Privacy Policy

Data we collect

Account data (your name and email; passwords are handled by our sign-in provider), profile data, listing data for breeders, transaction data, the messages you exchange on the platform, and buyer screening answers. We also collect the basic technical logs needed to run and secure the service, and first-party product-usage events to understand and improve the service — never sold, with no third-party trackers.

Sign-in & social login

Sign-in is handled by our authentication provider (Amazon Cognito); we never see or store your password. If you sign in with Google — or Apple, when available — we receive your name, email address, and basic profile information from that provider — exactly what you allow in your privacy settings with them. We use it solely to create and authenticate your account, never for advertising, and we don't share it beyond what this policy describes.

Verification data

Breeders seeking verification provide cattery registration details and documents, health-test documents, and show-title documents. We authenticate these against their issuing sources and public registries (such as OFA and PawPeds), and we match health documents to the specific cat by microchip number.

Where a document itself is shown to buyers, it is shown redacted and only to buyers who have expressed interest in that breeder. Verification records are kept while the badge they support is live and as needed for fraud prevention.

How we use it

To operate the marketplace: showing listings, connecting buyers and breeders, processing transactions, verifying breeders and documents, preventing fraud, providing support, and sending transactional emails. We do not use your data for third-party advertising.

Message review & fraud prevention

Messages you send on the platform are screened by automated checks that look for scams, fraud, and attempts to move payments off the platform. A message flagged by those checks may be reviewed by our team. This review exists to protect you and to enforce our terms — never to build marketing profiles; message content is never shared with advertisers and never sold.

Payment data

Payments are processed by Stripe. Your card or bank details go directly to Stripe; we never store your card number on our systems. We receive from Stripe only what we need to run the transaction, such as payment status.

Photos

Photos you upload are processed before storage: we strip embedded EXIF data, including location metadata, so an uploaded photo can never reveal where it was taken.

Location

The only location data on TrueKitten is what you can see: the city and state a breeder puts on their public profile and listings, and the coarse location implied by IP addresses in our security logs. We never collect precise GPS location, and the GPS data embedded in photos is stripped on upload (see Photos above).

Cookies

We use cookies and similar on-device storage only for authentication and essential security. Your appearance preference is stored with your account so it follows you across browsers and devices. We do not use advertising or cross-site tracking cookies.

Because we don't sell or share your personal information for advertising, there is nothing to opt out of — browser privacy signals such as Global Privacy Control don't change anything here, because the answer is already no.

What's public

Some information is public by design: a breeder's cattery name, profile, photos, badges, city and state, their listings, and the Verified Owner Stories and reviews written about them. Buyer accounts are not public. After you delete your account, your profile details are replaced with anonymized placeholders (see Retention & deletion below).

Sharing

We share data with service providers who process it for us — Stripe (payments) and Amazon Web Services (hosting, sign-in via Cognito, and email via SES), plus Sentry (error monitoring) — under contracts that limit what they may do with it. Your transaction counterparty sees what the product shows them: for example, a breeder sees your display name, screening answers, and messages, and when a sale contract is signed, each party sees the name the other provided on it. We may share data with our professional advisors (such as lawyers and auditors) when needed, and we may use and share aggregated data that identifies no one (such as demand counts).

If TrueKitten is ever part of a merger, acquisition, or sale of assets, personal data may transfer with the business — and the successor stays bound by this policy's promises, including the never-sell commitment below.

We never sell your personal information.

Legal requests

We disclose data when required by law: in response to valid legal process, to enforce our terms, to investigate fraud, or to protect the safety of our users or the public. If we receive a legal request for your data, we will attempt to notify you before disclosing it, unless we are legally prohibited from doing so.

Security & breach notice

We protect your data with encrypted connections, isolated environments, and least-privilege access, and your card details go directly to Stripe — they never touch our servers. No online service can guarantee absolute security, but if a breach affects your personal data, we will notify you and the required authorities as applicable law requires.

Retention & deletion

You can delete your account yourself from your account settings. When you do, we remove your profile details — your name, email, location, and screening answers — replacing them with anonymized placeholders. We keep records we are legally or financially required to retain, such as completed transactions, contracts, and tax records; these no longer carry your contact details. Chat messages are removed on a delayed schedule so both sides keep a record while any dispute could still arise.

If your account is in the middle of a transaction, deletion is queued and completes once that transaction finishes, so a live deal is never left stranded. Records are always soft-deleted and redacted, never silently kept in full.

Your rights & requests

We grant these rights to every user, wherever you live: you can ask what data we hold about you, correct it (most of it directly in your account settings), and delete your account yourself from settings — or email contact@truekitten.com for any of these. For emailed requests we verify your identity first, and we respond within 45 days. If we decline a request, we will tell you why, and you can appeal by replying — a person will take a second look. An authorized agent may submit a request for you with proof of your authorization.

Exercising these rights never costs you features, pricing, or service quality. And where the law of your state grants you more than this policy does, you keep it.

Children

TrueKitten is not directed to anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

US only

TrueKitten is offered in the United States and intended for people who live here. Your data is stored and processed in the United States.

Changes to this policy

We may update this policy. If a change is material, we will notify you before it takes effect, and the “Last updated” date above always reflects the current version.

Contact

TrueKitten is operated by NorthPeak Software, Inc. (opens in a new tab) Privacy questions: contact@truekitten.com or (302) 587-7787, 9 AM – 5 PM ET, Monday – Saturday.