Effective Date: July 18, 2026
Last Updated: July 18, 2026
This Privacy Policy describes how BuiltforAI, LLC, a Pennsylvania limited liability company ("PetSpot," "we," "us," or "our"), collects, uses, shares, discloses, and protects your information when you access or use any site within the PetSpot ecosystem, including petspot.ai, vetnearme.ai, petfuel.ai, petadoption.ai, petmall.ai, and any future sites we may add (collectively, the "Services").
By creating an account or otherwise accessing or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, sharing, and disclosure of your information as described here. If you do not agree, do not use the Services.
The Services are intended for users located in the United States. We do not currently market or offer the Services to residents of jurisdictions outside the United States, and the Services are not intended for individuals located in the European Economic Area, the United Kingdom, or Switzerland.
This Privacy Policy applies to all sites within the PetSpot ecosystem. Individual sites do not maintain separate privacy policies. It does not apply to third-party websites, products, or services that we do not own or control, even where we link to them.
1. Information We Collect
2. Categories of Personal Information We Collect
3. Sensitive Personal Information
4. How We Use Your Information
5. AI Processing and Pet Health Data
6. What Spot Learns About Your Pets
7. Automated Decision-Making and Profiling
8. How We Share and Disclose Information
9. We Do Not Sell Your Personal Information
10. Affiliate Links and Commerce
11. Cross-Site Data Sharing Within the Ecosystem
12. SMS / Text Message Program
13. Cookies and Local Storage
14. Analytics
15. Data Retention, Archiving, and Deletion
16. Data Security
17. Your Rights and Choices
18. State-Specific Privacy Rights
19. Children's Privacy
20. International Users and Data Location
21. Third-Party Links and Services
22. Changes to This Policy
23. Contact Us
We collect information you provide directly, information collected automatically when you use the Services, and information we receive from third parties such as our service providers.
Account Information. When you create a PetSpot account, we collect your name, email address, and password. If you enable SMS notifications, we also collect your mobile phone number. Your account is centralized — one account works across all PetSpot ecosystem sites.
Pet Profile Information. When you add pets to your account, we collect details such as your pet's name, species, breed, age or date of birth, sex, weight, known health conditions, medications, allergies, and veterinary history. You may also provide behavioral notes, dietary preferences, and care instructions.
Conversation Data. When you interact with Spot, our AI assistant, we collect the content of your conversations. This includes health symptom descriptions submitted through VetNearMe.ai, nutrition questions and meal plans through PetFuel.ai, adoption preferences and lifestyle information through PetAdoption.ai, and general pet care questions through PetSpot.ai.
What Spot Learns. In addition to the conversations themselves, Spot may notice and save useful observations about your pets from those conversations. Section 6 describes this in detail, including the controls you have over it.
Documents and Files. You may upload veterinary records, vaccination certificates, lab results, and other documents to your account. We store these files securely and may use AI-powered extraction to identify key information such as vaccine dates, medication names, and lab values.
Calendar and Appointment Data. You may add vet appointments, medication schedules, and care reminders. We store this data to provide scheduling and notification features.
Payment Information. If you subscribe to a paid plan (Care Plan or Family Plan), your payment is processed by Stripe, our third-party payment processor. We do not store your full credit card number. We receive and store a record of your subscription status, plan tier, and billing cycle from Stripe.
Communications With Us. If you contact us for support or otherwise correspond with us, we collect the information you choose to provide, such as the contents of your message and your contact details.
Usage Data. We collect information about how you use our Services, including pages visited, features used, chat frequency, and session duration.
Device and Browser Information. We collect standard technical data such as browser type, operating system, screen resolution, IP address, and referring URL.
Approximate Location. We may infer your approximate location (such as city or region) from your IP address, and we process location information you provide when you search for adoptable pets or nearby veterinarians.
Analytics. We use Google Analytics (GA4) on our ecosystem sites to understand usage patterns and improve our Services. Google Analytics collects usage information using cookies and similar technologies in accordance with Google's privacy practices. See Sections 13 and 14.
Cookies and Local Storage. We use cookies and browser local storage to maintain your login session across ecosystem sites (single sign-on), remember your preferences, and support core site functionality. See Section 13.
We receive information from our service providers in connection with operating the Services — for example, subscription and billing status from Stripe, and message-delivery status from our email and SMS providers. We do not purchase personal information about you from data brokers.
Over the past 12 months, we have collected the following categories of personal information, as those categories are defined under applicable U.S. state privacy laws. The specific pieces of information we collect about you depend on how you use the Services.
| Category | Examples | Collected | Typical sources | Primary purposes | Disclosed to (categories) |
|---|---|---|---|---|---|
| Identifiers | Name, email address, mobile phone number, account/user ID, IP address, device identifiers | Yes | You; automatic collection | Account creation, authentication, communications, security | AI, hosting, email/SMS, analytics providers |
| Customer records / financial information | Subscription status, plan tier, billing cycle (payment card processed by Stripe; we do not store full card numbers) | Yes | You; Stripe | Billing, subscription management | Payment processor |
| Commercial information | Subscription tier, membership history, product interactions on PetMall.ai | Yes | You; automatic collection | Providing and personalizing the Services | Hosting provider; affiliate partners (transaction-level, see Section 10) |
| Internet or network activity | Pages visited, features used, chat frequency, session duration, browser and device data | Yes | Automatic collection | Service operation, analytics, security | Hosting, analytics providers |
| Geolocation data | Approximate location derived from IP address; location search criteria you enter | Yes | You; automatic collection | Vet finder, adoption search, localized content | Hosting provider; adoption data provider (search criteria) |
| Audio, visual, or similar information | Pet photos, uploaded documents and images, and — on Care Plan and Family Plan — voice, image, and video interactions with Spot | Yes | You | Providing AI features, document intelligence | AI, hosting providers |
| Health information about your pets | Symptoms, conditions, medications, allergies, veterinary history (about animals, not humans) | Yes | You; AI-derived observations | Pet care guidance, triage, nutrition, recordkeeping | AI, hosting providers |
| Account access credentials | Password (stored only in hashed form) | Yes | You | Authentication and security | Not disclosed |
| Inferences | AI-derived observations and profiles about your pets (see Sections 6 and 7) | Yes | Derived by Spot | Personalization and continuity of guidance | AI, hosting providers |
| Professional, employment, education, biometric, or precise geolocation data | — | No | — | — | — |
We retain each category for the periods described in Section 15.
Certain U.S. state privacy laws define a subset of personal information as "sensitive." The only category of sensitive personal information we collect is your account log-in credentials (your email in combination with your password). We use this information solely to authenticate you and secure your account. We do not use or disclose it to infer characteristics about you, and we do not use or disclose sensitive personal information for purposes that would require a right to limit under applicable law.
Please note: pet health information is information about animals, not about a human consumer. It is therefore generally not "sensitive personal information" under U.S. state privacy laws and is not protected health information under HIPAA (see Section 5). We nonetheless apply reasonable safeguards to it as described in Section 16.
We use your information to:
We do not use your information for third-party advertising, and we do not sell your personal information. Where we rely on your consent to process information, you may withdraw that consent as described in Section 17.
Our Services use artificial intelligence to provide pet care guidance. When you interact with Spot, your conversation content and relevant pet profile data are processed by AI language models to generate responses.
No Veterinarian-Client-Patient Relationship. Use of the Services does not create a veterinarian-client-patient relationship (VCPR) between you and PetSpot or any affiliated provider. Spot is an AI assistant, not a veterinarian. All AI-generated guidance is informational and does not constitute veterinary advice, diagnosis, or treatment.
Not for Emergencies. The Services are not monitored in real time and are not intended for emergency communications or emergency response. If you believe your pet is experiencing a medical emergency, contact a licensed emergency veterinarian immediately. Do not rely on AI triage as a substitute for emergency veterinary care.
Important disclosures about AI processing:
HIPAA Disclaimer. PetSpot is not a covered entity or healthcare provider under the Health Insurance Portability and Accountability Act (HIPAA), and pet health information submitted through the Services is not subject to HIPAA protections. While we implement reasonable security measures to protect your data (see Section 16), the legal protections afforded to human health information under HIPAA do not apply to pet health data.
Spot doesn't just answer questions — it learns. As you talk with Spot, it may notice and save observations about your pet's health, behavior, diet, and daily life — for example, a food sensitivity you mentioned, a recurring symptom, or a product that didn't work for your pet. Saving these observations is what lets Spot give better, more personal guidance over time instead of starting from scratch in every conversation.
Where you can see it. Everything Spot has noticed about your pets is visible to you in the "What Spot Has Noticed" area of your dashboard, along with where Spot learned it (for example, "from your conversation on May 29").
Your controls. You are always in charge of what Spot keeps. For anything Spot has noticed, you can:
Deleting a conversation is not the same as deleting what Spot learned from it. Observations are stored separately from chat transcripts. If you delete a conversation, the transcript is deleted, but observations Spot saved from it remain until you dismiss or delete them using the controls above. Deleting a pet deletes the stored observations about that pet. See Section 15 for the full picture of what deletion removes.
How this varies by membership. Spot memory — including saved observations and conversation continuity — is a feature of Care Plan and Family Plan memberships. Section 11 explains how memory works across ecosystem sites.
Our Services use automated processing to personalize guidance and to assess the urgency of pet health situations. Specifically:
These automated processes do not produce legal or similarly significant effects concerning you. They are advisory, you remain in control of any decision, and you can review, correct, or delete the underlying observations (Section 6) or contact us (Section 23) with questions. Where applicable state law provides a right to opt out of certain profiling, you may exercise that right as described in Sections 17 and 18.
We share information with the categories of service providers below, solely to operate, secure, and improve our Services. These providers are contractually limited to using your information only to perform services for us.
AI Processing. We use one or more third-party AI providers, including Anthropic and OpenAI, to power Spot's AI features. Conversation content and relevant pet context may be processed by these providers to generate responses. These providers process data under applicable contractual protections and do not use customer data to train their publicly available models where contractually agreed. Review: Anthropic's Privacy Policy and OpenAI's Privacy Policy.
Infrastructure and Hosting. Our Services run on Cloudflare's global edge network. Cloudflare provides hosting (Cloudflare Pages), serverless compute (Cloudflare Workers), database services (Cloudflare D1), object storage (Cloudflare R2), and key-value storage (Cloudflare KV). Your data is stored in Cloudflare's infrastructure.
Email and SMS. We use Resend to deliver transactional emails such as password reset links and account notifications. If you enable SMS notifications, your phone number is shared with one or more SMS delivery providers solely to send the messages you have requested (see Section 12).
Payment Processing. We use Stripe to process subscription payments. Stripe receives your payment card details directly — we never see or store your full card number. Review: Stripe's Privacy Policy.
Pet Adoption Data. PetAdoption.ai retrieves adoptable pet listings from RescueGroups.org's public database. When you search for adoptable pets, your search criteria (location, species preferences) are sent to this service.
Affiliate Partners. PetMall.ai participates in affiliate programs including Amazon Associates and Chewy affiliates. See Section 10.
We may also disclose your information:
We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
We do not sell your personal information, and we do not share your personal information for cross-context behavioral (targeted) advertising, as those terms are defined under applicable U.S. state privacy laws. We also do not use or disclose sensitive personal information for purposes that would trigger a right to limit its use. We have not sold or shared the personal information of consumers, including minors under 16 years of age, in the preceding 12 months.
PetMall.ai participates in affiliate programs including Amazon Associates and Chewy affiliates. When you click an affiliate link and make a purchase, the affiliate partner may collect information about that transaction and may pay us a commission. PetMall.ai does not share your PetSpot account data with affiliate partners. Purchases completed through affiliate partners are governed by the privacy policies of those partners, not by this Privacy Policy.
The PetSpot ecosystem uses centralized authentication and a shared data layer. Your account, pet profiles, and subscription information are accessible across all ecosystem sites through a single sign-on system, at every membership tier.
Spot memory across sites. Whether Spot's memory — prior conversations and saved observations (Section 6) — follows you between ecosystem sites depends on your membership:
Each ecosystem site may have its own interaction data (triage sessions, nutrition plans, adoption conversations) stored separately, but linked to your central account.
Consent to Cross-Site Memory. Cross-site memory is presented clearly when you sign up for or upgrade to a Care Plan or Family Plan, and subscribing to one of these plans constitutes your consent to it. If you prefer that Spot not carry memory across sites, the Explorer tier does not include cross-site memory, and you may downgrade at any time to discontinue cross-site memory going forward. Downgrading does not delete previously saved observations; you can remove those at any time using the controls in Section 6.
SMS notifications are optional and are sent only if you opt in by providing your mobile phone number and enabling SMS in your Notification Preferences.
We do not share your mobile phone number with third parties for their marketing, and we share it with our SMS delivery provider(s) only to send the messages you have requested. Your consent to receive SMS messages is not a condition of purchasing any goods or services.
We use cookies and browser local storage strictly for functional and analytics purposes:
| Technology | Purpose |
|---|---|
| SSO session cookie (sso_session) | Maintains your login state across ecosystem sites. HttpOnly where applicable. |
| Local storage tokens | Stores authentication tokens for the current site session. Cleared on logout. |
| Preference storage | Remembers UI preferences such as theme or display settings. |
| Analytics cookies (Google Analytics / GA4) | Helps us understand usage patterns and improve the Services. See Section 14. |
We use only cookies and similar technologies that are necessary to operate the Services or that help us understand and improve usage. We do not use advertising or cross-context behavioral tracking cookies.
If you disable cookies, you may not be able to use single sign-on across ecosystem sites, and some features may not function properly. You can control cookies through your browser settings and can opt out of Google Analytics as described in Section 14.
We use Google Analytics (GA4) to understand how visitors use our ecosystem sites so we can improve them. Google Analytics uses cookies and similar technologies to collect usage information, which is processed in accordance with Google's privacy practices. We do not use Google Analytics for advertising or to build cross-context behavioral advertising profiles.
You can opt out of Google Analytics across websites by installing Google's browser opt-out add-on, available from Google. You can also limit analytics through your browser's cookie controls.
How long we keep your data. We retain your account data, pet profiles, uploaded documents, chat conversations, and saved observations (Section 6) for as long as your account is active, and thereafter only as needed for the purposes described in this policy or as required by law. In determining retention periods, we consider the amount and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal, tax, accounting, fraud-prevention, security, and dispute-resolution requirements.
Chat history and membership tiers. Conversations are retained at every membership tier while your account is active. What differs by tier is the features available for using that history:
Archiving is not deletion. To keep your dashboard tidy, older conversations may be automatically archived — they drop out of your Recent Conversations list but remain fully viewable and are still retained. Only deletion removes data. You can delete any conversation at any time.
What deletion removes. Here is exactly what is deleted when you delete something:
| If you delete… | What is deleted | What remains |
|---|---|---|
| A conversation | The chat transcript. | Observations Spot saved from it, until you dismiss or delete them (Section 6). |
| A pet | The pet's profile and the stored observations about that pet. | Your conversations. A chat may mention more than one pet, so conversations remain with that pet's reference removed. |
| Your account | We will delete your personal data within 30 days, subject to applicable legal retention obligations. | Only data we are legally required or permitted to retain (for example, payment and tax records, fraud-prevention and security logs, and information subject to a legal hold), and de-identified or aggregated data already derived. |
Guest sessions. If you chat with Spot without an account, your guest session data is deleted within 7 days.
Backups. When you delete data, backup copies may persist for a limited retention period before secure deletion through normal backup rotation processes.
We implement reasonable technical and organizational measures designed to protect your information, including:
No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any unauthorized use of your account.
Depending on your state of residence, you may have some or all of the following rights under applicable U.S. state privacy laws:
How to exercise your rights. Contact us at privacy@petspot.ai. We will take steps to verify your identity before responding, typically by confirming control of the email address associated with your account and information already in our records. We will not use verification information for any other purpose.
Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of your authorization and may require you to verify your identity directly.
Timing. We generally respond within 45 days of a verifiable request, and may extend this period where permitted by law by notifying you. Requests to opt out are honored more promptly as required by applicable law.
Appeals. If we decline to act on your request, you may appeal our decision by replying to our response or contacting us at privacy@petspot.ai with the subject line "Privacy Appeal." We will respond to your appeal within the time required by applicable law and will explain the reasons for our decision. If your appeal is denied, you may contact the attorney general or applicable regulator in your state.
You can also manage much of your data directly:
This section supplements the rest of this policy and applies to residents of U.S. states with comprehensive consumer privacy laws, including (as applicable) California, Colorado, Connecticut, Virginia, Utah, and other states as their laws take effect.
California. Under the California Consumer Privacy Act, as amended (CCPA/CPRA), California residents have the rights to know, access, delete, correct, and to data portability, and the rights to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. The categories of personal information we collect, our sources, purposes, and the categories of third parties to whom we disclose information are described in Sections 1, 2, and 8. We do not sell or share personal information and do not use sensitive personal information for purposes requiring a right to limit (Sections 3, 9). California's "Shine the Light" law permits California residents to request information about disclosures to third parties for their direct marketing purposes; we do not make such disclosures. You may exercise your rights as described in Section 17, including the right to appeal and to designate an authorized agent.
Colorado, Connecticut, Virginia, Utah, and other comprehensive-law states. Residents have the rights to access, correct (where provided), delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data or engage in targeted advertising (Section 9). Residents of states that provide an appeal right may appeal a declined request as described in Section 17.
Preference signals. Where required by law, we honor recognized opt-out preference signals (such as Global Privacy Control) transmitted by your browser or device.
To exercise any state privacy right, contact us at privacy@petspot.ai. See Section 17 for verification, timing, authorized agents, and appeals.
Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@petspot.ai and we will delete that information promptly.
Users between 13 and 18 may use the Services only with the involvement and consent of a parent or legal guardian. We do not knowingly sell or share the personal information of consumers under 16 years of age.
The Services are intended for users located in the United States. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local laws. Our infrastructure provider operates a global edge network, so information may be processed or cached on servers located in various regions; regardless of where information is processed, we handle it in accordance with this Privacy Policy and applicable U.S. law.
Our Services may contain links to third-party websites and services, including affiliate partners (Section 10) and the privacy policies of our service providers (Section 8). We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party site or service you visit.
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. For material changes, we will provide additional notice, such as by email or a prominent notice within the Services, before the changes take effect where required by law.
Your continued use of the Services after changes take effect constitutes acceptance of the updated policy, except where we are required to obtain your consent.
If you have questions about this Privacy Policy or our data practices, or to exercise your privacy rights, contact us at:
BuiltforAI, LLC
232 Woodland Drive
State College, PA 16803
Pennsylvania, USA
Email: privacy@petspot.ai
This Privacy Policy applies to all sites within the PetSpot ecosystem. Individual sites do not maintain separate privacy policies.
