Privacy Policy

1. Who we are

PoopyPuppy is a service of Poopy Puppy LLC, a Utah limited liability company located at 497 Carol Dr, Layton, UT 84041. We provide pet waste removal services to residential customers in Davis County. This privacy policy describes what personal information we collect, how we use it, and the choices you have about it.

2. What we collect

When you sign up for service or interact with our portal, we collect:

• Contact information — your name, email address, and phone number, so we can reach you about your service and account.
• Service address — your street address, city, state, and ZIP code, so our technicians can find your home.
• Service profile — yard size, gate access notes, and information about your dogs (names, breed, temperament notes, medical alerts, optional photos), so our technicians can provide good service.
• Payment information — we use Stripe to process card and bank-account (ACH) payments. Your full payment details are sent directly to Stripe and are never stored on our servers. We keep only Stripe's customer ID and the last 4 digits of your card or bank account for display.
• Bank connection details — if you choose to pay by bank account, you can connect it through Stripe Financial Connections by logging into your bank on your own device. Your bank username and password are never seen by, sent to, or stored by PoopyPuppy — the login happens directly with Stripe and your bank. From that connection we receive a payment token, your bank name, account type, the last 4 digits of the account, the account holder's name, and a point-in-time balance check — used only to verify the account is yours and to help avoid failed payments.
• Check images — if you pay by paper check, or share a check so we can set up bank payments, we photograph it. The image (which includes the routing and account numbers printed on the check) is stored privately, visible only to authorized staff, and used solely to deposit your payment and/or set up the bank payment you requested. We then delete the image automatically — as soon as your payment has cleared and your bank payment method is verified — keeping only the last 4 digits of the account. The full account details live with Stripe, not with us.
• Payment authorization recordings — when you authorize recurring bank payments in person, we may (with your spoken consent, captured at the start of the recording) record a short audio clip of your authorization. The recording is stored privately, used only as proof that you authorized the payments, and shared only with our payment processor or bank if a payment is ever disputed.
• Service photos — when our technician completes a visit, they may capture a photo as proof-of- service. These photos are stored privately in Cloudflare R2 and shown only to you and our staff.
• Account activity — sign-in audit logs (date, time, IP, user agent), notification delivery logs, and changes to your subscription. Used for security monitoring and customer support.

3. How we use SMS phone numbers

This section is required by US carrier regulations (TCR / 10DLC).

When you provide your phone number — whether by signing up yourself in our customer portal, or by giving it verbally to a PoopyPuppy technician in person — you consent to receive text messages (SMS) from us related to your account and service. These messages may include:

• Two-factor authentication codes when you sign in to the customer portal
• Service notifications — confirmation when your subscription activates, when your tech is on the way to your home, and when service is complete
• Account updates — when you change your plan, add or remove dogs, or cancel
• Customer service replies when you contact us via SMS

Message frequency varies based on your service schedule and account activity. Most customers receive 2-8 messages per month.

Message and data rates may apply based on your wireless carrier's plan. PoopyPuppy does not charge for messages.

We do not share your phone number with third parties for marketing or advertising purposes. The phone number you provide is used by PoopyPuppy and our SMS delivery provider (Telnyx) solely to deliver the messages described above.

How to opt out: at any time, you can stop receiving SMS from us by replying STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) to any message we send you. You will receive one final confirmation, and we will not send you any further messages. You can opt back in at any time by replying START, UNSTOP, or YES.

For help with our messaging program, reply HELP to any message, or contact us at support@poopypuppy.com or (385) 298-2153.

4. How we use your information

We use your information to:

• Provide and schedule the service you signed up for
• Process payments and send invoices
• Send you the SMS and email notifications described above
• Respond to customer service requests
• Detect and prevent fraud or unauthorized account access
• Improve our service (aggregate, non-identifying analytics like “average yard size” or “number of visits per week”)
• Comply with legal obligations

5. Who we share information with

We share your personal information only with the third-party service providers we use to operate the business, and only to the extent they need it to perform their function:

• Stripe (payment processing and bank connections) — handles your card or bank-account details and processes charges. If you connect a bank account, the bank login is handled by Stripe's Financial Connections service; we never receive your bank credentials. See Stripe's privacy policy.
• Telnyx (SMS delivery) — receives your phone number and message content to deliver our SMS to your wireless carrier. See Telnyx's privacy policy.
• Cloudflare (storage) — hosts visit photos, check images, payment authorization recordings, and database backups (encrypted in transit + at rest).
• Vultr (server hosting) — hosts our application server.

We do not sell your personal information. We do not share your information with advertisers or marketers outside of these operational service providers.

We may disclose information when required by law (subpoena, court order, government request) or to protect our rights, property, or safety.

6. How long we keep information

We keep your account information for as long as your account is active. After we stop servicing you, account data is retained for 2 years for tax, audit, and legal purposes — the same window banking network (NACHA) rules require us to keep bank-payment authorization records (including authorization recordings) after an authorization ends. Check images are NOT kept that long — they are deleted automatically as soon as your payment clears and your bank payment method is verified (see Section 2). You can request earlier deletion of your data (see Section 8 below); we will delete what we are not legally required to keep.

7. How we protect information

We use industry-standard security practices including encryption in transit (TLS 1.2+), encryption at rest for sensitive data (passwords are hashed with argon2id; API keys and webhook secrets are encrypted at rest), least-privilege access for our staff, audit logging, and regular security updates. No method of electronic storage is 100% secure, but we treat your data with the same care we expect for our own. For a fuller picture of our safeguards, see our Security overview.

8. Your choices

You can:

• Update your account information at any time from the customer portal at portal.poopypuppy.com/portal.
• Opt out of SMS by replying STOP to any message.
• Cancel your subscription from the portal, effective at the end of your current billing period.
• Request a copy of your data by emailing support@poopypuppy.com. We will respond within 30 days.
• Request deletion of your data by emailing the same address. We will delete what we are not legally required to keep, and confirm what was deleted.
• If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to deletion, the right to opt out of sale (we don't sell), and the right to non-discrimination for exercising these rights.

9. Children's privacy

PoopyPuppy is intended for adults. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will delete it.

10. Cookies and similar technologies

We use cookies for one purpose: to keep you signed in to the customer portal. We do not use cookies for advertising, tracking across sites, or analytics involving third parties.

11. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the “Last revised” date at the top of this page. For material changes, we will email customers with active accounts at least 30 days before the new policy takes effect.

12. Contact us

Questions about this privacy policy or about your data? Reach us at:

• Email: support@poopypuppy.com
• Phone: (385) 298-2153
• Mail: Poopy Puppy LLC, 497 Carol Dr, Layton, UT 84041

13. Governing law

This privacy policy is governed by the laws of the State of Utah, without regard to its conflict-of-laws rules.