Pet Services Lab – Privacy Policy

Last updated: July 11, 2026 · Compliant with PIPEDA (Canada)

Who We Are

Pet Services Lab is a grooming management platform for Canadian pet service businesses, operated by The Systems Lab. This policy covers the Pet Services Lab web application and mobile apps. We are committed to protecting the privacy of both our customers (salon owners and staff) and their clients (pet owners).

What We Collect

From salon accounts: business name, email address, password (stored only as a bcrypt hash, never in plain text), billing information, and usage data.

From salon client records (entered by you): pet owner names, phone numbers, email addresses, pet details, appointment history, and payment records. This data belongs to you - we process it on your behalf.

From the mobile app: if you enable push notifications, a device token is registered with Google Firebase Cloud Messaging so notifications you have turned on can be delivered to your device. The token is removed when you sign out. The app's camera is used only for scanning barcodes and gift cards; scanning happens on your device, and no photos or video are stored or transmitted.

Why We Collect It

To operate the Service: authentication, scheduling, reminders, payments, notifications, and reporting. We do not sell any data to third parties, ever.

Third-Party Services

We use Twilio for SMS, Resend for email, Stripe for payment processing (card numbers are handled by Stripe and never stored by Pet Services Lab), Google Firebase for push notifications, and Supabase, Railway, and Vercel for database and application hosting. Each has its own privacy policy and data processing agreements.

SMS and Email Consent

SMS messages are only sent to clients who have explicitly consented. Clients may opt out at any time by replying STOP. No automated marketing messages are sent before 9am or after 9pm local time, in accordance with Canadian anti-spam practice.

Data Retention and Account Deletion

We retain your data for the duration of your subscription plus 90 days after cancellation, during which you may export your data. After 90 days, data is permanently deleted. You can cancel your account at any time from Settings, and you can request deletion directly by emailing pslprivacy@systemslabhq.com.

Your Rights Under PIPEDA

You have the right to access, correct, or request deletion of your personal data at any time. Salon clients have the same rights regarding data held in your account - you are responsible for honouring those requests.

Security

All data is encrypted in transit (TLS) and at rest. Passwords are hashed with bcrypt and never stored in plain text. Every account is strictly isolated: tenant data separation is enforced at the application layer on every request, and database credentials are never exposed to client devices.