At Fetch, we take privacy seriously and are committed to protecting the
confidentiality of your personal information. This Privacy Policy outlines the
collection, use, disclosure, retention, and protection of personal information
collected or used by us or any of our affiliates. It also explains how you can
exercise your privacy rights.

We understand that trust is a cornerstone of our relationship with you and we
will always strive to protect your personal information in accordance with
applicable laws and regulations.

What Data We Collect

The types of personal data that we collect may include contact information
(such as name, email address), financial records (such as credit card
numbers), biometric information (such as facial recognition data), IP
addresses, online activity (such as browsing history).

We may collect this data when you interact with us in various ways such as
when creating an account on our website, making a purchase online or in-store,
subscribing to our services or participating in a survey.

If you connect third-party services, (ex. Zoom, Google Calendar, Google Contacts, Stripe,
Google Meet), Fetch will store OAuth tokens securely and only use them to
facilitate scheduled meetings. Meeting details, such as meeting ID and join
URL, may be stored for scheduling purposes. Users can revoke access at any
time, which will delete all stored data.

Fetch is not directed to children under the age of 16. We do not knowingly
collect personal data from children under 16. If we become aware that such
data has been collected, it will be deleted immediately.

How We Use Your Data

We will only use your data for the purpose it was collected for. For example:
If you provide us with contact information such as name and email address
during registration on our website – we will use this information to
communicate with you about products or services that are relevant to your
interests or needs. We may also use this data to send promotional offers that
may be of interest to you.

We may also aggregate or de-identify personal data so that it does not
identify you directly anymore (i.e., anonymize it). Such aggregated or
de-identified data is considered non-personal data and therefore fall outside
this Privacy Policy and is treated differently from personal data.
Non-personal data can be used for any purpose without restriction from
applicable laws.

How Long Do We Retain Your Personal Data?

We retain your personal information only for so long as necessary to fulfill
the purposes outlined in this policy unless otherwise required by law or
regulation. When we no longer need your personal information for these
purposes, we will delete it securely or anonymize it so that it cannot be
linked back to you personally.

Who Has Access To My Personal Data?

We will never share your personal data with third parties without your consent
except where necessary to fulfill the purposes outlined in this policy such as
service providers who help us deliver our services to you efficiently and
securely; public authorities where required by law; credit checking agencies;
fraud prevention agencies; debt recovery agencies; analytics providers who
help us analyze usage of our services so that we can understand how users
interact with them; marketing partners where necessary for them to send
promotional offers based on legitimate interests; research organizations
conducting research on behalf of Fetch; law enforcement agencies where
necessary for compliance with legal obligations, detecting crime, protecting
against harm & enforcing our rights/property etc..

When sharing your personal data with third parties we always ensure that all
appropriate technical/organizational measures are implemented in order for
them to process / store / transfer your personal info safely & securely
keeping it protected against unauthorized access or accidental
loss/disclosure/alteration etc..

Fetch enforces industry-standard security measures, including TLS 1.2/1.3
encryption for data in transit. Sensitive data, including OAuth tokens and
stored personal data, is encrypted at rest. We regularly monitor and assess
security vulnerabilities to ensure the safety of user data.

Fetch does not sell personal information to third parties.

Google Integrations

Fetch offers optional integrations with Google services, including Google Calendar and Google Contacts. These integrations are entirely optional and are only enabled when you choose to connect your Google account.

When you authorize a Google integration, Fetch requests only the permissions necessary for the specific feature you choose to use. For example, connecting Google Calendar requests calendar permissions, while connecting Google Contacts requests permission to create and update contacts within your Google account.

Google OAuth access and refresh tokens are encrypted at rest and stored securely. They are used only to authenticate requests to Google APIs on your behalf.

If you disconnect your Google account, Fetch revokes or deletes stored Google OAuth credentials and can no longer access your Google data unless you reconnect the integration.

Fetch does not use Google user data obtained through Google APIs to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. Google user data is never transmitted to, processed by, or shared with any third-party artificial intelligence or machine learning service for any purpose.

Artificial Intelligence Features

Fetch offers optional AI-assisted features, such as our conversational intake forms. These features are powered by third-party AI service providers: Anthropic (language model, via the Claude API) and OpenAI (speech-to-text and text-to-speech, via the OpenAI API). These features process only the information you submit directly through them — such as typed form responses and voice recordings.

We access these providers through their commercial APIs, under terms that prohibit the use of our data to train or improve their models. We do not opt in to any data-sharing or model-training programs.

Data received from Google APIs is never sent to, processed by, or shared with these or any other AI or machine learning services, and is never used to create, train, or improve any AI or machine learning model.

Google Contacts Sync

If you enable Google Contacts Sync, Fetch may read, create, and update contacts within the dedicated “Fetch Clients” contact group it creates in your Google account. The information synchronized may include:

• Client name
• Phone number
• Email address
• Mailing address
• Animal names and breeds (stored in the contact notes)

Fetch creates a dedicated contact group named “Fetch Clients” within your Google Contacts and only manages contacts that it creates within that group. Fetch does not intentionally modify or manage your existing personal contacts outside of the Fetch Clients group.

Google Contacts are synchronized solely to provide the functionality you request, including making client information easily available from your mobile device, Gmail, or other applications that use your Google Contacts.

Fetch does not automatically delete contacts from your Google account. If a client is archived or removed within Fetch, the corresponding Google Contact simply stops receiving updates unless you manually delete it.

You may disable Google Contacts Sync or disconnect your Google account at any time from the Integrations section within your Fetch account.

Google Calendar Sync

If you enable Google Calendar Sync, Fetch may read and write calendar events to the Google Calendars you designate in order to synchronize appointments, maintain scheduling availability, and prevent scheduling conflicts.

You control which Google Calendars Fetch may use, and you may disable Calendar Sync or disconnect your Google account at any time.

Use of Google User Data

Google user data obtained through Google APIs is used solely to provide and maintain the Google integration features you explicitly enable, such as synchronizing Google Contacts and Google Calendar events. Google user data is never used for advertising, marketing, user profiling, or any unrelated purpose. Fetch does not sell Google user data, and it is not shared with advertisers, data brokers, or marketing partners. It is only transmitted between Fetch and Google’s services as necessary to provide the synchronization features you request or as required by law.

Fetch’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements.

Zoom Deauthorization

When you disconnect Fetch from Zoom, all stored Zoom OAuth tokens and Zoom
meeting metadata (meeting UUID, meeting ID, join URL, start URL, password,
host user ID) are permanently deleted from our systems.

How Can I Exercise My Rights?

You have certain rights related to the processing of your personal information
which include: Right of access – You have the right to find out what type of
data is being processed about yourself and request copies at any time; Right
of rectification – You have the right to update any inaccuracies concerning
your info if needed; Right To Erasure – You have the right request deletion at
anytime if requested subject to some exceptions prescribed by law i.e., legal
requirement etc.; Right To Restrict Processing – You have the right restrict
processing activities carried out by Fetch over certain aspects regarding how
we use & process the info provided by yourself ; Right To Object – You
have the right object certain processing activities carried out by Fetch
overriding certain legitimate interests pursued by us ; Right To Data
Portability – You have the right request certain portions/types from one
platform into another (i .e . , transferring info from one service provider
into another); Complaint Handling – You have a right make complaints against
Fetch regarding breaches & violations against applicable laws regarding
processing activities carried out over stored info provided by yourself.

All requests must be made in writing via email sent directly at
[email protected] including all relevant details pertaining the nature
& scope behind each query made accordingly.

Users in the EU may exercise their data subject rights as described in this
policy, including access, correction, deletion, restriction, objection, and
data portability, by contacting [email protected].

Changes To This Policy

We reserve the right to modify terms listed within this document whenever
needed. Changes are made publicly available through updates posted onto
www.playfetch.io/privacy