利用規約

PetPedia AI Doctor processes the following information when you use the relevant features:

• Account and login: name, email, verification status, profile image, account identifiers, password hash for email login, and session information. Google sign-in supplies the profile and authorization information needed to authenticate you; we do not receive your Google password.
• Pet profiles and consultations: pet name, species, breed, sex, birth date, weight, color, allergies, medication, conditions, notes, photos, questions, conversation history, AI responses and source references. Pet details linked to your account, and any information identifying people in text or images, are treated as account-associated data.
• Uploads and support: uploaded images and attachments, filenames, file type and size, feedback, support correspondence and information you provide to resolve a request.
• Payments and rewards: order and provider references, plan, amount, currency, payment/refund status, subscription periods, cancellation status, credit purchases and usage, check-ins and referral records where used. Payment details are entered with the payment provider; our application does not store full card numbers or card security codes.
• Technical and security data: IP address and browser/user-agent information associated with sessions or requests, visitor identifiers, hashed IP/device identifiers used for abuse prevention, request timing, errors, AI task metadata, credit consumption and security events. Hashing these identifiers does not necessarily make them anonymous.

Required account and payment information enables those features. Pet details, photos and feedback are optional, but omitting them can limit personalization or support. Do not include human medical records, identity documents or third-party personal information that is unnecessary for a pet consultation.

We use data to create and secure accounts, answer questions using relevant pet and conversation context, synchronize saved records, deliver verification and password-reset emails, manage subscriptions and credits, resolve support and billing requests, prevent fraud and investigate service failures.

Where applicable law requires a legal basis, processing necessary to provide requested features is based on performing our agreement with you; accounting and legally required disclosures are based on legal obligations; proportionate security, fraud prevention and reliability activities are based on legitimate interests where permitted. Where consent is required for an optional use or transfer, we must obtain it separately. Accepting this Agreement does not waive your data rights or constitute blanket consent to unrelated processing. A new incompatible purpose requires an updated notice and an appropriate legal basis.

Necessary login cookies maintain your session. Sessions are configured to expire after 30 days and may be renewed while you use the service; verification and reset links expire after one hour. Expiry prevents further use of the credential and does not necessarily mean its database record is immediately erased.

Your browser stores guest conversation history and a random visitor identifier in local storage. Guest questions and recent context are still transmitted to our server and AI provider to generate a response; guest usage and operational metadata are stored server-side to enforce daily limits and diagnose failures. “Local memory” describes where history is saved, not offline-only processing. You can delete local conversations or clear site data in browser settings. Blocking cookies can prevent login; clearing local data removes local history and does not erase cloud records or provider-held data.

Cloud account, consultation, pet, order and operational records are stored in Cloudflare D1; uploaded files are stored in Cloudflare R2. Guest history remains in your browser until deleted or cleared. Cloudflare and other providers may process data outside your country; this service does not promise storage exclusively in your country.

Cloud account data and saved profiles/history are retained while needed to provide your account and saved-history features. You can delete consultations in History and request deletion of profiles, uploads or your account through support. Deleting a consultation does not by itself delete separately stored uploads, AI task records containing a question, billing records or provider copies. Account-wide requests are reviewed across these categories.

Retention is determined by the purpose of each record, account activity, necessary security investigations, applicable accounting requirements and unresolved disputes. Records needed for those obligations may remain after an account or consultation is deleted, with use limited to the remaining purpose. Backup and provider copies may remain under their separate retention cycles. We do not promise immediate erasure from every system or a fixed deletion period that the service does not implement. You may request the applicable retention details and an explanation of any information that must be retained.

The production service uses HTTPS, authenticated account access and checks that requested private records and uploads belong to the signed-in user. Password-based login uses password hashes rather than plain-text passwords. Provider access to consultation images uses signed links configured to expire after 15 minutes. Credentials for server integrations are handled server-side, and rate limits and abuse checks help protect access and credits.

These controls reduce risk but cannot guarantee absolute security. An image-link expiry does not delete a copy already retrieved by a provider. Protect your account and devices, avoid sharing signed links, and report suspected unauthorized access to support. If a personal data breach triggers legal notification duties, we will notify the affected people and authorities as required by applicable law.

Data is disclosed according to the feature you use:

• Cloudflare: hosts the application, database and files and processes network/security data; Turnstile may process browser and request signals when enabled for registration.
• Kie.ai and underlying AI/search services: receive your question, selected recent conversation context, relevant pet-profile context and a temporary image link when an image is used. The configured model is a Gemini model accessed through Kie.ai. When current-source search is used, the provider can send derived queries to Google Search. Avoid including unnecessary personal information in a prompt.
• Google: provides identity/profile information if you choose Google sign-in; its AI/search services may also participate in the model workflow described above.
• Resend: processes recipient email, greeting/name and verification or password-reset content to deliver account emails.
• Waffo and its payment partners: process checkout, recurring payments and refunds, receiving relevant account/order information and payment details you submit. The provider shown at checkout governs the selected payment method.

Each provider processes information under its applicable terms and privacy practices. Our application cannot guarantee zero retention or no model training by all upstream providers. Contact support before submitting information that requires a specific provider retention, training or geographic restriction.

We do not sell your personal data or share consultation content for targeted advertising. Necessary disclosures may also occur to comply with lawful requests, protect rights and investigate fraud, or in a business transfer subject to applicable privacy obligations. We limit disclosures to the relevant purpose. Where cross-border processing requires contractual safeguards, a transfer assessment or separate consent under applicable law, those requirements must be met; use of this Agreement alone is not a substitute. You may ask support about recipients, processing locations and applicable safeguards.

Depending on the law that applies, you may request access and a copy of your personal data; correction; deletion and account closure; restriction of processing; objection to processing based on legitimate interests; and a portable copy where applicable. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may also complain to the data-protection authority in your jurisdiction.

Use History to delete a consultation or copy its text. For account-wide access, export, correction, deletion or privacy questions, email support@agent.pet-pedia.org from your registered email, identify the right you wish to exercise and describe the records concerned. For guest requests, provide only the identifiers and approximate dates needed to locate relevant records; never send a password or full card details. We may request proportionate identity verification to avoid disclosing someone else’s data.

We will respond within the time required by applicable law, explain any lawful extension or refusal, and identify records that must be retained. Rights can be limited by legal obligations and other people’s rights. There is no automated account-wide export or erasure promise: support handles these requests. Cancel an active subscription in Account Center before requesting account closure, or ask support for help; clearing browser history does not cancel billing.

The service is intended for people legally able to use it; a parent or guardian should manage use involving a minor and avoid submitting unnecessary information about children. If you believe a child has supplied personal information without required authorization, contact support to review and remove it as required by law.

AI generates guidance from your inputs and automated controls may reject out-of-scope questions or restrict usage for security or credit limits. AI guidance is not a professional medical decision. If you believe an automated restriction is wrong, contact support for review; any statutory rights concerning automated decisions remain available.