Privacy Policy

Effective and last updated: 30 September 2026

Petsona is operated by Rexin Dynamics Private Limited, India ("we", "us" or "our"). This policy explains how information is handled through the Petsona Shopify app and our public website.

Company contact address: 43/1574, Suite No. 046, Calm Workspaces, Kochappilly Road, Near NH Bypass Flyover, Palarivattom, Ernakulam, Kerala 682025, India.
Privacy and support contact: contact@rexindynamics.com.

1. Our role and the merchant's role

Petsona helps Shopify merchants manage pet profiles, personalise product discovery, review activity and prepare marketing workflows. Merchants determine why their customers' information is collected and how their stores and connected marketing accounts use it. We process that information to provide Petsona according to the merchant's configuration and instructions. We are responsible for information used for our own business administration, support and website security.

A merchant's privacy notice and consent choices also apply when you use Petsona through that store. This policy does not replace the merchant's notice or constitute a separate data processing agreement.

2. Information we process

• Store and app information: store identifiers, installation and authentication records, settings, subscription status, feature usage and integration configuration.
• Pet profiles: a pet's name and, where supplied, species, breed, birthday, gender, photo, weight, allergies, diet, activity, life stage, veterinary-diet indicator, notes, social handle and Finder answers. Most profile fields are optional. Pet information linked to a customer account is treated as customer-linked information.
• Customer and order information: Shopify customer identifiers, customer contact details where needed for an enabled integration or a privacy request, and order and product details used for matching, analytics and reorder suggestions.
• Operational records: Finder progress and recommendations, campaign drafts, promotions, delivery attempts, save and upload receipts, privacy requests, errors, security controls and support correspondence.
• Website and device information: ordinary request information such as IP address, browser information and access logs received by hosting services. Guest pet drafts and active-pet choices may be stored in your browser.

Saved account pet profiles and uploaded profile files are held within the merchant's Shopify store. Application records are also held in Petsona's database. Guest Finder answers may be stored on the server separately from browser-local drafts. Clearing browser storage does not delete records held by Petsona or Shopify. App billing and store checkout are handled through Shopify; Petsona does not provide a payment-card entry form.

3. How we use information

We use information to save and edit profiles, match products to declared pet preferences, provide merchant reporting, prepare campaign suggestions, deliver merchant-enabled integrations, manage app entitlements, respond to support and privacy requests, prevent abuse and recover interrupted operations. We do not sell customer information or combine customer profiles from different merchants for our own advertising.

For our own business activities, processing may be necessary to provide requested services, pursue legitimate interests such as security and support, comply with legal obligations or act on consent, as applicable. Merchants are responsible for the lawful basis, notices and permissions for their customer data and marketing activities. Providing pet information is optional, but some features cannot work without the relevant details.

4. Providers, integrations and AI

We use Shopify for commerce and merchant-held records, Google Cloud Run for the application backend, Neon for the application database, and Cloudflare for web delivery and public-site hosting. The application and database deployment regions are Singapore. Other provider operations, support and processing may take place in other countries.

Petsona uses Groq for AI-assisted recommendations and campaign suggestions. Relevant pet attributes, Finder answers, product information and campaign context may be included in prompts. Free-text fields can contain personal information, so please avoid entering unnecessary sensitive details. Groq's published handling includes limited retention exceptions for reliability, abuse prevention and legal requirements. We do not represent our account as having Zero Data Retention enabled. See Groq's data handling information.

When a merchant enables Klaviyo, Omnisend or Shopify Flow, supported profile properties and events can be sent to that merchant's configured account or workflow. Messages triggered there follow the merchant's automation and consent settings. Disabling an integration does not delete information already received by the provider.

We may also disclose information when required by law or where necessary to investigate misuse, protect rights or respond to a security incident. Cross-border handling depends on the providers and applicable processing arrangements; a Singapore hosting region is not a guarantee that all processing remains there.

5. Retention and deletion

Operational information is retained while needed to provide the service, resolve requests, maintain security or meet legal requirements. Finder cleanup is configured to expire unclaimed responses after 30 days and reduce claimed-response details after 90 days. Webhook receipts normally use a seven-day cleanup period. Scheduled cleanup is not an assurance of simultaneous deletion from all systems. Hosting, audit and backup records follow their respective retention cycles.

Uninstall and Shopify privacy requests trigger the applicable app processing and erasure workflows. Some identifiers, lifecycle controls and privacy-request evidence remain to prevent erased records from being restored by older operations and to track unresolved cleanup. These retained controls currently have no automatic expiry and are not represented as anonymous.

Deleting local app records does not automatically erase every Shopify or integration record. Merchant-held pet profiles, files and connected-provider records can require separate action. Uninstalling Petsona is not confirmation that all such records have been deleted. Contact us and the merchant to coordinate an outstanding request.

6. Your choices and privacy requests

You can correct supported profile fields through the available profile editor. Customers should contact the store where they used Petsona to request access, correction, export or deletion of account-linked information. You may also contact contact@rexindynamics.com with the store address and a description of your request. Please do not send passwords, payment details or unnecessary identity documents.

We may need to verify your identity or the merchant's authority before acting. Depending on the law that applies, you may also have rights to object, restrict processing, withdraw consent, receive portable data or complain to the relevant data protection authority. We coordinate merchant-controlled requests with the merchant. Any export or deletion outcome is limited to the systems actually covered and verified.

You can clear browser-local drafts using browser controls. Marketing preferences should be managed with the relevant store or marketing provider. Withdrawal of consent does not affect processing already lawfully carried out.

7. Security and responsible use

Petsona uses HTTPS, authenticated app and customer requests, access checks, webhook signature verification and encrypted storage for integration credentials. No internet service can guarantee absolute security. Petsona is not intended to collect children's personal information or human medical records. Do not include such information in pet notes or other free-text fields. Contact us if it has been supplied inadvertently.

8. Changes and contact

We will update this page when our practices change and revise the date above. Where required, we will provide additional notice of material changes. Questions or concerns about this policy can be sent to contact@rexindynamics.com or the company contact address above.