Privacy Policy

Last updated: 6 June 2026

This Privacy Policy explains how Paw Multiverse (pawmultiverse.com, the “Site”) collects, uses and protects personal data, and your rights under the EU General Data Protection Regulation (GDPR) and Cyprus data-protection law. The Site is owned and operated by A.I.T. Multiverse Consulting Ltd, a company registered in Cyprus, which is the data controller. By using the Site or creating an account you confirm you have read this policy.

Contact for any privacy matter: admin@aitmultiverse.com.

1. The data we collect

We collect only what we need:

a) Account data (if you register): your name or chosen display name, email address, an encrypted (hashed) password, and two-factor authentication settings. We use this to create and secure your account, verify your email, sign you in, and contact you about your account.

b) Pet hub data: details you add about your pets (name, breed, weight log, reminders, photos, microchip and vet notes) in the My Pet Hub are stored locally in your own browser on your device. This information is not transmitted to or stored on our servers, and we cannot see it. It stays on your device unless you choose to back it up to a file yourself.

c) Contact messages: if you email us or use the contact form, we receive your name, email and message, used only to respond.

d) Technical & usage data: standard server logs (IP address, browser type, pages visited, timestamps) collected by our hosting for security and performance.

e) Analytics & advertising data: where you consent, analytics services (such as Google Analytics) and advertising (such as Google AdSense) may set cookies and process usage data under their own policies.

2. How and why we use it (lawful bases)

Under the GDPR we rely on the following legal bases:

Contract / provision of the service: to create and operate your account and the member area.

Legitimate interests: to keep the Site secure, prevent abuse, maintain server logs, and improve our content — balanced against your rights.

Consent: for non-essential cookies, analytics, personalised advertising, and any optional emails. You can withdraw consent at any time via the cookie banner or by contacting us.

Legal obligation: where we must retain or disclose data to comply with the law.

3. Account security & two-factor authentication

Accounts are protected by encrypted (hashed) passwords and optional or required two-step verification (2FA), which sends a one-time code to your email (or authenticator app) at sign-in. We strongly recommend keeping 2FA enabled. We never store your password in readable form and will never ask you for it by email.

4. Cookies

We use a consent banner so you can accept or reject non-essential cookies. Essential cookies (needed for login, security and basic function) are always active; analytics and advertising cookies are set only with your consent. See our Cookie Policy for the full list and how to change your choices.

5. Who we share data with (processors)

We do not sell your personal data. We share limited data only with service providers who process it on our behalf under contract: our website host, our email/SMTP provider (to send verification and account emails), and — where you consent — analytics and advertising providers such as Google. Each processes data under its own privacy terms and appropriate safeguards.

6. International transfers

Some providers (for example Google) may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or equivalent adequacy mechanisms.

7. How long we keep it

Account data is kept while your account is active and deleted (or anonymised) on request or after a reasonable period of inactivity. Contact messages are kept only as long as needed to handle your enquiry. Server logs are kept for a limited period for security. Pet hub data lives on your device and is controlled entirely by you.

8. Your rights

Under the GDPR you have the right to: access your data; rectify inaccurate data; request erasure (“right to be forgotten”); restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any of these, email admin@aitmultiverse.com and we will respond within one month. To delete your account and associated data, you can request it from your account area or by emailing us.

You also have the right to lodge a complaint with the supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection — or your local EU data-protection authority.

9. Children

The Site and accounts are not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

10. Security

We take reasonable technical and organisational measures to protect personal data, including encryption of passwords, secured connections (HTTPS), two-factor authentication, and access controls. No method is completely secure, but we work to protect your information and to act promptly in the unlikely event of a breach.

11. Changes to this policy

We may update this policy from time to time; the date at the top shows the latest version. Significant changes will be highlighted on the Site. Questions? Contact the data controller, A.I.T. Multiverse Consulting Ltd, at admin@aitmultiverse.com.