PetOS Service Providers

1. About this list

This inventory describes the reviewed production release. The applicable contracting provider entity depends on the service and account agreement; a brand name does not identify every legal affiliate or downstream subprocessor. PetOS’s operator is NORTH & LIGHT INNOVATIONS PORTAL. Contact info@thepetos.app for the applicable contractual information or a transfer assessment.

A provider may be PetOS’s subprocessor for Customer-controlled data and an independent controller for its own regulated, security or account purposes. A Customer’s independently chosen merchant account or integration is subject to that provider’s terms. See the Privacy Notice and Data Processing Addendum for roles, rights and new-subprocessor notices.

2. Google Cloud and Firebase

Purpose: application and website hosting, database, private document/photo storage, authentication, delivery infrastructure, security, logs, monitoring and backups. Data: the account and Customer information needed by each configured service, including uploaded bytes and authentication identifiers.

Location: the primary application database and private upload buckets are configured in Doha, Qatar (me-central1). Firebase identity, network delivery, support and Google subprocessors are not covered by a blanket Qatar-only commitment. Google’s service-specific location terms and provider subprocessor list govern the relevant scope.

3. Resend (Plus Five Five, Inc.)

Purpose: operational and permitted optional email delivery and delivery-status handling. Data: recipient addresses, sender information, subject and message content, relevant service context, and delivery/error metadata. Primary processing operations: United States. Current standard account retention: 30 days, subject to provider legal/security obligations and separately held recipient copies. The provider’s current DPA and downstream subprocessors apply.

4. Stripe

Purpose: PetOS paid software subscriptions, payment authorization, billing events, fraud checks, refunds and disputes. Data: business and billing contact details, plan/currency/amount and payment-provider references; card details are entered in the provider checkout, not ordinary PetOS uploads.

Location and entity: depend on the customer, account and service under Stripe’s agreements and global processing arrangements. Stripe acts as controller for some activities and processor for others. This is separate from the business’s own pet-care charges.

5. Ziina — when enabled by an eligible business

Purpose: business customer payments through the connected merchant provider. Data: the payment amount/currency, invoice/order references and provider-required transaction and business information; the provider checkout collects its payment details.

Scope: optional, supported merchant flows only, currently for eligible UAE/AED businesses. Processing locations, identity verification and regulated payment records follow the merchant’s Ziina agreement and privacy information. This list does not promise UAE-only processing or make PetOS the merchant of record.

6. AI and other integrations

The reviewed production inventory includes no external generative-AI processor, advertising network or external behavioral analytics tracker. A future processor receiving Customer content will be disclosed before use under the applicable change process. An integration available in a demo or roadmap is not automatically a production subprocessor.

7. Provider information

The links below lead to provider documents, which may change independently of PetOS. These provider policies do not replace PetOS’s obligations or establish the suitability of a particular customer’s processing. Ask info@thepetos.app about a service, data category, retention requirement or country restriction before sending data that requires a separately agreed safeguard.