Privacy Policy

Last Updated: October 11, 2026

This Privacy Policy explains how Pawgress ("we," "our," or "us") collects, uses, shares, stores and protects personal information when you use our website and our dog training management platform (the "Service").

It applies to three groups of people:

• Trainers, who use Pawgress to run their training business
• Clients, the dog owners who train with them, whether or not they have created a Pawgress account
• Visitors to our website

The Short Version

• We collect what is needed to run training sessions, packages, forms, progress reports, payments and messages between trainers and their clients.
• We do not sell personal information, and we do not use it for advertising.
• Our main database is in Canada. Some of our service providers, including our file storage and application servers, are in the United States, and our form provider is in the European Union.
• You can ask to see, correct or delete your information by emailing our Privacy Officer at support@pawgress.ca.

1. Our Role: Trainers and Their Clients

Trainers add their clients to Pawgress and keep records about them and their dogs. For that information we act as a service provider to the trainer: we store and process it to run the Service for them, and we don't use it for our own purposes. The trainer decides what to collect about their clients and is responsible for having their clients' consent to do so.

If you are a client, your trainer may have added your details to Pawgress before you ever created an account. For questions about what your trainer keeps about you, start with your trainer. You can also contact us directly, and we will help or pass your request to them.

For information about trainers' own accounts, and for everything we do on our own behalf (such as billing, security, support and our website), Pawgress is responsible.

2. Information We Collect

3. How We Use Information

• Provide the Service: scheduling, bookings, packages, forms, progress tracking, reports and client communication
• Process payments, refunds, sales tax and trainers' subscriptions
• Send the emails the Service needs, such as account invitations, session reminders, payment links, confirmations, form copies and notifications to trainers
• Send trainers product news and updates about Pawgress, which they can unsubscribe from at any time
• Provide support, fix errors and improve the Service
• Protect the Service, our users and their clients, for example by detecting abuse and preventing spam
• Meet our legal, tax and accounting obligations

We do not sell personal information. We do not use it for advertising or to build advertising profiles. We do not use it to train artificial intelligence models.

Authorized Pawgress staff can view an account only when it is needed for support, security or to comply with law. When staff view an account as its user, that access is read-only, expires automatically after 30 minutes and is recorded in an audit log.

4. Google User Data

5. Zoom User Data

When a trainer connects Zoom, we use their access to:

• Read their basic Zoom account information (email address, display name, account ID)
• Create, update and delete meetings for virtual training sessions
• Store each meeting's ID, join link and passcode, and share them with the clients booked into that session

We do not access or store recordings or transcripts of Zoom meetings. We share Zoom data only with the trainer and clients in that session, with the service providers that host our platform, or when required by law. We do not sell it or use it for advertising.

6. Emails Trainers Send to Their Clients

• Messages are sent from the trainer's own email account, through Google or the trainer's own email server. Each client receives their own copy. Once delivered, copies live in the trainer's and recipients' mailboxes, under those providers' policies.
• Every message is labelled as a service message (about training a client has booked) or a promotional message (anything that encourages a purchase). A message with any promotional content counts as promotional.
• Promotional messages go only to clients who have agreed to receive them, or who have a recent business relationship with the trainer as Canada's anti-spam law (CASL) allows, and who have not unsubscribed. Pawgress checks this before every promotional message is sent.
• Every message names the trainer's business and gives its mailing address and contact details. Every message also includes an unsubscribe link that takes effect immediately. A client who unsubscribes from promotional messages may still receive service messages about training they have booked.
• Gmail tokens and email server passwords are encrypted by Pawgress before they are stored (see Section 10). We don't share message content or email credentials with anyone other than the email provider that delivers the message and the service providers that host our platform, unless required by law.

7. Who We Share Information With

We share personal information only in these situations:

• Between a trainer and their clients: clients see the information their trainer shares with them, and trainers see what their clients enter
• With service providers that run parts of the Service for us, listed below. They may use the information only to provide their service to us, under contracts that require them to protect it.
• With services you choose to connect, such as Google, Zoom, Stripe or Square, as described above
• When required by law, such as a valid court order, or to protect the safety, rights or property of our users or others
• In a business transfer: if Pawgress is merged or sold, information may transfer to the new owner under the protections of this policy, and we will tell you

8. Where Information Is Stored

Our main database is in Canada (Montréal). Uploaded files and signed form PDFs are stored in the United States (Iowa). Our application servers, which process every request, are also there. Several of the service providers above process information in the United States or the European Union.

When information is stored or processed outside Canada, it is protected by our contracts with these providers. It is also subject to the laws of the country where it is held, and the courts, law enforcement and national security authorities of that country may be able to access it.

9. How Long We Keep Information

We keep personal information only as long as we need it for the purposes in this policy or as the law requires.

• Account, client, pet and training records, forms, signatures and uploaded media: kept while the trainer's account is active, unless the trainer deletes them sooner.
• When you delete your account: you can no longer sign in, and we delete or anonymize your personal information within 30 days. Records a trainer holds about a client, such as session history, signed waivers and payment records, belong to that trainer's business and stay in the trainer's account. A client who wants those removed should ask their trainer, or contact us.
• Deleted files: can be restored for up to 7 days as a safeguard against accidental deletion, and are then permanently erased.
• Payment and billing records: kept for as long as tax and accounting law requires, generally six years in Canada.
• Integrations: disconnecting Google Calendar, Gmail, Zoom, Square or an email server deletes the stored access tokens or credentials. Disconnecting Gmail also revokes Pawgress's access at Google. You can also revoke access from your Google or Zoom account settings at any time.
• Trainer-to-client messages: the text and attachments are kept only until delivery finishes, and never more than 8 days after sending. Unsent attachments in drafts are deleted after 7 days. Message templates are kept until the trainer deletes them.
• Delivery records (Section 2.6): deleted 60 days after the send finishes for service messages, and 3 years after for promotional messages, so that a trainer can show why each person received a promotional email. These periods are our own retention policy.
• Promotional consent and unsubscribe records: kept while the client's record exists, so that an unsubscribe request continues to be honoured.
• Client invitation records: invitation links expire after 7 days. The working records of the add-client process are deleted 30 days after it completes (90 days if a step failed).
• Server logs, error reports, session replays and analytics: kept for a limited period under each provider's retention settings, then deleted.

10. How We Protect Information

• All data is encrypted in transit (HTTPS) and at rest.
• Gmail tokens and email server passwords are additionally encrypted by Pawgress with AES-256 before they are stored. Only our servers can decrypt them, and only when they are needed to send a message, revoke access, or re-encrypt them under a new key.
• Signed forms, signatures and form uploads are stored privately and shown only through links that expire.
• Pet photos and the photos and videos in training reports are stored at long, unguessable web addresses so that they can be displayed and shared. Anyone who has one of these links can open that file.
• Each account can access only its own data and its trainer's or clients' data, and this is enforced on our servers.
• Staff access to user data is limited to what is needed, and support access is logged (see Section 3).
• We send email from a trainer's own server only to verified, public mail servers, never to internal network addresses.

No system is perfectly secure, but we work to protect your information and to improve our safeguards over time.

11. Privacy Breaches

If personal information we hold is lost, accessed or disclosed without authorization, we will act to contain it and reduce harm. Where the breach creates a real risk of significant harm, we will notify the people affected as soon as feasible and report it to the relevant privacy commissioner. If the information belongs to a trainer's clients, we will tell the trainer too. We keep a record of every breach.

12. Your Rights and Choices

You can:

• Access the personal information we hold about you, and learn how it has been used and who it has been shared with
• Correct information that is inaccurate or incomplete. Most of it can be edited directly in your account.
• Delete your account from your account settings, or ask us to delete specific information
• Withdraw consent to an optional use of your information, such as by disconnecting an integration or unsubscribing from emails. Withdrawing consent may mean we can't provide some features.
• Unsubscribe from a trainer's promotional emails using the link in any of their messages or in your account settings, and from Pawgress's product updates using the link in those emails
• Revoke Google Calendar, Gmail, Zoom or Square access from the Integrations page or from that provider's account settings

How to make a request: email our Privacy Officer at support@pawgress.ca. We may need to confirm your identity before acting on a request. We will respond within 30 days and tell you if we need longer. Requests are free. If we can't fully meet a request, for example because the law requires us to keep a record, we will explain why.

Concerns and complaints: if you have a concern about how we handle personal information, please write to our Privacy Officer first. We will look into it, reply in writing within 30 days, and fix anything we got wrong. If you are not satisfied with our response, you can contact the privacy regulator where you live: the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or your provincial commissioner.

14. Children

Pawgress is a tool for dog trainers and dog owners and is not directed to children. If you believe a child has given us personal information, contact us and we will delete it.

15. Changes to This Policy

We may update this policy as the Service changes. The date at the top shows when it was last updated. We will tell you about material changes by email or in the Service before they take effect, particularly changes to how we handle Google, email or Zoom user data.

16. Contact Us

Our Privacy Officer is accountable for how Pawgress handles personal information. For questions about this policy, to make a request, or to raise a concern, contact: