Dr. Rosie DVM

Privacy Policy

Last updated: March 2026

Your privacy matters to us. This policy explains what information we collect, why we collect it, how we use it, and your rights regarding your data when you use DrRosieDVM.com and its associated services.

Information We Collect

We collect information in the following ways:

Information You Provide

Account information: When you create an account, we collect your name, email address, and authentication credentials through our identity provider, Clerk.
Profile data: Optional information you choose to share, such as pet species, breed, and areas of interest, to personalize your experience.
Payment information: When you subscribe to premium content, payment details are processed securely by Stripe. We do not store your full credit card number on our servers.
Communications: Messages you send through our contact form, AI chat assistant, or email correspondence.

Information Collected Automatically

Usage data: Pages visited, content viewed, search queries, and interaction patterns to improve our platform.
Device information: Browser type, operating system, screen resolution, and device identifiers.
Network data: IP address, approximate geographic location (country and region level), and referring URLs.

How We Use Your Information

We use your information to:

Provide, maintain, and improve our educational platform and services
Personalize your content recommendations based on your interests and pet profiles
Process payments and manage subscriptions
Power the Dr. Rosie AI assistant with relevant context for your questions
Send important account notifications and, with your consent, educational newsletters
Analyze aggregate usage patterns to improve content quality and site performance
Detect and prevent fraud, abuse, or security threats
Comply with legal obligations

Cookies and Tracking Technologies

We use cookies and similar technologies, grouped into the categories below. Analytics and advertising cookies are off by default and load only after you consent through our cookie banner. Full details are in our Cookie Policy.

Essential cookies: Required for authentication, session management, security, and remembering your theme and language. These cannot be disabled.
Analytics cookies (consent required): First-party, privacy-hardened product analytics — PostHog (with autocapture and session recording disabled), Vercel Analytics, and Cloudflare Web Analytics — so we can understand usage and improve the site. Off until you allow them.
Advertising cookies (consent required): On our public marketing pages only, and only after you consent, we use Google Tag Manager, the Meta (Facebook) Pixel, and Google Ads to measure and improve our advertising. These never load on authenticated clinic, portal, or app pages.
Operational event logging: Some authenticated product workflows, including billing and team-management actions, are logged on our servers so we can process subscriptions, investigate failures, prevent abuse, and improve reliability. These are first-party service logs, not advertising trackers.

We do not sell your personal information for money. Because advertising cookies may be considered a "sale" or "sharing" under some U.S. state privacy laws, we keep them off until you opt in and honor the Global Privacy Control signal. You can change or withdraw consent anytime via "Your Privacy Choices" in the footer.

Third-Party Services

We partner with trusted third-party services to operate our platform. Each has their own privacy policy governing how they handle your data:

Clerk — Authentication and user management. Handles login credentials, session tokens, and identity verification.
Stripe — Payment processing for premium subscriptions. Stripe is PCI DSS Level 1 certified, the highest level of security certification.
Cloudflare — Hosting, content delivery, DDoS protection, and privacy-first web analytics. Cloudflare processes traffic data to serve and protect our site.
Facebook Login (Meta) — Optional social sign-in. If you choose to log in with Facebook, we receive your name, email, and profile picture. You can revoke access and request deletion of your Facebook data at any time via our Facebook Data Deletion page.
YouTube— Video hosting for our free educational content. Embedded YouTube videos may set cookies when played. YouTube is governed by Google's privacy policy.
PostHog — Privacy-hardened product analytics (autocapture and session recording disabled). Loads only with your analytics consent.
Google (Tag Manager & Google Ads) — Advertising measurement and conversion tracking on our public marketing pages, using Google Consent Mode v2. Loads only with your advertising consent.
Meta (Facebook Pixel) — Advertising measurement on our public marketing pages. Loads only with your advertising consent. This is separate from the optional Facebook Login above.
Vercel — Application hosting and privacy-friendly traffic analytics.

We only share the minimum information necessary for each service to function. A complete, current list of our data processors is on our Subprocessors page. We do not sell your personal information for money.

Data Retention

We retain your data according to the following guidelines:

Account data: Retained as long as your account is active. You may request deletion at any time.
Payment records: Retained for seven years as required by tax and financial regulations.
Usage analytics: Aggregated and anonymized usage data may be retained indefinitely. Identifiable operational event logs used for billing, team-management, and reliability monitoring are retained for up to 12 months unless a longer retention period is required to investigate fraud, abuse, or payment disputes.
AI chat history: Conversation logs are retained for up to 30 days to improve the assistant, then permanently deleted.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data, subject to legal retention requirements.
Portability: Request your data in a structured, machine-readable format.
Objection: Object to processing of your data for specific purposes.
Withdrawal of consent: Withdraw consent for optional data processing at any time.
Opt out of "sale" or "sharing": Under California (CCPA/CPRA) and similar U.S. state laws, you may opt out of the use of advertising cookies. Use "Your Privacy Choices" in the footer, or send a Global Privacy Control signal, which we honor automatically.
Non-discrimination: We will not deny you service, charge a different price, or provide a lesser experience for exercising any of these rights.

For EU/EEA and UK residents (GDPR/UK GDPR), we process personal data on the legal bases of consent, contract, legal obligation, and legitimate interests, and you have the right to lodge a complaint with your local data-protection supervisory authority. For Brazilian residents, the LGPD affords equivalent rights. To exercise any right, contact us at hello@drrosiedvm.com. We will verify and respond within the time required by applicable law (generally 30 days, or 45 days under the CCPA).

Contact Us

If you have questions or concerns about this privacy policy or our data practices, please reach out:

Email: hello@drrosiedvm.com

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top and, for material changes, notify you via email or a prominent notice on our site.