Privacy Policy

Last updated: 1 October 2026

Introduction

NiceHuman (“we,” “our,” or “us”) operates Cairn, pet aftercare software available at cairn.pet and app.cairn.pet, including the pet owner portal and clinic portal (together, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.

Our commitment

We never sell or share our customer’s data beyond what’s required to provide our service. We don’t use tracking cookies, we don’t serve ads, we don’t sell your data. We are 100% customer-focused.

Information we collect

Demo and early-access requests on cairn.pet

When you request a demo or early access on our website, we store the email address you enter, which form on the page you used, the date and time, your browser’s user-agent string, the page that referred you, and your country as reported by our hosting provider. We store a salted, truncated hash of your IP address to limit repeat submissions; the address itself is not stored. The website sets no cookies and runs no analytics.

Account information

When a pet aftercare business creates a Cairn account, we collect the business’s name, locations, and contact details, and for each staff user their name, email address, role, and a password stored only in hashed form. Billing information is collected and held by Paddle, our payment processor and merchant of record; we do not store full card numbers.

Case records entered by our customers

Cairn customers and their partner clinics enter information about the pets in their care and the people they serve, including pet details, owner names and contact information, service selections, memorial items, scheduling and chain-of-custody events, shipment tracking, invoices, and the messages exchanged with owners by email, SMS, and phone log. Our customers control this information and are responsible for collecting it lawfully; we process it on their behalf to operate the Service.

Information from pet owners using the owner portal

When a pet owner uses a customer’s owner portal, we collect what they enter there: contact details, pet details, service and pre-need plan choices, payment information (handled by Paddle), and any messages they send.

Usage and device data

When you use the application we keep application logs (actions performed, errors, sign-in times) and record basic device information such as browser type and IP address, for security and to diagnose problems. We do not use these logs to build profiles or for advertising.

How we use information

• To provide, operate, and support the Service, including sending the transactional emails and SMS messages our customers configure (contractual necessity)
• To process payments and subscriptions (contractual necessity)
• To send receipts, sign-in and password messages, and service notices (contractual necessity)
• To keep the Service secure and detect abuse (legitimate interest)
• To improve the Service based on how it is used (legitimate interest)
• To follow up on demo requests, to tell early-access requesters when access opens, and to send occasional product updates, which you can opt out of at any time (legitimate interest)
• To comply with legal obligations

Service providers

We use a small number of providers who process data on our behalf, strictly to provide the Service, under agreements that restrict their use of it:

• Cloudflare — hosting, content delivery, and database storage. Receives all data you send to the Service, including your IP address.
• Resend — email delivery. Receives recipient email addresses and message content.
• Paddle — payment processing and merchant of record for subscriptions and pre-need payments. Receives billing details, email addresses, and transaction amounts.

Text messages are not sent through a provider of ours. Each customer connects its own SMS provider account to Cairn, and we pass recipient phone numbers and message content to that provider on the customer’s instruction. The customer’s agreement with its provider governs what the provider does with them.

We do not use third-party analytics, advertising, or error-tracking services. Each provider has its own privacy policy governing its handling of your information.

Data sharing

We do not sell personal information. We share it only:

• Within your organization — administrators on a customer account can see and manage the account’s users and records.
• Between a customer and its partner clinics and pet owners — case information is visible to the parties involved in that case, as the customer configures.
• With the service providers above, strictly to provide the Service.
• For legal reasons — when required by law, subpoena, or court order.
• In a business transfer — in connection with a merger, acquisition, or sale of assets; you will be notified before your information becomes subject to a different privacy policy.

Data storage and security

Data is stored on Cloudflare infrastructure in the United States. All data is encrypted in transit (TLS 1.2 or later) and at rest. Access is limited by role and is logged. We keep encrypted backups.

If we learn of a breach affecting your personal information, we will notify affected customers without undue delay and within 72 hours of confirming it, notify any supervisory authority we are required to, and describe the nature of the breach and the steps we are taking.

Data retention

• Demo and early-access requests — until we have followed up and access opens, or until you ask us to delete your request.
• Account records, settings, and messages — for as long as the customer’s account is open, plus 30 days after it closes, to allow for export.
• Case records and chain-of-custody logs — 7 years from the date the case is closed, including after the account closes. Pet aftercare businesses are required by law in many jurisdictions to keep these records for that long, so we retain them on the customer’s behalf and provide them on request.
• Application logs — 12 months.
• Payment and invoice records — 7 years, as required by tax and accounting law.

After an account closes we delete or anonymize its data within 30 days, except case records and chain-of-custody logs, which we keep for the period above, and anything else the law requires us to keep.

Your data, and taking it with you

Customers own their data. At any time a customer can export their customer list, invoices, cases, and transactions in a machine-readable format from within the application, and can close their account and ask us to delete everything we hold.

Anyone whose information we hold can ask us to:

• Provide a copy of their personal information
• Correct inaccurate information
• Delete their personal information
• Object to or restrict certain processing

If you are a pet owner or clinic user, the aftercare business you worked with controls your case records; we will help you reach them, and will act on their instructions. Residents of the European Economic Area and the United Kingdom also have the right to data portability, to withdraw consent, and to lodge a complaint with a supervisory authority. California residents have the right to know what personal information is collected, to delete it, to opt out of its sale (we do not sell it), and not to be discriminated against for exercising these rights. To exercise any of these rights, email nathan@cairn.pet.

Cookies

Our website sets no cookies. If you pick a day or night scene with the button in the website’s footer, that one preference is kept in your browser’s local storage, is read only by the page, and is never sent to us. The application sets only first-party cookies: to keep you signed in and secure and, if you choose, to remember you between visits and to store your display preferences. Details are in our Cookie Policy.

International data transfers

We are based in the United States and process data there. If you use the Service from elsewhere, your information will be transferred to and processed in the United States. For transfers from the EEA or UK we rely on Standard Contractual Clauses and data processing agreements with our providers.

Children’s privacy

The Service is intended for businesses and adults. We do not knowingly collect information from anyone under 18, and will delete it if we learn we have.

Changes to this policy

If we make material changes we will email account holders and post a notice in the application at least 30 days before the changes take effect. The date at the top of this page shows when it was last revised.

Contact

NiceHuman
Attn: Nathan Jovin
4231 Balboa Ave #829
San Diego, CA 92117
United States

Email: nathan@cairn.pet
Website: https://cairn.pet