Privacy Policy

Account details (name, e-mail, phone, language and credentials); pet profiles, including health, medication and behavioural information; searches; quote requests; messages; consent records; and security telemetry. After a quote is accepted we also process what the booking needs so the two parties can contact each other.

To create and protect accounts, find compatible providers, check availability, transmit and manage quote requests, enable communication between the parties, prevent fraud and abuse, provide support, meet legal duties, and improve the service using minimised telemetry.
The lawful bases are to be confirmed per jurisdiction: performance of a contract or pre-contractual steps, legitimate interest in security and quality, consent where it is required, and compliance with a legal obligation. Marketing is optional and separate from the consents required to use the service.

Only what is necessary, and only: the provider you chose; contracted suppliers (hosting, database, e-mail, storage, observability, geocoding and anti-bot protection); and authorities where the law requires it.
The host’s exact address and private contact details are released to you only after acceptance. The platform may involve a Brazil→European Union transfer and international suppliers; the transfer mechanism, countries and subprocessors will be listed in the approved version.

• Pseudonymised search events: 90 days.
• Chat messages: 12 months after the conversation becomes read-only.
• Identifiable data and quote snapshots: 36 months after closure, then anonymised.

Deleting your account immediately removes your pets and sessions and purges chat and quote identifiers, unless a mandatory legal retention applies.

You may request access, correction, portability, deletion, objection or restriction, and you may withdraw consent. Account settings already let you export your data and delete your account; for anything else, the dedicated privacy contact is part of the pending legal review below.

Authentication and security cookies are strictly necessary and are always set. The marketplace currently sets no non-essential cookies; if analytics or marketing that is not strictly necessary is ever added, granular consent has to be in place before the first collection, not after.

• The identity and address of the controlling entity, the privacy/DPO contact and the data-subject channel.
• Governing law, forum, dispute mechanism and minimum age.
• Whether StayWise and hosts are controllers, processors or joint controllers.
• Final lawful bases, the handling of animal clinical data and consent evidence.
• The Brazil↔EU transfer safeguard, the subprocessor list and the countries involved.