Security Overview
Version 1.0 — Effective August 28, 2026
PetAppro is a multi-tenant pet-care booking platform operated by Base509 LLC (“Base509,” “PetAppro,” “we,” “us,” or “our”). Independent pet-care businesses (“Providers”) use PetAppro to manage their operations and serve pet owners and other customers (“End Clients”) through our mobile applications and web portal.
Providers and End Clients trust PetAppro with information used to arrange and provide pet care. This overview explains the principal safeguards Base509 uses to protect that information.
Encryption
Data sent to and from PetAppro is encrypted in transit using Transport Layer Security (TLS). Data stored by PetAppro is encrypted at rest.
Home-access codes, such as lockbox or alarm codes used by a Provider to enter an End Client’s home, receive additional protection. When PetAppro stores a home-access code, the code is encrypted at rest using keys held separately from the stored data, is revealed only after biometric or password re-authentication, and is never written to logs in plain text.
Separation between Providers
Each Provider’s data is isolated at the database level. PetAppro uses row-level security keyed to the applicable business, and the database itself enforces those restrictions rather than relying only on application code.
This means one Provider’s data cannot be reached from another Provider’s account.
Accounts and access
Multi-factor authentication is required for Provider Owner and Administrator accounts. PetAppro also requires re-authentication before sensitive, high-impact actions so the user must prove their identity again before the action proceeds.
Internal access follows the principle of least privilege: access is limited to what a person needs for authorized work. Internal access is logged.
Security review of sensitive changes
Changes to sensitive or privileged parts of PetAppro receive an independent security review before they are released. This review is part of the process for protecting critical access controls and security boundaries as the platform changes.
Payments
Payment-card transactions initiated through PetAppro are processed by Stripe. PetAppro does not store full payment-card numbers. Stripe is a PCI-DSS-certified payment processor.
Infrastructure providers
PetAppro runs on established infrastructure providers that maintain recognized, independently audited security certifications, including certifications such as SOC 2. Those certifications apply to the infrastructure providers and do not represent a SOC 2 or other security certification of PetAppro or Base509.
Personal information, retention, and deletion
Our Privacy Policy explains how Base509 collects, uses, discloses, retains, and deletes personal information. Our Data Processing Addendum describes the security and data-protection commitments that apply when Base509 processes Provider Personal Data for a Provider.
Security incidents
Base509 investigates and responds to security incidents. Our commitments concerning breach notification and cooperation with Providers are described in the Data Processing Addendum.
Reporting a potential vulnerability
If you believe you have found a potential security vulnerability in PetAppro, please email support@base509.com. Include a clear description of the issue, the affected page or feature, and steps that may help us reproduce it. Do not include passwords, authentication codes, full payment-card numbers, home-access codes, or personal information that is not yours.
We appreciate good-faith security reports and will look into them. Please avoid disrupting PetAppro or accessing, changing, retaining, or disclosing information beyond what is necessary to describe the potential issue.
A shared and continuing responsibility
No online service can guarantee absolute security, and PetAppro cannot promise that a security incident will never occur. Base509 works continuously to protect the platform and improve its safeguards as technology and risk change.
Contact
Base509 LLC
support@base509.com