number during registration, 360Pet sends the number to Twilio Verify, which sends you a one-time code by SMS. 360Pet stores the verified number and a link to your account so the same number cannot be used by two accounts. These records are visible only to 360Pet administrators.

Twilio receives your phone number to deliver the verification code. 360Pet does not store the SMS code. After your number is verified, 360Pet creates a single-use verification proof token — a random reference, not the code — that lets you link the verified number to your account. This proof is deleted immediately once you claim your phone or after it expires, and expired proofs are removed.

When you open the Map, 360Pet asks your browser for your device location only to center the map on you. This location stays in your browser and is not sent to 360Pet servers or stored.

The interactive map loads map images from OpenStreetMap. When the map loads, OpenStreetMap receives your IP address and the map area you are viewing. Place addresses (business addresses, not yours) are converted to coordinates using OpenStreetMap Nominatim, and only by 360Pet administrators managing listings.

When you save a favorite, 360Pet stores the place identifier linked to your account so you can open it later. Only you can see your saved places.

Trip Planning builds a suggested route in your browser from existing place listings. The “Add to Calendar” option creates a link that opens your own calendar app; 360Pet does not store your trip itineraries or calendar data on its servers.

Conversations with Paws inside the app are held in your browser and sent to our AI language-model provider to generate each reply. 360Pet does not store in-app Paws conversations on its servers.

Messages sent through the website Paws widget before you sign in are saved as customer-service records, linked to a random session identifier, so our team can help you. These records are visible only to 360Pet administrators. Paws never provides veterinary or medical advice and does not send your conversations to MyPet360.

360Pet does not currently offer file or photo uploads and does not collect uploaded content from you.

When you start a paid 360Pet membership, your payment is processed by Stripe. 360Pet stores your Stripe customer ID and subscription ID, the subscription status, and your billing-period dates so we can provide and manage access.

Stripe processes your payment-card information. 360Pet does not receive or store your card number, card verification code (CVC), or card expiration date. All card data is handled securely by Stripe.

If you request account closure, 360Pet schedules your subscription to stop renewing at the end of the current billing period — this is not a refund — and ends your app access immediately, even if paid time remains. No card data is involved in this process.

360Pet uses marketing attribution to understand how pet parents find us. When you visit, 360Pet creates a random visitor identifier and stores it in your browser’s local storage, where it can remain for up to 90 days. On each visit we capture first-touch and last-touch marketing context — UTM parameters (source, medium, campaign, content, term), the landing page you arrived on, and the referring website — together with that visitor identifier.

This visitor identifier is pseudonymous, not completely anonymous: if you create an account, 360Pet links your visitor record to your account and records the sign-up time, and it can then be connected to you. Attribution records are stored on our servers and are visible only to 360Pet administrators; they are never shown in your account or shared with other users.

When you start a paid membership, 360Pet records your Stripe customer ID and subscription ID and the conversion time so we can measure which campaigns lead to subscriptions. 360Pet does not store any card data from these events.

Clearing your browser’s local storage removes the local visitor identifier and marketing data from your device. It does not delete the server-side attribution record. A new visitor identifier is generated on your next visit, and the prior server record remains visible only to administrators. To request deletion of the server-side record, use “Delete my data and request account closure” in the Account page or contact us.

Our hosting platform may automatically process standard technical information — such as IP address, request time, and browser type — for security, reliability, and abuse prevention. 360Pet functions log errors to help us diagnose problems. This information is not stored in your account records.

360Pet uses your information to provide discovery, create and authenticate your account, verify your phone number, process and manage your subscription, save your favorite places, answer Paws questions, provide customer support, maintain and improve listings, measure marketing performance, and protect the service from abuse.

360Pet does not sell your personal information.

360Pet does not use advertising cookies. We use browser local storage and session storage for: your language preference, a pseudonymous marketing visitor identifier and first/last-touch marketing data (up to 90 days), a Paws chat-session identifier, and an authentication token managed by our platform.

You can clear this information at any time in your browser settings. Clearing local storage signs you out and resets your marketing visitor identifier, but it does not delete server-side records (see Marketing attribution).

360Pet shares information with these service providers to operate the service:

• Base44 — app hosting, database, authentication, and the AI language model that powers Paws.

• Stripe — payment processing. Stripe receives your payment-card data; 360Pet does not.

• Twilio — phone-number verification by SMS.

• OpenStreetMap — map images and address geocoding.

• Google Fonts — web fonts for the interface.

360Pet links to MyPet360 (mypet360.app) but does not send it your personal data, pet data, or Paws conversations. We share information with these providers only as needed to provide the service, and we do not sell your information.

We keep your information for as long as your account is active. When you request account closure, we schedule your subscription to stop renewing (no refund), end your app access immediately, and remove your saved favorites, local subscription records, verified phone number, phone-verification proof, and the marketing attribution record linked to you. Campaign analytics may be retained in aggregate, de-identified form. Server logs are retained according to our hosting platform’s policy.

If you cancel your subscription, your subscription records remain until the end of the paid billing period, after which paid access ends. Cancellation is separate from account deletion.

360Pet uses reasonable administrative and technical safeguards to protect your information. Sensitive data such as payment cards and verification codes is handled by Stripe and Twilio, not stored by 360Pet. Access to personal records is restricted to you and to 360Pet administrators. No system is completely secure, and we cannot guarantee absolute security.

You can request access to, correction of, export of, or deletion of your personal data by emailing hello@360pet.app. You can also start the process yourself: the Account page includes a “Delete my data and request account closure” option.

When you request closure, 360Pet first schedules your subscription to stop renewing at the end of the current billing period — this is not a refund — and ends your app access immediately, even if paid time remains. We then delete your saved favorites, verified phone number, phone-verification proof, local subscription records, and the marketing attribution record linked to you. The request is permanent.

Base44, our platform, owns your login credentials. 360Pet does not automatically delete those credentials. Your closure request is recorded for our team, who verify and complete credential removal. Member access remains blocked while closure is processed, and the request is marked completed only after credential removal is verified. Until verification, you may still be able to sign in, but your data and member access are already removed.

When you request account closure, 360Pet creates an admin-only record that stores your user id, email, whether your subscription renewal was canceled, the confirmed cancellation date, the Stripe customer and subscription identifiers (not card data), the request status, whether credential removal has been verified, the verification method and date, and optional administrator notes. This record is visible only to 360Pet administrators. While your closure is processed, member access remains blocked and you cannot create new favorites, subscriptions, attribution links, or phone-verification records. The block stays in place for every request status except a formally reversed request or a request whose credential removal has been verified.

Your request is marked completed only after credential removal is verified — either through a documented server-side deletion of your authentication user, or after an administrator confirms removal through Base44 support or the authorized user-management interface and records the method and date. A status change alone is never treated as proof that credentials were removed. When verification is recorded, 360Pet removes the Stripe identifiers, cancellation date, and your email from the record, keeping only the user id, cancellation flag, status, verification details, notes, and request date.

Administrative records are deleted 90 days after completion only when verified removal has occurred. Unresolved, failed, or unverified requests retain a minimal blocking record so valid credentials cannot regain member access. If a closure cannot be completed, the record is marked failed and retained for review.

360Pet is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact hello@360pet.app and we will remove it.

360Pet and its service providers are primarily based in the United States. When you use 360Pet, your information may be processed in the United States and in other regions where our providers operate.

We may update this Privacy Policy. The “Effective” date at the top shows when it was last updated. Continued use of 360Pet after a change means you accept the updated policy.

For privacy questions or requests, email hello@360pet.app. You can also use the Contact page in the app.