Privacy Policy

Last Updated: September 9, 2026

1. Who controls your information

Cotl, Inc., a corporation incorporated in the State of Delaware, is responsible for the personal information covered by this Policy. Cotl offers the Services for use in the United States. Contact details and request channels appear in Section 18.

2. A practical overview

• You control what goes into your household profile and what appears in each Care Notes PDF or link.

• Your home address, entry instructions, and other home information are not automatically shown to a sitter. They are visible through Care Notes only when you deliberately select them for that sharing occasion.

• You may share Care Notes as a PDF or, on a paid plan, through a link. A link may remain live until you turn it off or may be viewable only during a period you select. People who receive a Care Notes link do not need a Cotl account or accept terms with Cotl. A working link acts like a credential and may be forwarded, so share it only with people you trust.

• Cotl uses service providers to host the Services, process payments, deliver communications, analyze and secure the Services, and provide AI-enabled functions you request or use.

• Cotl does not sell your personal information for money. Some disclosures to advertising, analytics, marketing, affiliate, or attribution providers may be considered “sharing,” a “sale,” or targeted advertising under certain state privacy laws.

• You can update information, turn Care Notes links on or off, request deletion, and, where available, export account information. Email privacy@cotl.pet for a privacy request.

3. Personal information we collect

3.1 Account and authentication information

When you create or access an account, we collect information such as your name, email address, account ID, email-verification status, authentication data, sign-in events, and authentication method. If you use a third-party sign-in method, we receive the account information you authorize that provider to disclose to us.

3.2 Household, pet, and care information

We collect the information you choose to add to a household or pet profile. It may include a home address and access instructions; household rules; pet identity and photographs; feeding, routines, medications, preventatives, allergies, health history, behavior, preferences, emergency instructions, and other details; veterinary, caregiver, backup, or emergency contacts; and information for aging, end-of-life, or longer-term care planning.

Pet information is usually not personal information by itself, but it can become linked to you, your household, a contact, or a location. We treat the combined profile as private account content. Please provide personal information about another person only when you have a lawful reason and permission to do so.

3.3 Uploaded sources and AI-related information

We collect documents, PDFs, photographs, images, text, and related information that you upload, paste, connect, or otherwise provide as a source. If you use an AI-enabled feature, we may also collect your prompts and questions; relevant portions of your pet and household record; information extracted, retrieved, or organized from sources; generated summaries, answers, drafts, or other outputs; your edits and feedback; and information about how you use the feature.

3.4 Care Notes and sharing

When you create Care Notes, we collect the selected content; a recipient’s first name, last name, email address, and phone number; the sharing format you select; and, for a link, the access settings and status needed to create and operate the share. If you direct Cotl to send Care Notes or related communications to a recipient, we use that information to send Care Notes or related communications to the recipient by email and/or SMS/text messaging at your direction.

3.5 Subscription and payment information

Payments are processed through third-party payment providers. We and those providers may collect information such as your name, email address, billing address, payment method details, transaction information, provider identifiers, subscription plan and status, renewal information, refunds, and disputes. A payment provider’s own privacy policy applies to information it processes independently.

3.6 Device, usage, and cookie information

When you use the Services, we and our providers may automatically collect IP address, approximate location derived from IP, browser and device type, operating system, referring page, pages or features used, event timestamps, cookie or similar identifiers, local-storage information, performance data, and security or fraud signals. Browser or device controls may allow you to remove locally stored information, although doing so may sign you out or affect functionality.

3.7 Communications and support

We collect the messages, attachments, contact details, and related records you provide when you contact support, request account access, submit feedback, exercise a privacy right, communicate about an estate or incapacity, or otherwise correspond with us. We also keep records of notices, consent, and preference changes where appropriate.

3.8 Information from other sources

We may receive information from authentication providers, payment processors, email-delivery providers, analytics and advertising providers, affiliate and attribution providers, and security providers. A pet owner may also provide your contact information in their profile or Care Notes. If you are a recipient, the pet owner—not Cotl—decides what information to provide about you and what to share with you.

4. How we use personal information

We use personal information to:

• create, authenticate, and administer accounts;

• store, organize, display, edit, export, and back up household and pet information;

• create Care Notes PDFs and, for paid plans, Care Notes links; apply the access settings you select; allow you to turn links on or off; and send Care Notes or related communications to recipients by email and/or SMS/text messaging at your direction;

• provide AI-enabled functions, including extracting, organizing, searching, retrieving, summarizing, answering questions about, and generating drafts or other outputs from information available through the Services;

• process subscriptions, renewals, cancellations, refunds, tax, accounting, and fraud or chargeback matters;

• send transactional, security, billing, legal, support, and—if permitted—marketing communications;

• provide support, investigate reported problems, recover accounts, and administer privacy, estate, or authorized-representative requests;

• secure the Services, detect abuse, enforce our Terms of Service, prevent unauthorized access, debug errors, and maintain reliability;

• measure use, understand how features perform, improve the product, develop new features, and conduct internal analysis;

• support marketing, advertising, affiliate, attribution, and campaign measurement and, subject to your choices, personalize or target marketing on the public website; and

• ·comply with law, legal process, and enforceable governmental requests; establish or defend legal claims; and protect people, animals, property, rights, and the integrity of the Services.

5. AI-enabled features

Cotl may use artificial-intelligence models and related technologies to provide features that work with a persistent pet and household record. Depending on the feature, Cotl may use AI to extract and organize information from sources; search or retrieve record content; summarize or synthesize information; answer questions; and generate drafts or other outputs. To perform a request, we may process your prompt, the sources you select, account and usage information, and portions of the record that we determine are relevant.

We disclose information used for these features to AI model providers, cloud and infrastructure providers, and other service providers that help Cotl generate, secure, evaluate, support, or improve the feature. The information disclosed may include prompts, selected sources, relevant record content, retrieved passages, outputs, and feedback. Those providers and the technologies Cotl uses may change over time.

AI output is not a verified record or professional advice and may be inaccurate or incomplete. AI-enabled features are intended to assist you, not make legally significant decisions about you or determine appropriate care for a pet. You are responsible for reviewing output against the underlying sources and your current knowledge before relying on, saving, or sharing it. A source, information saved from it, and generated output may be maintained separately, so deleting one does not necessarily delete the others.

6. How we disclose personal information

6.1 At your direction

We disclose profile information to the people you select through the Care Notes PDFs or links you share. When you enable or request direct delivery, Cotl may use the recipient information you provide to send Care Notes or related communications by email and/or SMS at your direction. Each Care Notes share is based on the fields you deliberately select for that occasion. Home address, entry instructions, and other home details appear only if you select them. A Care Notes link may remain live until you turn it off or may be viewable only during a period you select. An indefinite link may reflect the latest profile information selected for that share as you update it.

A recipient may forward, copy, print, download, photograph, or otherwise retain shared information. Cotl cannot control or recall copies a recipient has made outside the Services. Turning off a link or ending its selected access period prevents later access through Cotl but does not erase those copies.

6.2 Service providers

We disclose information to vendors and contractors that process it for us or help us operate the Services. Categories of service providers include:

• website, application, cloud-hosting, database, file-storage, content-delivery, authentication, and security providers;

• payment, subscription-billing, tax, accounting, fraud-prevention, and transaction-support providers;

• email, customer-support, and other communications providers;

• AI model, AI infrastructure, document-processing, search, retrieval, evaluation, and related technology providers;

• analytics, performance, debugging, error-monitoring, and product-development providers;

• advertising and marketing providers, affiliate and attribution providers, and form and embedded-content providers, subject to your available choices; and

• attorneys, accountants, auditors, insurers, consultants, and other professional advisers.

A provider may process information under Cotl’s instructions or, for some functions, under its own terms and privacy policy. Additional information about Cotl’s current providers is available on Cotl’s Service Providers and Subprocessors page. Provider identities, functions, and processing locations may change as the Services evolve.

6.3 Legal, safety, and rights-protection disclosures

We may preserve or disclose information if we reasonably believe it is necessary to comply with law, legal process, or an enforceable government request; protect the rights, safety, or property of Cotl, our users, other people, or animals; investigate fraud, security incidents, abuse, or Terms of Service violations; or establish, exercise, or defend legal claims.

6.4 Corporate transactions

We may disclose or transfer personal information in connection with an actual or contemplated financing, merger, acquisition, restructuring, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law.

6.5 Aggregated or de-identified information

We may create and use aggregated or de-identified information that cannot reasonably be linked to you or a household. We may use it for product analysis, research, reporting, and business purposes and disclose it to others. We do not attempt to re-identify information that we maintain as de-identified, except to test whether our de-identification processes work or as law permits.

7. Cookies, analytics, and advertising choices

7.1 Public marketing website

The public website may use cookies, pixels, tags, local storage, and similar technologies. Essential technologies keep the site functioning and secure. Analytics technologies help us understand visits and performance. Advertising, affiliate, and attribution technologies support advertising, affiliate, attribution, and campaign measurement.

7.2 Application and Care Notes

The application may use cookies, local storage, and similar technologies for authentication, preferences, security, performance, analytics, measuring usage and engagement, understanding feature usage, product improvement, and marketing or conversion measurement. Care Notes pages may use technologies needed to display the content and apply the link settings selected by the account holder. Cotl does not use private household information, Care Notes content, pet-care content, or home-entry information for targeted advertising.

7.3 Your controls

You can adjust browser settings, clear cookies or local storage, or use available privacy tools. Blocking essential technologies may prevent sign-in or other features from working. Email marketing messages provide an unsubscribe method.

8. Sale, sharing, and targeted advertising

Cotl does not sell personal information for money. We do not sell or use household profiles, uploaded documents, pet-care details, Care Notes content, or home-entry information for targeted advertising.

Across the Services, including the website and application, advertising, analytics, marketing, affiliate, or attribution providers may receive information used for analytics, engagement, marketing, advertising, affiliate, attribution, and conversion measurement. This information may include cookie, device, and similar identifiers; page or screen activity; feature and interaction events; account-creation and conversion events; subscription-related events; referral or attribution information; and related event properties where applicable. Some state laws define these disclosures as “sharing,” a “sale,” or processing for targeted advertising even when no money changes hands.

9. Data retention

We retain personal information for the period Cotl determines is appropriate for the purposes described in this Policy. The period may depend on the nature and sensitivity of the information; why it was collected or generated; how the applicable feature works; whether an account, subscription, share, or relationship remains active; the user’s choices; the risk of harm from unauthorized use or disclosure; and applicable legal, tax, accounting, security, fraud-prevention, operational, recordkeeping, and dispute-resolution requirements.

Different categories and copies of information may be retained for different periods. For example, account content may be retained while an account is active; transaction and consent records may be retained for business or legal purposes; logs and temporary copies may be retained for security and operations; and residual copies may remain in backups until they are overwritten or no longer needed. We may retain information longer when needed to comply with law, preserve evidence, enforce agreements, investigate security or abuse, resolve a dispute, or exercise or defend legal claims. We may delete or de-identify information when it is no longer needed.

Service providers may retain information in accordance with their role, contracts, legal obligations, and independent policies. A Care Notes recipient or other person may retain copies of information you shared, and Cotl does not control that person’s retention.

10. Where information is processed

Cotl offers the Services for use in the United States. Cotl and its service providers may process personal information in the United States and other locations where they operate. Those locations may have data-protection laws that differ from the laws where you live. Cotl uses safeguards for transfers where applicable law requires them.

11. Security

Cotl uses administrative, technical, and organizational safeguards designed to protect personal information, taking into account the nature of the information and the Services. Cotl also uses service providers to support the security and operation of the Services.

No system is perfectly secure. You are responsible for protecting your email account, password, sign-in codes, devices, exported files, and Care Notes links. Email is not a secure channel for sending passwords, access codes, or unnecessary home-entry information. If you believe your account or a Care Notes link has been compromised, contact support@cotl.pet and turn the link off if you can.

12. Your account controls

12.1 Review and correction

You can review and edit profile information in the Services. Contact support@cotl.pet if an account field cannot be changed directly. Correct important pet-care information promptly and review it before every share.

12.2 Export

An account holder may be able to export available account information in the formats and subject to the verification requirements Cotl makes available. An export may contain sensitive household details. Store and transmit it securely.

12.3 Delete a file or profile value

A source, information extracted or saved from it, and AI-generated output may be stored separately. Deleting one does not necessarily delete the others. Where Cotl provides separate deletion controls, you may need to delete these categories separately. You may request account deletion as described in Section 13 for a broader deletion request.

12.4 Turn Care Notes links on or off

You can turn a Care Notes link on or off through your account. Turning off a link stops later access through Cotl but cannot recall a PDF, screenshot, printout, or other copy a recipient already made.

12.5 Cancel a subscription

You can cancel automatic renewal using the cancellation method Cotl makes available, subject to applicable law. Subscription cancellation does not automatically delete your account or information. The Terms of Service explain how cancellation affects paid features and Care Notes.

13. Account deletion

You may request deletion of your account through the controls Cotl makes available or by emailing privacy@cotl.pet or support@cotl.pet. We may verify the request to protect against unauthorized deletion. Cotl will process a verified deletion request in accordance with applicable law, subject to information Cotl or its providers may retain for legal, tax, accounting, security, fraud-prevention, operational, backup, dispute-resolution, or other permitted purposes.

Deletion may be permanent and may prevent recovery of your record, sources, outputs, exports, and share history. Download anything you want to keep before confirming deletion. Deletion may take time to propagate through systems and backups, and it does not remove copies retained by people to whom you disclosed information. Cotl will respond to privacy requests within the period required by applicable law.

14. United States state privacy rights

Depending on where you live and whether a state privacy law applies to Cotl, you may have the right to request that we:

• confirm whether we process your personal information and provide access to it;

• provide a portable copy of personal information you gave us;

• correct inaccurate personal information;

• delete personal information, subject to legal exceptions;

• disclose categories of personal information, sources, purposes, and recipients;

• opt you out of sale, sharing, targeted advertising, or certain profiling;

• limit certain uses or disclosures of sensitive personal information, where the right applies; and

• review an appeal if we deny a request, where applicable.

We will not discriminate against you for exercising a privacy right. To submit a request, email privacy@cotl.pet and describe the right you wish to exercise. We may ask for information reasonably necessary to verify your identity and connection to the account. We may use verification information to verify and administer the request, protect account security, prevent fraud or unauthorized requests, and comply with applicable law. If we cannot verify a request, we may be unable to fulfill it.

An authorized agent may submit a request where state law permits, but we may require proof of authorization and may verify the request directly with you. To appeal a denial, reply to our decision or email privacy@cotl.pet with the subject “Privacy Appeal.” You may also contact your state attorney general or other regulator. Rights and exceptions vary by state, and Cotl will apply the law that governs your request.

15. Children

The Services are not directed to children, and account holders must be at least 18. Cotl does not knowingly collect personal information directly from anyone under 13. If you believe a child has submitted personal information to Cotl, contact privacy@cotl.pet. We will investigate and delete it when required. Adults should avoid placing unnecessary information about children in a pet or household profile.

16. Estate, incapacity, and authorized-representative requests

A living account holder should use Cotl’s ordinary account-recovery process. Unless Cotl expressly provides otherwise through a designated legacy-access or authorization feature, identifying a caregiver, backup contact, or other person does not make that person a legacy contact or authorize access to the account. A legally authorized representative of an incapacitated or deceased account holder may contact legal@cotl.pet to request an export or deletion. We may require documentation sufficient to verify identity and legal authority and may limit disclosure to what law permits.

17. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy and revise the effective date. We will provide additional notice or obtain consent where required by applicable law.

18. Contact us

Privacy questions and requests:
privacy@cotl.pet

General support:
support@cotl.pet

Estate, incapacity, and legal requests:
legal@cotl.pet

Cotl, Inc.
367 St Marks Ave #1129
Brooklyn, NY 11238