Privacy Policy

1. Who We Are

PetMatchAI is operated by Hemmy Kennel, a registered pet breeding and trading business based in Lagos, Nigeria. This platform connects pet buyers and sellers using AI-powered matching. For privacy inquiries, contact us at famhemmy3@gmail.com.

2. Data We Collect

• Account data: name, email address, phone number, location, role (buyer/seller/admin)
• Listing data: pet details, photos, videos, pricing, health records you choose to share
• Preference data: species, breed, budget, and purpose preferences used for AI matching
• Communication data: messages and offers exchanged between buyers and sellers
• Usage data: page views, listing views, and interaction logs for analytics
• Verification data: photos submitted for listing verification purposes

3. How We Use Your Data

• To operate the platform and facilitate buyer-seller connections
• To score pet matches on our own servers, and to generate AI recommendation summaries via Groq
• To send transactional notifications (new messages, offer updates, listing status)
• To moderate listings and verify seller authenticity
• To generate aggregate analytics for sellers (views, inquiries — never shared with buyers)
• To comply with applicable Nigerian law (NDPR 2019)

4. Legal Basis (NDPR Compliance)

Under the Nigeria Data Protection Regulation (NDPR) 2019, we process your personal data on the following lawful bases:

• Contract performance: to provide the services you registered for
• Legitimate interests: fraud prevention, platform security, analytics
• Consent: marketing communications (you may withdraw consent at any time)

5. Data Sharing

We do not sell your personal data. We share limited data with:

• Supabase (Ireland/USA): database and file storage — GDPR-compliant infrastructure
• Groq Inc. (USA): AI text generation for recommendation summaries and analytics — only anonymised, aggregated data is sent, no personal identifiers. Match scoring itself runs on our own servers and is never sent to Groq.
• Other users: only the data visible in your public profile and listings

6. Data Retention

We retain your account data for as long as your account is active. Deleted listings are removed within 30 days. You may request deletion of your account and all associated data at any time by emailing us.

7. Your Rights

Under the NDPR you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data (via your Profile settings)
• Request deletion of your account and data
• Object to processing for marketing purposes
• Lodge a complaint with the National Information Technology Development Agency (NITDA)

To exercise any right, email famhemmy3@gmail.com.

8. Security

All data is encrypted in transit (TLS) and at rest. Authentication uses bcrypt password hashing and JWT tokens managed by Supabase Auth. Row Level Security (RLS) ensures users can only access their own data.

9. Cookies

We use only strictly necessary cookies for session management (Supabase Auth session token). We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via in-app notification. Continued use of the platform after changes constitutes acceptance.