The controller of data processed by PetWaits is ZHANG LINGQING, an individual operator in mainland China. This notice covers petwaits.com, the PetWaits desktop app and related services. Privacy contact: hello@petwaits.com.
1. Information we process
Account data: email address, account identifier and basic profile data provided through authorized Google sign-in; email/password authentication is handled by our authentication provider. Pet data: uploaded photos, pet names, generated images, animations, packages and creation history. Transaction data: order references, amounts, currency, payment/refund status and entitlement records. Support data: messages, issue references and attachments you send us. Technical data: IP/network and browser/device information, authentication sessions, request, error, security and generation logs needed to operate the service.
2. Purposes and legal bases
We process necessary data to provide accounts, create and deliver pets, maintain downloads, handle purchases and refunds, respond to support, prevent fraud and meet legal obligations. Depending on applicable law, the basis is performance of the service contract, legal obligations, consent where required, or legitimate interests in security and reliability where recognized. Optional publicity or secondary use requires separate permission. We do not use your photos or generated pets for our own model training, advertising or public examples without your explicit permission.
3. Service providers and disclosure
We do not sell your personal information. We share only data needed for the relevant service: Supabase for authentication and account/database services; Vercel for website hosting and request handling; Tencent Cloud for photo, generation and package storage and worker computing; ByteDance/Volcengine Seedream for image generation and Seedance for supported dance generation. These AI providers receive the relevant photos, generated references and instructions required for that task. Google receives sign-in requests when you choose Google login. Payment providers receive the data required for your chosen checkout, including Waffo Pancake for Waffo orders and ZPay/Alipay for that channel. Waffo processes card data; full card numbers and security codes are not stored on our servers. Providers may have their own legal obligations and privacy notices. We may also disclose necessary records when lawfully required or with your permission.
4. Cookies and local storage
We use necessary cookies and local storage for sign-in, security, preferences and core operation. Browser settings can clear or block them, but doing so may prevent login or disrupt service. We do not currently include a separate advertising tracker or third-party analytics SDK in this website's application code. Hosting, authentication and payment providers may record operational/security data under their own notices. We will update this policy and obtain consent where required before introducing optional tracking.
5. Locations and international transfers
Core pet photos and generated assets are stored in Tencent Cloud in mainland China. Website hosting, account/database, Google sign-in and payment services may process data outside mainland China, including Singapore and other locations used by those providers. Information may therefore be transferred outside your country. Where required, we will use a legally valid transfer mechanism and provide the required information or obtain consent. Contact us for information about the safeguards applicable to your data.
6. Retention and deletion
There is currently no automatic expiration period for active account records, pet photos, generated pets or generation evidence: they are retained while the cloud pet/account remains active for delivery, recovery and troubleshooting. This includes provider request/response records and diagnostic assets. You may request deletion by email; after identity checks, we remove the pet content under our control, subject to applicable legal and technical requirements. Minimal transaction, reconciliation, security or dispute records may need to remain as long as required for those purposes. Provider-controlled records and backups may follow separate retention schedules. Local copies you downloaded remain on your own device until you delete them.
7. Security
We use HTTPS, authenticated access, access controls and private cloud storage for user assets. No system can eliminate all risk. If a personal-data incident occurs, we will investigate, take remedial steps and notify affected people and authorities as required by applicable law. Keep your login credentials and local pet files secure.
8. Your rights and requests
Depending on applicable law, you may request access, correction, a copy, deletion, restriction, portability or objection to processing, and withdraw consent for consent-based processing. Email us from your account email, describe the request and provide only information needed to verify ownership; do not send passwords or full card details. We will respond within applicable legal deadlines. Withdrawal does not affect earlier lawful processing, and deletion of required data may prevent continued delivery. You may complain to your local data-protection authority. We do not currently send promotional email campaigns; necessary account, delivery and security messages are separate from marketing.
9. Children and updates
The service is not directed to children under 14; purchasing requires an adult as stated in our terms. If you believe a child has provided data without required authorization, contact us for review and deletion. Material changes to this policy will be announced on the website or by email before taking effect; new consent will be requested where required.
10. Contact and provider policies
Privacy, deletion, support and abuse reports: hello@petwaits.com
Terms of service · Get support
Supabase · Vercel · Tencent Cloud · Volcengine · Google
