Trust and Security

Paw Miaw is built for pet families, care providers, and veterinary clinics that need practical protection for pet profiles, care records, provider workspaces, billing workflows, and shared access. This page summarizes the security and privacy posture we have in place today and the areas we continue to mature as Paw Miaw grows.

Paw Miaw is not designed to store human medical records and is not a system for human protected health information. Pet and clinic records can still be sensitive, so we treat them as protected product data.

1. Encryption and Sessions

• Paw Miaw is designed to use encrypted HTTPS connections for production web and API traffic.
• Browser sessions use secure cookie-based authentication instead of relying on bearer tokens stored in browser local storage.
• Password credentials are handled through the authentication system using one-way password hashing. We do not intentionally store plain text passwords.
• Password reset links are time-limited, and resetting a password revokes existing sessions.

2. Access Control

Paw Miaw separates household accounts, provider workspaces, provider staff, client relationships, and signed external links. Provider access is controlled by workspace membership, staff roles, permissions, and the product flows where a household or provider grants access.

• Households control household membership and pet sharing.
• Provider workspaces control staff invitations, staff roles, and workspace access.
• Clinic and provider tools use role and permission checks before exposing protected workflows.
• Signed links are scoped to specific actions, such as appointment confirmations, reminders, invitations, or client sharing.
• The app shows an Olfato AI chat only to the person who wrote it: not to other members of the household, not to providers, and not to our support staff when they help with an account.
• Pages that need you to be signed in are marked so that search engines do not list them.

3. Audit Logs

Paw Miaw records audit events for important provider and workspace activity, including record access, record changes, attachment changes, staff role changes, provider catalog and inventory actions, billing actions, invoice access, PDF generation, payments, and security relevant activity. Audit logs help with accountability, troubleshooting, abuse investigation, and clinic review.

Audit records are intended to preserve operational accountability and may be retained when other account data is deleted where needed for security, fraud prevention, compliance, dispute resolution, or legal reasons.

4. Backups and Recovery

Paw Miaw maintains operational backup and recovery procedures for core service data. Backups are used for disaster recovery, reliability, and service restoration. Backup copies may retain data for a limited period after a deletion request before they expire through normal backup rotation.

5. Subprocessors and Vendors

Paw Miaw uses outside service providers to operate the Service, for hosting, file storage, email delivery, sign-in, push notifications, payments, and app store billing. Our Privacy Policy lists each provider, what it does, and what data it receives.

We do not sell personal information, and we do not use pet care, provider, client, record, invoice, or message content for third-party advertising.

Olfato AI sends content to an artificial intelligence provider in two cases only: when a person who accepted its notice asks a question in the chat for families, and when a provider workspace has turned on the brief of a pet's record. The Privacy Policy explains what is sent, to whom, and what we keep.

6. Retention, Export, and Deletion

We retain data for as long as needed to provide Paw Miaw, maintain household and provider records, meet legal and tax obligations, support billing, prevent abuse, resolve disputes, and protect the Service. Users may contact support@pawmiaw.com to request account access, export, or deletion.

Some records may be retained when needed for provider recordkeeping, invoices, payments, taxes, security logs, fraud prevention, backups, disputes, legal obligations, or legitimate business needs. More detail is available in our Privacy Policy.

7. Incident Response

If we discover a security issue that may affect users, providers, clinic workspaces, or service data, we will investigate, contain the issue, preserve relevant records, remediate the problem, and provide notices where required by law or appropriate for user protection. Security questions or reports can be sent to support@pawmiaw.com.

8. Current Positioning

Paw Miaw does not currently claim SOC 2, ISO 27001, HIPAA compliance, or human PHI readiness. The Service is for pet care and veterinary workflows, not human healthcare. If Paw Miaw later offers enterprise security addenda, formal compliance reports, or regulated healthcare functionality, those will be covered by separate written terms.