Legal
Privacy Policy
This Privacy Policy explains how Perroo (a product of Solutoids) collects, uses, stores, and protects your personal information when you use our platform, website, or any services. Please read this carefully before using Perroo.
1. Introduction
Perroo is a pet care ecosystem platform that connects pet parents, veterinarians, groomers, trainers, boarding facilities, and other pet service providers. We are committed to protecting your privacy and handling your personal data transparently and responsibly.
This policy applies to all users of Perroo — including pet parents using the Perroo mobile or web application, and providers using the Perroo Partner Platform at partners.perroo.com.
By accessing or using any Perroo service, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.
2. Who We Are
Perroo is a product of Solutoids, the legal entity responsible for data processing under this policy. When this policy refers to "Perroo", "we", "us", or "our", it refers to Solutoids and its Perroo platform.
We act as a Data Controller for personal data collected directly through our platform, and as a Data Processor for personal data that provider businesses collect and process through our tools.
3. Data We Collect
3.1 Data you provide directly
- Account registration: name, email address, phone number, password
- Profile information: profile photo, location (city/region), pet details (name, breed, age, medical history)
- Provider information: business name, GST/tax number, operating hours, service descriptions, bank or payment details
- Communications: messages sent via in-app chat, contact form submissions, support requests
- Payment information: processed securely through third-party payment gateways; we do not store full card numbers
3.2 Data collected automatically
- Device and browser: IP address, browser type and version, operating system, device identifiers
- Usage data: pages visited, features used, session duration, click patterns
- Location data: approximate location derived from IP address; precise location only with explicit consent
- Cookies and tracking technologies: session cookies, analytics cookies, preference cookies (see Section 10)
- Log data: server logs including timestamps, error reports, and performance data
3.3 Data from third parties
- Social login providers (Google, Apple) if you choose to sign in via those services
- Payment processors (e.g., Razorpay, Stripe) for transaction verification
- Analytics providers (e.g., Google Analytics) for aggregated usage insights
3.4 Sensitive data
We may collect health-related information about your pets (medical records, vaccination history, allergies) as part of the care features. This is treated with heightened care and used only to provide and improve pet care services. We do not collect human health or biometric data.
4. How We Use Your Data
- To create and manage your account and provide access to Perroo services
- To facilitate appointments, bookings, and transactions between pet parents and providers
- To process payments and generate invoices
- To send transactional communications: booking confirmations, reminders, receipts
- To send service-related notifications, updates, and alerts
- To provide customer support and respond to enquiries
- To personalise your experience and show relevant providers or services
- To generate analytics and improve platform performance, features, and safety
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations under applicable law
- To send marketing communications (only with your consent; opt-out available at any time)
5. Legal Bases for Processing
We process your personal data on the following legal bases, depending on the applicable jurisdiction:
5.1 Contract performance
Processing necessary to provide the services you have requested — e.g., creating an account, processing a booking, or generating an invoice.
5.2 Legitimate interests
Processing for our legitimate business interests, such as improving the platform, preventing fraud, and ensuring security — where these interests are not overridden by your rights.
5.3 Consent
For optional processing such as marketing emails, personalised advertising, or precise location tracking. You may withdraw consent at any time without affecting prior processing.
5.4 Legal obligation
Processing required to comply with applicable laws — including Indian IT Act, DPDP Act 2023, tax regulations, and court orders.
7. Data Retention
We retain your personal data for as long as necessary to provide our services and fulfil the purposes described in this policy, subject to the following:
- Active accounts: data retained for the duration of your account
- Deleted accounts: most personal data deleted or anonymised within 30 days of account deletion request
- Transaction and billing records: retained for 7 years as required by Indian accounting and tax law (Companies Act, GST regulations)
- Legal hold: data may be retained longer where required by law or ongoing legal proceedings
- Anonymised analytics data: retained indefinitely in non-identifiable form
8. Security
We implement industry-standard technical and organisational measures to protect your personal data, including:
- Data encryption in transit (TLS/HTTPS) and at rest
- Role-based access controls — only authorised personnel can access personal data
- Regular security audits and vulnerability assessments
- Secure password hashing (bcrypt)
- Multi-factor authentication available for provider accounts
- Incident response procedures for data breaches
No system is completely secure. In the event of a data breach that affects your rights or freedoms, we will notify you and relevant authorities as required by law (within 72 hours under GDPR; as required under DPDP Act 2023 rules).
9. Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
9.1 Universal rights (all users)
- Right to access: request a copy of the personal data we hold about you
- Right to correction: request correction of inaccurate or incomplete data
- Right to deletion: request deletion of your personal data (subject to legal retention requirements)
- Right to withdraw consent: withdraw consent for consent-based processing at any time
- Right to lodge a complaint: with the applicable data protection authority
9.2 GDPR rights (EU/EEA residents)
- Right to data portability: receive your data in a structured, machine-readable format
- Right to restriction: request we restrict processing in certain circumstances
- Right to object: object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making and profiling
9.3 CCPA rights (California residents)
- Right to know what personal information we collect and how it is used
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell data)
- Right to non-discrimination for exercising your rights
To exercise any of these rights, contact us at privacy@perroo.co. We will respond within 30 days (or as required by applicable law).
11. Children's Privacy
Perroo services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@perroo.co and we will promptly delete such data.
Under the Indian Digital Personal Data Protection Act 2023, we do not process personal data of children without verifiable parental consent.
12. Cross-Border Data Transfers
Perroo primarily processes data in India. Some of our third-party service providers may process data in other countries, including the United States and within the European Union.
Where data is transferred outside India or the EEA, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Data processing agreements with processors
- Compliance with DPDP Act 2023 cross-border transfer provisions once notified
13. India-Specific Rights (DPDP Act 2023)
In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India, you have the following rights as a Data Principal:
- Right to access information about personal data being processed
- Right to correction and erasure of personal data
- Right to grievance redressal through our Grievance Officer (see Section 14)
- Right to nominate another individual to exercise your rights in case of death or incapacity
- Right to withdraw consent at any time (processing will cease except where permitted by law)
We also comply with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
As required under SPDI Rules, we have implemented a comprehensive information security programme and designate the below contact as the point of escalation for privacy concerns.
14. Grievance Officer
In accordance with the Information Technology Act 2000 and DPDP Act 2023, we have appointed a Grievance Officer to address privacy-related complaints:
Grievance Officer — Perroo (Solutoids)
Email: grievance@perroo.co
Postal: Solutoids, India
Response time: within 30 days of receipt of complaint
If you are not satisfied with our response, you may approach the Data Protection Board of India (once constituted under DPDP Act 2023) or your local data protection authority.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify registered users via email or in-app notification
- Display a prominent notice on our website for significant changes
Your continued use of Perroo after changes take effect constitutes acceptance of the revised policy. We encourage you to review this page periodically.
16. Contact Us
For any privacy-related questions, requests, or concerns: