Privacy Policy

Privacy Policy

Last updated: October 2026

BreederPro LLC ("BreederPro", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the BreederPro application and related services ("Service").

1. Information We Collect

Information you provide directly:

  • Account information: Name, email address, and profile photo. If you sign in with Google, we receive your name, email, and profile picture from your Google account. Authentication is managed by Auth0.
  • Animal and breeding data: Animal records, pedigree information, mating and litter records, weight logs, health clearances, genotype data, and custom fields
  • Files and photos: Images and documents you upload
  • Billing information: Subscription plan selection and payment details (processed by Stripe; we do not store credit card numbers)
  • Calendar and event data: Scheduled events, reminders, and calendar feed subscriptions

Information collected automatically:

  • Error and performance data: When an error occurs, Sentry captures diagnostic information including the error itself, browser type, and a session replay of your interactions around the time of the error (clicks, navigation, and network requests). No passwords or payment data are captured. Session replays are retained for 30 days.
  • Server logs: Standard web server logs including IP address, request path, and timestamp. These logs are used for security monitoring and are retained for 30 days.

2. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Contract: Processing necessary to provide the Service you signed up for (account data, animal records, billing)
  • Legitimate interest: Error monitoring and security logging to maintain and improve the Service
  • Consent: Where applicable, such as optional communications

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service, including breeding program management features
  • Process subscription payments and manage your account
  • Generate calendar feeds and reminders you configure
  • Send transactional communications (login codes, account changes, billing events)
  • Diagnose errors and improve the Service
  • Enforce our Terms of Service and protect against abuse

We do not sell your personal information. We do not use your data for advertising or profiling. We do not share your data with third parties except as described in this policy.

4. Third-Party Processors

We use the following third-party services to operate the Service:

  • Auth0 (Okta): Authentication and identity management. Processes your email address and login activity. Data processed in the United States.
  • Stripe: Payment processing and subscription billing. Processes payment method details. Subject to Stripe's privacy policy.
  • Amazon Web Services (AWS): Cloud hosting, database, file storage, and content delivery. All data is stored in AWS US-East-2 (Ohio).
  • Sentry: Error tracking and performance monitoring, operated by Functional Software, Inc. Data processed in the United States.
  • PostHog: Product analytics and session replay, used only with your consent to understand how the Service is used and improve it. Data processed in the United States.
  • Resend: Transactional email delivery (login codes, account notifications). Processes your email address.
  • Cloudflare / CloudFront: Content delivery and DDoS protection.

Each processor handles data on our behalf under appropriate data processing agreements and is subject to their own privacy policies.

5. Data Storage and International Transfers

Your data is stored and processed in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place with our processors for international data transfers.

6. Data Retention

  • Active accounts: Your data is retained for as long as your account is active.
  • Deleted records: When you delete individual records within the application, they are soft-deleted and retained for 30 days to allow recovery, then permanently purged.
  • Account deletion: When you delete your account, all associated data (database records, uploaded files, and Stripe customer records) is permanently deleted in a single transaction. This action is irreversible.
  • Server logs: Retained for 30 days, then automatically deleted.
  • Error replays: Retained by Sentry for 30 days.

7. Your Rights

Under GDPR, CCPA, and other applicable data protection laws, you have the following rights:

  • Access: View all data associated with your account directly in the application.
  • Portability / Export: Download a complete copy of your data via Settings > Data & Privacy. Exports are available in JSON and CSV formats.
  • Deletion: Permanently delete your account and all associated data via Settings > Data & Privacy.
  • Rectification: Update or correct your information at any time through the application.
  • Restriction: Request that we limit processing of your data by contacting us.
  • Objection: Object to processing based on legitimate interests by contacting us.
  • Withdraw consent: Where processing is based on consent, withdraw at any time.

To exercise rights not available through the application interface, contact admin@breederpro.com. We will respond within 30 days.

8. Data Security

We protect your data through:

  • Encryption in transit (TLS/HTTPS) and at rest (AES-256)
  • Web Application Firewall (WAF) with rate limiting and bot detection
  • Database access restricted to application services within a private network
  • Application secrets stored in AWS Secrets Manager, never in code
  • Passwordless authentication (no passwords stored)
  • Regular dependency updates and vulnerability monitoring

No system is completely secure. If we become aware of a data breach affecting your personal information, we will notify you and any applicable regulatory authorities as required by law.

9. Cookies and Tracking

We use essential cookies required for authentication and session management. We do not use advertising cookies or marketing pixels.

With your consent, we also use privacy-friendly product analytics (PostHog) to understand how the Service is used and improve it. This includes anonymous usage events and, where enabled, session replay. We ask for your consent via a banner on your first visit, and you can decline at any time without affecting your use of the Service. We do not sell your data or use it for advertising.

10. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within the application or by email at least 30 days before changes take effect. Continued use of the Service after changes constitutes acceptance. Previous versions of this policy are available upon request.

13. Contact

For questions about this Privacy Policy, to exercise your data rights, or to file a complaint, contact us at admin@breederpro.com.

If you are in the EU and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.