Privacy Policy

1. Information We Collect

From Shelter Partners

• Organization information (name, address, phone, email, website, EIN)
• Contact person details (name, title, email, phone)
• Dog listing data (profiles, photos, status, medical info)
• Integration data (API usage, webhook configurations)
• Communication history with WTL

Dog Listing Data Sources

Dog listings displayed on the Platform are aggregated from the following sources:

• RescueGroups.org API v5 (primary database of ~33,000+ dog listings)
• Direct shelter website scraping via 8 automated platform adapters (ShelterLuv, ShelterBuddy, Petango, Petstablished, Chameleon/PetHarbor, ShelterManager/ASM, RescueGroups Widget, and generic HTML parsing)
• Shelter-submitted CSV imports and API feeds via our partner portal
• Automated verification and freshness monitoring systems

Each dog listing includes a Data Sources page documenting the specific provenance of that listing's data.

From Adopters / Website Visitors

• Information voluntarily provided (name, email when submitting interest forms or foster applications)
• Search and browsing behavior (pages viewed, dogs viewed, filters used)
• Saved/favorited dogs (stored locally in browser, not on our servers)
• Device and browser information for analytics purposes

Automatically Collected

• IP addresses (hashed for privacy when used in analytics)
• Browser type and version
• Pages visited and time spent
• Referring website

2. How We Use Information

• Display Listings: Showing adoptable dogs to potential adopters
• Facilitate Adoptions: Connecting interested adopters with shelters (via redirect to shelter website or contact info)
• Send Notifications: Communicating with shelter partners about their accounts, listings, and platform updates
• Improve Service: Analyzing usage patterns to improve platform features, search relevance, and user experience
• Generate Analytics: Creating aggregate, anonymized statistics about shelter dog populations and adoption trends
• Prevent Abuse: Rate limiting, fraud detection, and ensuring platform security

3. Information Sharing

We share information in the following ways:

• Public Dog Listings: Dog profiles, photos, and shelter contact information are displayed publicly on the Platform to facilitate adoptions.
• Aggregate Statistics: Anonymized, aggregate data about dog populations and adoption trends may be shared publicly or with research organizations.
• Legal Requirements: We may disclose information when required by law, regulation, legal process, or government request.
• Service Providers: We share data with service providers (sub-processors) who help us operate the Platform, subject to confidentiality agreements.

We do NOT:

• Sell personal information to anyone, ever.
• Share shelter staff personal contact details with marketers or advertisers.
• Use personal information for targeted advertising.
• Share data with data brokers.

4. Cookies & Tracking

• Essential Cookies: Used for authentication (login sessions) and basic platform functionality. These cannot be disabled.
• Local Storage: Used to store saved/favorited dogs on your device. This data never leaves your browser.
• Analytics: We may use privacy-respecting analytics to understand how the Platform is used. We do not use Google Analytics or other invasive tracking.
• No Third-Party Ad Trackers: We do not use advertising trackers, retargeting pixels, or any third-party advertising technology.

5. Data Security

We protect your information using:

• TLS encryption for all data in transit
• AES-256 encryption for all data at rest
• Row-Level Security (RLS) in our database
• SHA-256 hashing for API keys (raw keys never stored)
• HMAC-SHA256 signing for webhook deliveries
• Regular security audits and access controls
• IP address hashing for analytics (never stored in raw form)

6. Your Rights

Regardless of where you are located, you have the following rights:

• Access: Request a copy of all personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request permanent deletion of your personal information.
• Portability: Receive your data in a machine-readable format (JSON, CSV).
• Opt-Out of Marketing: Unsubscribe from marketing communications at any time.

To exercise any of these rights, email privacy@waitingthelongest.com. We will respond within 30 days.

7. Children's Privacy

WaitingTheLongest.com is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@waitingthelongest.com.

8. State-Specific Rights

California (CCPA/CPRA)

California residents have the right to know what personal information is collected, request deletion, opt out of sale (we do not sell data), and not be discriminated against for exercising these rights. To make a request, email privacy@waitingthelongest.com with subject line "CCPA Request".

Virginia (VCDPA)

Virginia consumers have rights to access, correct, delete, obtain a copy of, and opt out of processing of personal data for targeted advertising or sale.

Colorado (CPA) & Connecticut (CTDPA)

Residents of Colorado and Connecticut have similar rights to access, correct, delete, and port their personal data, and to opt out of targeted advertising, sale, or profiling.

All state-specific requests will be processed within the timeframes required by applicable law (typically 45 days, with one 45-day extension if needed).

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users and/or prominent notice on the Platform at least 30 days before taking effect. Continued use after the effective date constitutes acceptance.

10. Contact Information

For privacy-related questions, requests, or concerns:

• Email: privacy@waitingthelongest.com
• Website: waitingthelongest.com