Privacy Policy

Petbiz (petbiz.my) is a booking, customer management and invoicing platform for pet businesses, operated from Malaysia. This policy explains what personal data we collect, why, and the choices you have. It is written with the Malaysian Personal Data Protection Act 2010 (PDPA) in mind.

We process three kinds of data:

• Account data — your name, email address, password (handled by our authentication provider) and billing details.
• Business data — your business profile, services, prices, staff accounts, bookings and invoices.
• Your customers' data — contact details, pet profiles (names, breeds, medical notes, photos) and booking history that you or your customers enter so the service can operate.

We use this data only to provide and improve the service: running your bookings and invoices, sending the reminders and notifications you configure, processing subscription payments, providing support, and keeping the platform secure. We do not sell personal data or use your customers' data for our own marketing.

We share data with a small set of processors, each only for their role: Stripe (subscription payments), Clerk (sign-in and account security), Supabase (database and file storage), Vercel (hosting and infrastructure), and Anthropic / MiniMax (optional AI features — for example, reading a photo of your price list; content is sent to them only when you use those features). Some providers store data outside Malaysia; we choose providers with strong security practices.

When you enter your customers' personal data into Petbiz, you act as the data user for that data under the PDPA and must have a lawful basis to collect it. We process it on your behalf to provide the service, following your instructions expressed through the platform.

You (and your customers, for data about them) can request access to personal data we hold, ask for corrections, and withdraw consent to processing — subject to the limits in the PDPA. Withdrawing consent for data needed to run your subscription may mean we can no longer provide the service. To exercise these rights, email support@petbiz.my.

We keep data for as long as your account is active. After your subscription ends, we keep your data for a reasonable wind-down period so you can export it, then delete it — except records we must keep for legal, tax or accounting reasons.

Data is encrypted in transit, access is limited to what each role needs, and each business's data is isolated from other tenants. No system is perfectly secure, but if a breach affects your personal data we will notify you as required by law.

We use essential cookies to keep you signed in and to secure the service. We do not use third-party advertising cookies.

Petbiz accounts are for businesses and their staff, not children. We do not knowingly collect personal data from anyone under 18 as an account holder.

If we make material changes we will update the date above and notify account owners by email or in the app. Continued use of the service after a change means you accept the updated policy.