Privacy

Your information deservesclear rules.

This Privacy Policy explains what information Pawsworth collects, where it comes from, how we use it, when we disclose it, how long we may keep it, and the choices and rights available to you.

Effective August 12, 2026Version 1.0

Pet records stay tied to their source

We aim to preserve where veterinary information came from instead of making different records indistinguishable.

You control record sharing

Record sharing features are intended to operate at your direction, including temporary Emergency Access.

We limit unnecessary collection

Our goal is to collect and retain information that is reasonably needed to provide, protect, and improve Pawsworth.

About this Privacy Policy

The short version

Pawsworth needs information to connect owners, pets, records, clinics, appointments, and care tools. We should use that information for understandable purposes, disclose it only where needed or directed, and give users meaningful control where possible.

1

Scope of This Policy

This Privacy Policy applies to Personal Information processed through Pawsworth where PawthosX Labs LLCdetermines how and why that information is processed.

"Personal Information" means information that identifies, relates to, describes, can reasonably be linked with, or can reasonably be associated with an individual or household, where applicable law treats the information as personal data or personal information.

This Policy does not necessarily govern information processed independently by veterinary clinics, veterinarians, laboratories, pharmacies, payment providers, financing providers, insurance companies, maps providers, or other third parties.

Those organizations may have independent privacy notices and legal obligations concerning information they control.

2

Information We Collect

The information Pawsworth collects depends on which features you use and how you interact with the platform.

Account and identity information

name;

email address;

telephone number;

login credentials and authentication information;

account identifiers;

communication preferences;

account verification information;

information you provide when contacting support.

Pet information

pet name;

species;

breed;

sex and reproductive status;

date of birth or age;

weight;

photographs;

microchip or other pet identifiers;

insurance or plan information you choose to provide;

primary clinic and veterinary-provider information.

Veterinary care information

visit history;

vaccinations;

medications;

allergies and alerts;

conditions and diagnoses contained in veterinary records;

laboratory and diagnostic information;

imaging and reports;

procedure history;

discharge information;

treatment plans;

documents and attachments;

other veterinary medical information you or a provider make available through Pawsworth.

Care discovery information

clinic searches;

services searched;

preferred locations;

urgent or emergency-care searches;

filters and preferences;

clinic pages viewed;

care options selected.

Transaction and care-administration information

estimate requests and responses;

uploaded veterinary invoices;

appointment requests and bookings;

record-transfer requests;

clinic communications;

CareFlex-related interactions;

limited payment or transaction information received from applicable providers.

Information you voluntarily provide

We also collect information contained in files, messages, forms, corrections, feedback, clinic submissions, or other content you choose to provide.

3

Pet Medical Records and Veterinary Information

Pet records are central to several Pawsworth features. We treat veterinary medical information as information that deserves heightened care within the product, regardless of whether a particular law formally classifies that information as sensitive Personal Information.

Sources of pet records

Veterinary information may be provided:

directly by you;

by a veterinary clinic at your direction or as part of a connected service;

through an authorized integration;

through a record-transfer workflow;

from documents you upload;

from other sources you authorize Pawsworth to access.

Record provenance

Where practical, Pawsworth may maintain information about the clinic, veterinarian, document, integration, or other source from which a record originated.

Preserving source information helps distinguish a Pawsworth-organized record from the original record maintained by a veterinary provider.

Incomplete records

Your Pawsworth record may not contain every veterinary record that exists for your pet.

A veterinary clinic may maintain additional or more authoritative information in its own medical-record system.

Deleting Pawsworth does not necessarily delete a clinic's original medical record.

Veterinary clinics and other providers independently control records they maintain in their own systems. Deleting information from Pawsworth does not automatically require another organization to delete its own records.
4

Information We Receive From Veterinary Clinics and Connected Services

When a veterinary clinic or other provider connects with Pawsworth, we may receive information needed to provide the connected feature.

Depending on the connection, this can include:

clinic identity and location;

services and pricing;

appointment availability;

appointment information;

pet and owner identifiers used to match records;

veterinary medical records;

estimate information;

record-transfer status;

other information necessary for the authorized integration.

We seek to limit connected data to what is reasonably relevant to the feature being provided.

Clinics may independently control information they process within their own practice systems.

5

Location Information

Location is useful for care discovery, urgent care, emergency care, travel estimates, and nearby clinic searches.

Location you provide

You may enter a city, ZIP code, address, or other location into Pawsworth.

Device location

If you choose to use a feature such as "Use My Location," Pawsworth may request permission from your browser or device to access more precise location information.

You can generally control device-location permissions through your browser or operating-system settings.

We may also infer an approximate location from technical information such as an IP address.

Emergency searches

Location information used by an emergency-care finder is intended to help identify nearby facilities. It should not be treated as an emergency-dispatch or location-monitoring service.
6

Bill Check, Estimates, and Uploaded Documents

If you use Bill Check, estimate tools, or document upload features, Pawsworth may process the content of files you provide.

This can include:

clinic information;

owner information appearing on the document;

pet information;

services and procedures;

medications;

invoice line items;

prices and totals;

treatment-plan information;

document metadata.

We may use automated document-processing systems to extract and organize information from files. Automated extraction may be incomplete or inaccurate.

Where possible, Pawsworth should preserve the original uploaded document so extracted information can be compared with its source.

7

Appointments and Scheduling

When you search availability, request an appointment, or book veterinary care, we may process:

your identity and contact information;

your pet's identity;

the selected clinic;

requested service or reason for visit;

appointment date and time;

scheduling status;

appointment instructions;

communications associated with the booking.

We may disclose the information needed to schedule the appointment to the selected clinic or its scheduling provider.

8

CareFlex, Payments, and Financial Information

CareFlex, CareFlex+, payment features, and other affordability tools may involve information needed to administer payment or financial workflows.

Depending on the feature, this can include:

name and contact information;

clinic and transaction information;

amount due;

payment status;

payment-plan information;

limited payment-method information;

information required by an applicable financial or payment provider.

Payment credentials

Where payment information is collected directly by a payment processor or financial provider, that provider may receive card, bank-account, identity, or other payment information directly. Pawsworth may receive only the information needed to confirm or administer the transaction.

A third-party payment, financing, or financial-service provider may have its own privacy notice explaining how it processes information for its independent purposes.

9

Emergency Access

Emergency Access allows an authorized Pawsworth user to temporarily share available pet medical information with another veterinary facility.

Information included

Depending on the record and sharing scope, Emergency Access may include:

pet identification and demographics;

medical alerts;

allergies;

medications;

conditions;

vaccination history;

recent visits;

diagnostics;

documents;

primary veterinary-provider information;

limited owner information needed for veterinary care.

36-hour access

The standard Emergency Access workflow is designed to expire no later than 36 hours after the access grant is created, unless access is revoked earlier.

Access logs

Pawsworth may record security and audit information concerning Emergency Access, including:

when access was created;

when access expires;

when access was revoked;

when the record was accessed;

technical information associated with access;

facility or user identity when available.

An Emergency Access code or QR link should be treated as sensitive while active.

10

Clinic Claims and Professional Verification

If you claim a veterinary clinic listing or create another professional account, we may collect information needed to verify your relationship with the clinic.

This may include:

name;

professional role;

work email;

telephone number;

clinic affiliation;

business-domain information;

verification codes;

verification status;

business documentation submitted for manual review;

other information reasonably needed to prevent fraudulent clinic claims.

Verification information may be retained as reasonably necessary to document that a clinic-management request was reviewed and authorized.

11

Information Collected Automatically

When you use Pawsworth, our systems and service providers may automatically collect technical and usage information.

This may include:

IP address;

browser type and version;

device type;

operating system;

language and regional settings;

referring page;

pages or screens viewed;

dates and times of access;

feature interactions;

application errors;

security and authentication events;

session and diagnostic information;

cookie or similar identifiers where used.

We use this information for functions such as operating the platform, troubleshooting, protecting accounts, preventing abuse, measuring performance, and understanding how features are used.

12

Cookies and Similar Technologies

Pawsworth may use cookies, local storage, SDKs, pixels, or similar technologies for functions such as authentication, security, remembering preferences, maintaining sessions, analytics, and improving performance.

Essential technologies

Some technologies may be necessary for account login, security, session management, fraud prevention, and core functionality.

Analytics

We may use analytics technologies to understand aggregate product usage, identify technical problems, and improve Pawsworth.

Advertising technologies

If Pawsworth introduces advertising technologies that create additional privacy rights under applicable law, we will provide the required notice and choice mechanisms.

Where required, cookie or privacy controls may allow you to manage non-essential technologies.

13

How We Use Information

We may use information to:

create and maintain Pawsworth accounts;

identify pets and associate records with the correct account;

provide veterinary-care search and discovery;

display clinic information;

provide cost-comparison tools;

process estimate requests and responses;

process Bill Check documents;

provide appointment and scheduling features;

organize and display pet records;

facilitate record sharing and transfers;

operate Emergency Access;

provide CareFlex and other payment-related features;

verify clinic claims and professional accounts;

respond to customer-support requests;

send transactional communications;

protect accounts and detect fraud or misuse;

maintain audit and security logs;

debug, test, maintain, and improve the Services;

understand product performance and usage;

comply with legal obligations;

establish, exercise, or defend legal claims;

protect users, clinics, Pawsworth, and others.

14

Automated Processing and Artificial Intelligence

Certain Pawsworth features may use automated systems, machine learning, or artificial intelligence to help process information.

Examples may include:

extracting information from uploaded invoices or records;

organizing or categorizing veterinary documents;

matching records to pets or clinics;

summarizing information;

search and ranking assistance;

detecting suspicious activity or misuse;

supporting other product features clearly presented to you.

Automated outputs can be incorrect or incomplete and should not automatically replace the underlying veterinary record or source document.

Veterinary decisions remain with veterinary professionals.

Pawsworth's use of automated systems does not make Pawsworth your veterinarian and does not replace clinical judgment by a licensed veterinary professional.

Where third-party technology providers process information on our behalf, their access should be limited to the services they provide to Pawsworth and governed by appropriate contractual and security requirements based on their role.

15

How We Disclose Information

We may disclose Personal Information in the following circumstances.

At your direction

We disclose information when you ask us to, such as when you:

share a pet record;

create Emergency Access;

request an estimate;

book an appointment;

transfer records;

select a veterinary clinic;

use another feature requiring information to be sent to a provider.

Veterinary clinics and providers

We may disclose the information reasonably needed for a veterinary clinic to provide a feature you request, such as scheduling, estimates, records, or continuity of care.

Service providers

We may disclose information to companies that help us operate Pawsworth, such as providers of:

cloud hosting;

data storage;

authentication;

security;

email and messaging;

customer support;

analytics;

mapping;

document processing;

software infrastructure;

payment processing;

professional services.

Affiliates

Information may be processed by Pawsworth affiliates where reasonably necessary to operate, support, secure, or develop the Services, subject to applicable law and appropriate internal controls.

Legal, safety, and security

We may disclose information where we reasonably believe disclosure is necessary to:

comply with applicable law or valid legal process;

respond to lawful government requests;

protect the security and integrity of Pawsworth;

investigate fraud or misuse;

protect the rights or safety of users, veterinary clinics, Pawsworth, or others;

establish, exercise, or defend legal claims.

16

Sale, Sharing, and Targeted Advertising

Pawsworth is not designed around selling veterinary medical records or private pet-record content to advertisers.

We do not sell Personal Information for monetary payment merely because you create a Pawsworth account, store pet records, or use Pawsworth care tools.

Privacy laws in some states define "sale," "sharing," or "targeted advertising" more broadly than an exchange of information for money.

This section must match our deployed advertising and analytics stack.

If Pawsworth engages in activity that qualifies as a sale, sharing, or targeted advertising under applicable law, we will provide required notices and opt-out mechanisms.

Where legally required, we will also process recognized opt-out preference signals, such as supported browser-based privacy preference signals, in accordance with applicable law.

17

Data Retention

We retain Personal Information for periods reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain account and record integrity, protect security, resolve disputes, prevent fraud, and comply with applicable law.

Retention periods can vary based on the type of information and the reason it is processed.

Factors we may consider

whether your account remains active;

whether the information is needed to provide a requested feature;

the sensitivity and volume of the information;

security and fraud-prevention needs;

contractual requirements;

legal obligations;

applicable limitation periods;

whether the information is contained in backups or audit logs;

whether maintaining record provenance or transaction history remains necessary.

Emergency Access

Access to the shared medical record expires at the end of the Emergency Access period or earlier revocation. Security and audit logs associated with that event may be retained longer where reasonably necessary for security, accountability, fraud prevention, and legal purposes.

Deletion

When information is deleted, it may remain temporarily in backup systems or be retained where law or a legitimate security, fraud-prevention, transaction, dispute, or record-integrity need permits or requires continued retention.

18

Your Choices and Controls

Account information

You may be able to review and update certain account information through your Pawsworth settings.

Pet information

Pawsworth may provide controls for updating pet profile information and managing records associated with your account.

Record sharing

You decide when to initiate standard record sharing through owner-controlled sharing features.

Emergency Access

An active Emergency Access session can be revoked through the applicable Pawsworth sharing controls.

Location

You can decline precise device-location permission and manually enter a location instead where supported.

Communications

You can manage certain communication preferences in your account or by following unsubscribe instructions where applicable.

Even if you opt out of marketing messages, we may continue to send important transactional, account, security, appointment, or service-related communications.

19

U.S. State Privacy Rights

Depending on where you live and whether the applicable privacy law applies to Pawsworth, you may have rights concerning your Personal Information.

These rights may include the right to:

confirm whether we process your Personal Information;

access Personal Information we maintain about you;

obtain a portable copy of certain Personal Information;

correct inaccurate Personal Information;

delete certain Personal Information;

opt out of certain sales of Personal Information;

opt out of certain sharing or targeted advertising;

limit certain uses of sensitive Personal Information where applicable;

withdraw consent where processing relies on consent and applicable law grants that right;

appeal certain decisions concerning a privacy request;

exercise privacy rights without unlawful discrimination or retaliation.

Submitting a request

You can submit a privacy request by contacting:

Privacy Requests

privacy@pawsworth.vet

Include enough information for us to understand your request. Please do not email passwords, Emergency Access codes, full payment-card numbers, or unnecessary sensitive documents.

Verification

We may need to verify your identity before completing certain requests. The verification process will depend on the type and sensitivity of the information involved.

We will use information submitted for verification primarily to evaluate and process the privacy request, protect accounts, and prevent fraudulent requests.

Authorized agents

Where applicable law permits, you may designate an authorized agent to submit a request on your behalf. We may require evidence that the agent is authorized and may separately verify your identity where permitted.

Appeals

If applicable law gives you the right to appeal our decision concerning a privacy request, instructions for submitting an appeal will be provided with our response.

Requests involving veterinary records

A request to Pawsworth applies to information controlled by Pawsworth. It does not automatically constitute a privacy or records request to every veterinary clinic that has independently maintained information about your pet.

20

California Notice at Collection and Privacy Rights

This section provides additional information for California residents where the California Consumer Privacy Act, as amended, applies to Pawsworth.

Categories of Personal Information

Depending on how you use Pawsworth, we may collect the following categories of Personal Information:

Category

Identifiers

Examples

Name, email, telephone number, account identifier, IP address.

Sources

You, your device, clinics, connected services.

Category

Customer and account information

Examples

Contact details, account information, communications, transaction information.

Sources

You and service providers.

Category

Commercial information

Examples

Services requested, estimates, appointments, transactions, CareFlex interactions.

Sources

You, clinics, payment or service providers.

Category

Internet or electronic activity

Examples

Device information, logs, page views, searches, feature interactions.

Sources

Your browser, device, and service providers.

Category

Geolocation

Examples

Approximate location and precise device location when you authorize it.

Sources

You, your device, and technical information.

Category

Professional information

Examples

Veterinary clinic affiliation, professional role, clinic-claim verification.

Sources

You, clinics, business sources.

Category

User-provided content

Examples

Pet records, invoices, estimates, veterinary documents, communications, uploads.

Sources

You, clinics, and connected services.

Category

Sensitive information where legally classified as such

Examples

Account credentials, precise geolocation, financial-account information handled in applicable workflows.

Sources

You, your device, and applicable service providers.

Category

Inferences

Examples

Search preferences or care interests inferred from your activity where used to operate or personalize Pawsworth.

Sources

Derived from Pawsworth activity.

Purposes

We use these categories for the business and commercial purposes described throughout this Privacy Policy, including providing Pawsworth, account administration, care discovery, records, estimates, Bill Check, scheduling, payments, security, communications, analytics, legal compliance, and product improvement.

Retention

We retain each category based on the criteria described in Section 17 rather than applying a single retention period to every type of information.

California rights

Subject to applicable exceptions and verification requirements, California residents may have rights to know/access, correct, delete, and obtain information concerning certain disclosures, and to opt out of certain sale or sharing where applicable.

California residents may also have rights concerning certain uses and disclosures of sensitive Personal Information where applicable.

Non-discrimination

We will not unlawfully discriminate against you for exercising an applicable California privacy right.

Sale and sharing

See Section 16 for our description of sale, sharing, targeted advertising, and applicable opt-out controls.

Submitting a California request

Privacy Requests

privacy@pawsworth.vet

Include enough information for us to understand your request. Please do not email passwords, Emergency Access codes, full payment-card numbers, or unnecessary sensitive documents.

21

Data Security

We use administrative, technical, and organizational safeguards intended to protect Personal Information against unauthorized access, use, alteration, disclosure, or destruction.

Depending on the system and information involved, safeguards may include:

access controls;

authentication controls;

encryption where appropriate;

logging and monitoring;

role-based access;

secure software-development practices;

vendor review and contractual controls;

backup and recovery measures;

incident-response procedures;

security testing and remediation processes.

No system can be guaranteed completely secure.

Security risk cannot be eliminated entirely. You should also protect your account credentials, devices, Emergency Access codes, and other sensitive access mechanisms.

If we identify a security incident involving Personal Information, we will investigate and provide legally required notifications where applicable.

22

Children's Privacy

Pawsworth consumer accounts are intended for adults and are not designed for children under 13.

We do not knowingly seek to collect Personal Information directly from children under 13 through a Pawsworth account.

If we learn that Personal Information was collected directly from a child under 13 in a manner that requires parental consent and such consent was not obtained, we will take appropriate steps consistent with applicable law.

A pet owner may include information in a veterinary record that references household members. That does not mean Pawsworth is intended as a service for children.

If you believe a child has provided Personal Information to Pawsworth improperly, contact privacy@pawsworth.vet.

23

Third-Party Websites and Services

Pawsworth may link to or interact with services operated by third parties.

Examples may include:

veterinary clinic websites;

scheduling services;

maps and navigation providers;

payment services;

CareFlex or other financial providers;

laboratories;

pharmacies;

insurance-related services;

external record systems.

When you leave Pawsworth or interact directly with an independent third party, that organization's privacy practices may apply.

We encourage you to review the privacy notices of services that independently collect information from you.

24

Corporate Transactions and Business Transfers

Personal Information may be disclosed or transferred as part of a proposed or completed merger, acquisition, financing, investment, reorganization, bankruptcy, sale of assets, affiliate restructuring, or similar corporate transaction.

Where appropriate, we may use confidentiality, security, or contractual measures during such transactions.

Any successor that becomes responsible for Personal Information governed by this Policy will be subject to applicable privacy obligations.

25

International Data Processing

Pawsworth and its service providers may process information in locations different from the place where you live.

Data-protection laws can differ between jurisdictions.

If Pawsworth becomes available in a jurisdiction that requires additional transfer mechanisms, disclosures, consent, or localized privacy terms, we may provide additional notices or protections for users in that jurisdiction.

26

Changes to This Privacy Policy

We may update this Privacy Policy as Pawsworth changes, our data practices evolve, or legal requirements change.

When we update the Policy, we will update the effective date and version at the top of this page.

For material changes, we may provide additional notice through Pawsworth, by email, or through another reasonable method where appropriate or required.

If a change requires consent under applicable law, we will request that consent before applying the relevant new processing where required.

27

Contact Us

Questions or requests concerning this Privacy Policy or Pawsworth's privacy practices may be directed to:

Mailing Address

PawthosX Labs LLC

75 North Main Street Zionsville, Indiana 46077

For ordinary product support, visit our Help Center or contact Pawsworth.