Privacy, in plain language.

Who we are

Paware is rescue-management software operated by Kafure Consulting in Miami, Florida. In this policy, “Paware,” “we,” and “us” refer to Kafure Consulting as the operator of the Paware service at paware.pet, its application, and the rescue websites and forms it hosts.

Privacy questions and requests can be sent to alex@kafure.com.

Our privacy roles

Paware is responsible for the account, billing, security, and service information needed to operate the platform. Each rescue organization is responsible for the animal, applicant, adopter, donor, foster, volunteer, staff, and other community information it chooses to collect and manage in its workspace. For that organization-owned information, Paware acts as a service provider or processor and follows the organization's authorized instructions.

If you submitted a form to a rescue, that rescue decides how the submission is reviewed and used. You may contact the rescue directly about its practices; Paware will also help route a valid access or deletion request when appropriate.

Information we handle

How we use information

• Provide, secure, maintain, and improve Paware.
• Keep each rescue's records isolated and enforce its team permissions.
• Process the workflows a rescue requests, such as scheduling care, reviewing applications, publishing a website, sending operational email, creating documents, and syncing connected services.
• Administer trials, complimentary memberships, subscriptions, invoices, exports, support, retention, and deletion.
• Detect abuse, investigate errors, meet legal obligations, and protect Paware, rescue organizations, people, and animals.
• Analyze aggregate product performance and usage so we can make the service more reliable and easier to use.

We do not sell personal information. We do not use rescue records, public form submissions, or Google user data for advertising.

Google Calendar data

A rescue owner or administrator may optionally connect a Google account. Paware uses the account's email address to identify the connection and uses Google Calendar access to create, update, and remove Paware-managed helper commitments in that account's primary calendar. Paware does not import or analyze pre-existing calendar events.

Google access and refresh tokens are encrypted in a server-side vault and are not exposed to rescue users, browsers, or public websites. Paware uses them only for the calendar synchronization the rescue enables. Disconnecting Google Calendar stops future synchronization and deletes Paware's stored Google credentials. Events already created in Google Calendar remain in the calendar unless the user removes them.

Read the complete Google Calendar connection explanation.

When information is shared

We share information only as needed to operate the service, follow an authorized rescue's instruction, or comply with law. The service providers we use include:

• Supabase for database, authentication, file storage, and encrypted credential storage.
• Vercel for application and managed-website hosting.
• Resend for operational and account email delivery.
• Stripe for subscription checkout, invoices, and billing.
• Google when a rescue connects Google Calendar or when configured website analytics load.
• Other providers a rescue deliberately connects, such as animal listing services or a custom-domain provider.

We may also disclose information to comply with a valid legal request, protect rights and safety, investigate misuse, or support a business transaction. If ownership of Paware changes, we will require the new operator to honor this policy and will provide legally required notice.

Retention and deletion

We keep information while it is needed to provide Paware, meet an organization's instructions, maintain security and audit history, resolve disputes, or comply with law. Owners can export rescue data from Settings.

• An owner-requested organization deletion has a seven-day safety window and can be canceled during that period.
• After paid access ends, a public rescue website receives a 30-day safety period and organization data is normally retained for 90 days with advance reminders, unless access is restored or law requires a different period.
• Organization deletion removes its workspace, team access, animal and people records, applications, files, connected-service credentials, and managed public website. Personal Paware sign-in accounts are kept separately so a person can belong to another organization.
• Google credentials are deleted when the calendar connection is disconnected. Limited security, billing, audit, and deletion logs may remain where necessary for fraud prevention, legal compliance, or proof that a request was completed.

Backup copies are protected from routine use and age out under our backup lifecycle. Deletion from backups may therefore take longer than deletion from the active service.

Security

Paware uses organization-level access controls, database row-level security, server authorization, encrypted connections, protected server credentials, encrypted OAuth-token storage, audit history, and least-privilege team roles. Support access is intended to be reason-bound, time-limited, and recorded. No system can guarantee absolute security; if you believe Paware or a rescue workspace has been compromised, contact us promptly.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing. You may also have the right to complain to a local privacy authority.

• Team members can update ordinary workspace information through the rescue team, subject to their role.
• Rescue owners can export organization data and schedule organization deletion from Settings.
• Rescue owners and administrators can disconnect Google Calendar from Scheduling. A Google user can also revoke Paware from their Google Account's connected-app settings.
• Public form submitters should contact the rescue that received the form or email us if they need help reaching it.

We may need to verify identity and authority before completing a request, especially when it concerns an organization's records or another person's information.

International processing

Paware is operated from the United States and its primary data services are hosted in the United States. A rescue, its team, or a form submitter may be located elsewhere. Where required, we use contractual and technical safeguards for cross-border processing.

Children

Paware accounts are for adults who are authorized to act for a rescue organization. Paware is not directed to children under 13 and we do not knowingly invite them to create accounts or submit forms. Rescue records may contain age or household information supplied by an adult when relevant to animal placement, safeguarding, or volunteer work.

Policy changes

We may update this policy as Paware, its providers, or applicable law changes. We will change the date above and provide additional notice in the service when a change materially affects how information is used or a user's choices.

Contact us