PMA Privacy Notice

Free Beta Edition — Version 1.0

Operator: Project Mad Adder Privacy contact: admin@projectmadadder.com

1. Scope and responsibility

This notice explains how Project Mad Adder (“PMA”, “we”, or “us”) handles personal information when people visit our websites, apply for access, use our animal-management service, or contact us. It applies during the free beta. PMA is responsible for its own collection and processing. Where a customer uses PMA to maintain information about other people, that customer is also responsible for having the necessary authority and providing applicable notices.

2. Information and purposes

We collect account information such as names, email addresses, authentication identifiers, and workspace membership. Users may enter animal profiles, husbandry and health records, breeding information, photographs, notes, business information, and other content. Some records may contain personal information about customers, employees, or other people. We also process information necessary for account approval, security, support, diagnostics, policy decisions, and requested exports or closure.

We use this information to provide and maintain the service, authenticate users, manage permissions, store and synchronize records, respond to requests, investigate errors and abuse, and comply with applicable legal obligations. Optional device features or integrations may process additional information when a user chooses to use them. We do not require information unrelated to the purposes for which it is collected.

3. Customer records and AI

Customers retain their rights in the content they lawfully submit. PMA does not sell private customer records or use them to train AI models by default. Any optional model-training use would require a separate, informed, affirmative choice. A requested AI feature may involve processing information necessary to produce its response. PMA must assess applicable provider terms and data-handling arrangements before enabling such processing for private customer content. Do not assume that an experimental feature is suitable for sensitive information merely because it is available.

4. Service providers and international processing

PMA uses third-party infrastructure and services, including Vercel for application hosting, Supabase for database, authentication and storage services, and Resend for transactional email where configured. These providers may process information in jurisdictions outside your country. Other providers may be involved in optional features and will be disclosed as those features are introduced. We do not promise that all information remains in Canada or that every provider has the same retention or security arrangements. We are responsible for assessing the providers we use and applying appropriate contractual and operational safeguards.

5. Security and incidents

PMA is responsible for maintaining safeguards appropriate to the sensitivity of information it processes. Access to customer records must be limited to authorized purposes and permissions. No internet-based service can guarantee absolute security. We do not claim a particular certification, independent audit, guaranteed backup, or universal encryption arrangement unless it has been verified. Suspected unauthorized access or data loss should be reported promptly to admin@projectmadadder.com. We will investigate incidents and provide notifications to affected individuals or regulators where required by applicable law.

6. Retention, export and deletion

Information is retained only as reasonably necessary for the purposes for which it was collected, operating the service, security, and applicable legal obligations. Account closure, workspace deletion, and subscription downgrade are separate processes. A plan change does not by itself authorize deletion of customer records. Users may request access, correction, export, or deletion through available account controls or by contacting us. We may need to verify identity and workspace authority before acting.

Deletion from an active system does not necessarily remove every residual copy immediately. Information may remain in backups, security records, or legally required records for applicable retention periods. PMA does not promise a specific deletion or recovery deadline until the relevant operational schedule is established and verified. We will explain applicable limitations when responding to a request.

7. Cookies and communications

PMA uses browser storage and cookies as necessary for authentication, security, sessions, preferences, and application functionality. Optional analytics or marketing technologies must be disclosed and, where required, subject to appropriate consent choices. PMA may send necessary account, security, invitation, support, and service communications. Marketing is optional and is not included in mandatory account or Terms consent. Where marketing is offered, users must be able to withdraw consent using the applicable preference or unsubscribe mechanism.

8. Children and international users

PMA is a general-audience service. Children under 13 may not register independently. Parents or guardians seeking access for a younger child should contact PMA so that applicable consent requirements can be addressed. PMA may restrict access or processing where the required safeguards are unavailable. Additional age, consent, and privacy requirements may apply in particular jurisdictions. PMA does not claim that offering the service internationally removes those requirements.

9. Your rights and contact

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, withdraw consent, object to certain processing, or complain to a privacy regulator. Some rights are subject to legal exceptions and verification requirements. Contact admin@projectmadadder.com for privacy questions or requests. We will respond in accordance with applicable law and explain any lawful limitations.

10. Changes

We may update this notice as PMA changes. Material changes will be communicated appropriately. We will not treat acceptance of earlier Terms as consent to a materially different purpose where fresh consent is required. The effective date of an updated notice will be stated when it is published.