Privacy Notice: Cat Adoption / Foster
Version: 2026-10-07-b4
⚠️ Draft, not legal advice. This text has not been reviewed by a lawyer.
Effective from: 7 October 2026 · Written to follow Vietnam's Personal Data Protection Law No. 91/2025/QH15 and Decree 356/2025/ND-CP.
1. Who is responsible
Data controller: Danny, an individual, Thanh Xuân, Hà Nội. Danny's full name is given to you on request, and to competent authorities. Data contact: Gmail dannyphan190@gmail.com · Zalo 0965750902. The website has no accounts, no forms and no cookies. We receive personal data only when you message us on Gmail or Zalo, or when you use the AI box or the cat photo analyser.
2. What data we receive
| When | Data |
|---|---|
| You list a cat | Name, contact channel (Gmail/Zalo/phone), province/city + ward/commune, photos and details of the cat (health, rabies vaccination, sterilisation) |
| You agree to show your number on a listing | The phone/Zalo you chose, your consent message and when you sent it (as proof) |
| You ask to adopt / foster | Name, contact channel, province/city + ward/commune, the introduction you write |
| You send a report | Your contact channel, the report |
| A partner rescue group | Group name, person in charge, contact channel |
| You use the AI box | The question you type. Phone numbers, emails and account numbers are masked automatically before it is sent |
| You use the cat photo analyser | The photo you upload. In your browser, EXIF/GPS is removed and the photo is resized to at most 1024px before sending. A photo may accidentally show faces or the inside of a home, so photograph only the cat |
| You browse the site | Site statistics from cookieless Umami: totals only, it does not identify you. Hosting providers may keep technical logs (IP) |
Please do not send ID numbers, bank account numbers, an exact home address or photos of other people's faces.
3. Why we use it
- To verify and publish cat listings.
- With your separate consent: to show your phone/Zalo on a listing so adopters can contact you directly.
- To reply to you, and to connect people asking about a cat with the person or group caring for it.
- To answer questions in the AI box, and to analyse cat photos you upload. Results are AI output, not veterinary advice.
- To handle reports and prevent scams.
- To meet legal duties.
We do not sell data, do not use it for advertising and do not send marketing.
4. Legal basis
- Your consent: the consent sentence in the message template. One sentence per purpose; showing your number publicly has its own consent. No answer means no consent. We keep that message as proof. For the AI box and the photo analyser, the notice is shown right next to the box before you send; you must confirm before you can send.
- Legal obligations, for purpose 6.
5. Who can see your data
| Who | What they see |
|---|---|
| Everyone, including via Google search | Details and photos of the cat, province/city + ward/commune. A poster's phone/Zalo only if that person agreed. The adoption pages are indexed by Google, so a published number will be findable on Google |
| The person or group caring for the cat | The name and contact channel of the person asking, only if that person agreed. They promise to use it only for that cat and to delete it after 90 days |
| AI providers (section 7) | Questions typed into the AI box, photos sent for analysis |
| Us | The messages you send and our private tracking log (not on the website or in the source code) |
| Competent authorities | Data they request under the law |
6. How long we keep it
| Data | Period |
|---|---|
| Messages asking to adopt / foster | Deleted 90 days after the listing closes |
| Data about a person listing a cat | While the listing is live + 6 months |
| Phone shown publicly on a listing | Until the listing is removed or you withdraw consent |
| Original photos (before EXIF removal) | Deleted within 7 days after publishing |
| Reports | 12 months |
| Proof of consent | While the listing is live + 24 months |
| Questions in the AI box, photos sent for analysis | Not stored by us. AI providers keep them as set out in section 7 |
We clear expired data every month.
7. Services we use, and transfers outside Vietnam
| Service | Used for | Location |
|---|---|---|
| Google (Gmail, Google Drive) | Receiving email, keeping the tracking log | Outside Vietnam |
| Cerebras (Cerebras Systems Inc.), main AI provider | AI box; cat photo analysis (only Cerebras handles photos) | USA (Cerebras' policy says possibly other countries too) |
| Groq (Groq, Inc.), fallback | AI box only, when Cerebras fails. Only used once Zero Data Retention is enabled | USA |
| SambaNova (SambaNova Systems, Inc.), last resort | AI box only, when the providers above fail | USA (sub-processors may be in other countries) |
| Zalo (VNG) | Receiving Zalo messages | As set out in Zalo's policy |
| Cloudflare, GitHub | Hosting and delivering the website (including phone numbers published with consent). Passing questions and photos to the AI provider | Outside Vietnam |
| Umami Cloud | Cookieless site statistics | Outside Vietnam |
The two AI features. Your question (with phone/email/account numbers masked) or photo (with EXIF/GPS removed) goes through Cloudflare's servers to one AI provider (photos: Cerebras only), together with the cat's details from the listing. We do not send your IP or browser details. Catopidia does not store questions, answers or photos. Under each provider's terms (read on 7 Oct 2026):
- Cerebras: has no right to use the content to train models. Its policy says it does not retain inputs and outputs; technical logs are deleted when no longer needed.
- Groq: may not use the content to train models. Nothing is kept by default. When troubleshooting or investigating suspected abuse, Groq may log it temporarily for up to 30 days. Zero Data Retention switches this off; we only use Groq once that setting is enabled.
- SambaNova: uses the content only to provide the service, for no other purpose. SambaNova may keep query logs to run the service; its terms give no retention period.
So please don't enter personal information, and photograph only the cat. Transfers abroad: data you send by Gmail is stored outside Vietnam (if you'd rather not, use Zalo). Questions and photos sent to the AI are processed abroad, mainly in the USA (photos: Cerebras, USA). We prepare a cross-border transfer impact assessment that covers both AI features and file it with the personal data protection authority (Ministry of Public Security) as the law requires.
8. Your rights
You have the right to: be informed; give or withdraw consent; see and correct your data; ask for a copy, deletion or restriction; object to processing; and complain, report, sue and claim compensation. How: message us on Gmail or Zalo (section 1). Timelines: the admin often goes fishing 🐟, but for personal-data requests the admin puts the rod down and replies within 2 working days. We then complete:
- seeing, correcting or getting a copy: 10 days;
- withdrawing consent, restriction or objection: 15 days;
- deletion: 20 days. If a service provider has to help, the law allows longer (at most 15 / 20 / 30 days). Withdrawing a published phone number: send "WITHDRAW CONTACT [code]". We reply within 2 working days, remove the number from the site within 2–3 working days, delete old copies of the site and ask Google to drop its old copy. We cannot remove copies that other people or tools have already saved. Withdrawing consent does not affect processing that happened before. If you withdraw consent to a listing, we take the listing down.
9. Security
Gmail and Zalo use 2-step verification and only we use them. Phone numbers are not kept in the source code; only numbers with consent are added to the site at build time. Listing photos have EXIF/GPS removed. The site uses HTTPS. Photos sent for analysis have EXIF/GPS removed and are resized in your browser. The two AI features do not store questions or photos, and limit how often you can use them.
10. Children
- Listing a cat, asking to adopt / foster: 18 or older.
- AI box and cat photo analyser: 16 or older.
Under Vietnamese law, people under 16 are children, and a parent or guardian exercises their data rights for them. There are no accounts, so we only ask you to confirm your age. If we learn that data was sent by someone under 16, or an adoption request by someone under 18, without a parent or guardian, we delete it.
11. If there is a data incident
No fishing trips during incidents. If an incident could harm you (for example, our Gmail or Zalo account is taken over), we notify the personal data protection authority (Ministry of Public Security) within 72 hours of discovering it, tell the people affected as soon as we can, and explain how to protect themselves.
12. Changes and contact
When we change this notice, we post the new version with its effective date. If we add a new purpose, we will ask for your consent again. Contact: Danny · Thanh Xuân, Hà Nội · Gmail dannyphan190@gmail.com · Zalo 0965750902. You may also complain to the personal data protection authority at the Ministry of Public Security.