Paw Re-Fur Privacy Policy
1. Who we are
Paw Re-Fur (“we”) is a free pet-item exchange and lost-pet platform for Singapore. Contact and Data Protection Officer: Paw Re-Fur site owner, hello@pawre-fur.com.
2. What we collect
- Your email address, to sign in and to enable contact between matched users.
- Content you choose to post: listings, photos, Pawtrol reports, Paw Talk posts, and reports you file.
- Messages you send to another user about a Pawgift listing. In the app, only the two people in that conversation can read them.
- Your display name, which is shown publicly next to your listings, messages and reports. You can change it on your account page.
- General location: neighbourhood only. We do not ask for your address.
- Records of your agreement to this Privacy Policy and our Terms of Use: which version you agreed to, and when.
- Technical data: our hosting and database providers (Vercel and Supabase) keep server logs. We don’t use analytics, advertising or tracking tools.
Please don’t put home addresses or other people’s personal details in free-text fields.
3. Why we use it
- Account login (a one-time email link).
- Letting users message each other about a listing.
- Letting two users contact each other after both confirm an exchange.
- Operating and moderating the platform, including handling reports, keeping it safe and preventing misuse.
- Responding to your requests.
We do not sell your data. The automatic emails the site sends are your one-time sign-in links and email-confirmation messages, which our authentication provider sends on our behalf, and, when someone submits a report, an email to our moderation inbox containing the report details and the reporter’s display name. We may also email you directly to reply to you or about your listings, posts or account. We won’t send marketing emails without your separate consent.
4. Consent
We collect, use and disclose your data with your consent under Singapore’s Personal Data Protection Act 2012 (PDPA). You can withdraw consent at any time (see section 9); this may mean we can’t provide the service to you.
5. Who we share it with
- The other user in a confirmed exchange, only after both of you confirm. They will see your email address, and once someone has seen it we can’t erase their knowledge of it.
- Moderators of the site, who may use your email address only to contact you about your listings, posts or account (for example, a notice that a listing was removed).
- Service providers that process data on our behalf: Supabase (database, file storage and sign-in), Vercel (hosting) and Resend (sending emails). Resend keeps a log of recipient email addresses and message status.
- Authorities or others where required by law.
6. Overseas transfers
Our database and file storage are hosted by Supabase in Sydney, Australia. Our website’s server functions run in Sydney, Australia (syd1). Pages and images may be delivered through Vercel’s global network. We send emails through Resend, a US-based provider, using its Tokyo, Japan region. If your data is stored or processed outside Singapore, we take steps to make sure our providers protect it to a standard comparable to the PDPA.
7. How long we keep it
- Account email: while your account is active, then deleted within 30 days of a verified deletion request.
- Accounts that sign up but never accept the Privacy Policy and Terms are deleted after 30 days.
- Inactive accounts: not deleted automatically. We keep them until you ask us to delete them.
- Shared exchange access: removed when the exchange is completed or cancelled.
- Listings: removed when you delete them or close your account. Sightings and posts: removed when your account is closed or a moderator removes them.
- Backups: we keep no backups of your data.
8. How we protect it
We use secure (HTTPS) connections and one-time email sign-in links instead of passwords. No system is perfectly secure. If a data breach that is likely to cause significant harm occurs, we will notify affected users and the Personal Data Protection Commission as required by law.
9. Your rights
Email hello@pawre-fur.com to access your personal data, correct it, withdraw consent, or delete your account. We aim to respond to access requests within 30 days.
10. Children
You must be 18 or older to use Paw Re-Fur; this is a condition of use. We don’t knowingly collect personal data from anyone under 18. If you think someone under 18 has an account, email hello@pawre-fur.com and we’ll delete it.
11. Cookies
We use essential sign-in cookies only.
- A session cookie that keeps you signed in. It is removed when you sign out or close your browser.
- A temporary cookie used to complete your one-time sign-in link, which is removed when you finish signing in.
We don’t use analytics, advertising or tracking cookies, and we don’t load third-party scripts, so there is no cookie banner. Nothing is set on your device unless you sign in or ask for a sign-in link.
12. Changes
We’ll update this page and its version and date when this policy changes. When the version changes, we ask everyone signed in to accept the new version before they continue, and we ask for fresh consent where the law requires it.