Privacy Policy
1. Introduction
DivotData ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our horse management application.
DivotData is the data controller responsible for your personal information.
2. Information We Collect
Account Information
- Email address
- Authentication data handled securely by our authentication provider (Supabase). Passwords are never visible to us and are securely hashed by the provider.
- Organization name and related details
Horse Data
Information you choose to store about horses, which may include:
- Horse profiles (name, breed, date of birth, gender, color, registration numbers)
- Pedigree information (sire, dam, lineage)
- Veterinary and medical records (vaccines, dewormers, dental records, treatments, medications)
- Training logs and activity records
- Competition and performance history
- Photos and documents
Note: Veterinary and medical records relate to animals and are stored solely for organizational and record-keeping purposes. DivotData is not a veterinary provider and does not provide medical advice.
Organization Data
- Team member information and roles
- Calendar events and scheduling data
- Breeding records and foal information
- Season and scheduling preferences
- Discipline-specific data (e.g., Polo, English, Racing, Western, Young Horse Starting, Breeding)
Automatically Collected Information
When you use the application, we may automatically collect:
- Browser type and version
- Device information
- IP address
- Usage patterns and access times
We may use privacy-friendly analytics tools to understand how the application is used and to improve performance and reliability.
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain the DivotData service
- Create and manage your account and organization
- Store and organize your horse management data
- Enable collaboration with team members you invite
- Send service-related communications
- Improve and optimize our application
- Ensure security and prevent fraud
- Comply with legal obligations
4. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on:
- Performance of a contract - to provide the services you request
- Legitimate interests - to improve, secure, and operate our services
- Consent - where you have given consent for optional communications or features
5. Data Storage and Security
Storage
Your data is stored using trusted service providers:
- Supabase - Database and authentication services hosted on secure cloud infrastructure
- Vercel - Application hosting and file storage
Security Measures
We use reasonable technical and organizational safeguards, including:
- Encryption of data in transit using SSL/TLS
- Secure authentication handled by Supabase
- Row-level security policies to isolate organization data
- Ongoing security updates and monitoring
No system is completely secure, but we work to protect your information using industry best practices.
6. Data Sharing and Disclosure
We do not sell your personal information.
We may share information only in the following situations:
- With your consent - such as when you invite team members to collaborate
- Service providers - companies that help us operate the service (such as Supabase and Vercel)
- Legal requirements - if required by law, regulation, court order, or legal process
- Business transfers - in connection with a merger, acquisition, or sale of assets
You are responsible for ensuring you have the right to upload and share any information entered into the application, including information about other individuals.
7. Your Rights and Choices
You have the ability to:
- Access your data within the application
- Export your data (including horses and activity records)
- Correct inaccurate information
- Delete your data using in-app tools or by contacting us
- Close your account at any time
Depending on your location, you may have additional privacy rights under applicable laws.
8. Data Retention
We retain your data for as long as your account is active.
When you delete your account:
- Personal data is scheduled for deletion from our active systems
- Backup systems may retain data for up to 30 days before permanent deletion
- Certain information may be retained longer if required by law
9. Third-Party Services
Our application relies on trusted third-party providers:
- Supabase - Authentication and database services
- Vercel - Hosting and infrastructure services
These providers process data on our behalf in accordance with their own privacy and security standards.
10. Children's Privacy
DivotData is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe such information has been collected, please contact us so we can delete it.
11. International Data Transfers
Your information may be processed and stored in countries other than your own. Where required, we take steps to ensure appropriate safeguards are in place to protect your data during international transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:
- Posting the updated policy in the application
- Updating the "Last Updated" date
- Sending email notification for significant changes when appropriate
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: info@divotdata.app