Draft. This is a starter privacy policy written to match Fetch's actual data practices. Have an attorney review before relying on this as final.
1. Who runs Fetch
Fetch is operated by The Good Boy Foundation, a 501(c)(3) nonprofit based in California. When this policy says "we," "us," or "Fetch," we mean The Good Boy Foundation acting through the platform.
2. What we collect
We collect information you provide to us, including:
- Account info: your email address, a password (which we never see in plain text), and the name you choose to display.
- Driver profile: phone, home base, vehicle and crate details, the counties you'll drive in, your weekly availability, a bio, and an optional profile photo.
- Organization info (for rescues and shelters): your org's name, EIN, contact info, website, social handles, year founded, and a description.
- Transport info: pickup and drop-off locations and contacts, dates and time windows, dog details (name, animal control ID, size, age, photos), urgency, backup plan, and notes.
- Activity: which transports you sign up for, release, or complete; status updates you post; paperwork photos you upload; ratings you give or receive.
- Technical: standard server logs (IP address, browser, page accessed) from our hosting providers. We don't run third-party advertising or analytics trackers.
3. How we use it
We use this information to:
- Operate the platform — let you sign in, post transports, claim transports, communicate during a transport
- Send transactional emails (someone claimed your transport, status update on your transport, etc.)
- Show your profile information to other users you interact with (driver profile to the rescue you're driving for; rescue contact info to the driver you've claimed for, when the rescue has toggled on sharing)
- Build a reputation system (ratings, completion history) that helps users decide who to work with
- Verify organizations and respond to misuse
4. Who can see what
Most of Fetch is private to the people involved in a transport. Specifically:
- Public to anyone: the marketing landing page, the list of open transports (without contact info), org names and verification status, completed driver ratings (stars + thank-you notes).
- Visible to authenticated users: driver profiles (so a rescue can see who they're working with).
- Visible to org members + the signed-up driver only: transport contact information (when the org has toggled sharing on), paperwork photos, day-of status updates.
- Visible to the org owner / admins only: their org's member list, the driver's phone number (when the driver has toggled sharing on).
5. Who we share with
We use a small set of service providers to run Fetch. They access your information only to provide their service to us. Each has its own privacy policy.
- Supabase (database, authentication, file storage)
- Netlify (web hosting)
- Resend (transactional email)
- Givebutter (donation processing — only if you choose to donate)
We do not sell your personal information. We do not share your information with advertisers. We do not allow third parties to track you across other websites.
We may disclose information if we are legally required to (for example, in response to a valid court order), if necessary to protect the safety of users or animals, or to investigate suspected violations of our Terms of Service.
6. Photos and uploaded content
When you upload a photo (profile picture, dog photo, paperwork, status update), it lives in Supabase Storage. The URL is long and unguessable, but the underlying bucket is publicly readable, meaning anyone who has the URL can view the file. Don't upload anything you wouldn't want a stranger to see if they obtained the link.
Paperwork uploads are restricted in the UI to org members and the signed-up driver of the relevant transport — but the file URL itself, if shared outside the platform, would be viewable.
7. Cookies and storage
Fetch uses your browser's local storage to keep you signed in between visits. We don't use third-party cookies for advertising or cross-site tracking.
8. Your choices
- Edit or delete your data: update your profile anytime from the Profile page. To delete your account entirely, email us at info@goodboyfoundation.org.
- Control who sees your phone: the "OK to share my phone" toggle on your profile.
- Unsubscribe from notifications: contact us. Most emails are transactional and tied to actions you took (someone claimed your transport), so opting out may limit how the platform works for you.
9. California residents (CCPA)
If you are a California resident, you have the right to know what personal information we hold about you, to request deletion, and to opt out of any "sale" of personal information (we do not sell personal information). To exercise these rights, email info@goodboyfoundation.org.
10. Children
Fetch is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has signed up, contact us and we will remove the account.
11. Data retention
We keep your account and transport history while your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we need to keep records to comply with legal obligations or resolve disputes.
12. Changes to this policy
We may update this policy from time to time. The Effective date at the top will reflect the most recent change. For meaningful changes, we will notify existing users by email.
13. Contact
Questions or requests about your privacy can be sent to info@goodboyfoundation.org.