PuppyGenes Material Service Providers

Language: English | Français

This page may be updated when a provider or model changes without rewriting the full Privacy Policy. A change that creates a materially new purpose or risk will receive additional notice or consent where required by law.

Effective date: July 22, 2026

PuppyGenes uses the following material provider categories. A provider receives only the information reasonably needed for its function. Processing location describes the expected or available location and does not exclude limited remote support, security, or subprocessor access from another country.

For Genie, PuppyGenes keeps OpenRouter prompt/response logging and OpenRouter's own improvement use off. If a customer does not separately opt in to optional AI improvement, PuppyGenes routes that customer's requests only to endpoints whose advertised policy says prompt content is not used for model training. We review eligible endpoints' advertised retention and training flags and keep this page current. The AI provider-policy information below was last reviewed on July 22, 2026. “No fixed contractual maximum verified” means that the applicable materials did not give PuppyGenes a binding maximum; it is a material limitation, not a promise of indefinite retention.

Provider	Function and information	Processing location and retention
Amazon.ca / applicable Amazon entity	Retail marketplace, order, payment, fraud screening, fulfillment, delivery, customer service, returns, and refunds for Amazon purchases. Amazon controls information collected in the Amazon transaction under its own notices. PuppyGenes receives the order and customer information Amazon makes available to the seller.	Canada, the United States, and other locations described by Amazon. Amazon controls its own retention.
Stripe	Provides or may provide payment processing, fraud screening, and refunds for direct PuppyGenes transactions. Amazon processes payments for Amazon purchases. Stripe receives payment and transaction information; PuppyGenes does not store full card numbers.	Canada, the United States, and other locations described by Stripe. Stripe controls payment-record retention subject to law.
Supabase	Account authentication, application database, report storage, access control, backups, and related infrastructure.	Primary project region: Canada (Central), `ca-central-1`. Supabase and its subprocessors may perform limited support, security, backup, and infrastructure processing elsewhere. Removal of deleted account data from active systems is ordinarily scheduled within 30 days; restricted backups are targeted to age out within 180 days, subject to the configured plan and documented technical or lawful exceptions.
Vercel and Vercel Analytics	Website and application hosting, delivery, security logs, diagnostics, and configured site-quality analytics. Vercel Web Analytics is configured as cookieless and aggregated. Separate hosting or security logs may process IP address, device/browser information, requested page, errors, and performance measurements.	Canada, the United States, and other Vercel infrastructure locations. Retention follows the configured Vercel plan and PuppyGenes retention schedule. PuppyGenes does not currently use Vercel data for behavioural advertising.
OpenRouter	Server-side AI gateway that routes a Genie prompt, relevant report excerpts, output, and limited request metadata to a selected model endpoint.	Primarily the United States and the location of the selected endpoint. Under PuppyGenes' Genie configuration, OpenRouter prompt/response logging and OpenRouter improvement use are off; OpenRouter states that it therefore does not store prompt/response content. It retains non-content request metadata. OpenRouter also states that it samples a small number of prompts for anonymous input categorization used for reporting and model ranking; when its improvement use is off, the categorization is stored without association to an account or user ID and is performed using a zero-data-retention model. No fixed contractual maximum for non-content request metadata has been verified.
Claude Opus model endpoints routed through OpenRouter	Generates a Genie response when a model such as Claude Opus, developed by Anthropic, is selected. Receives the limited Genie content routed through OpenRouter. The endpoint operator may be Anthropic or another eligible operator.	The United States or another location identified for the selected endpoint. Without the customer's optional AI-improvement consent, PuppyGenes uses only endpoints advertised as not training on prompt content; limited safety, abuse-prevention, support, or legal retention and human review may still apply. With that separate consent, an endpoint operator may use the prompt, relevant report excerpts, and response to develop, improve, update, or train AI systems, including evaluating the content and results for that purpose. Because routing may change between eligible endpoints, no single fixed contractual retention maximum has been verified.
Grok model endpoints routed through OpenRouter	Generates a Genie response when a model such as Grok, developed by xAI, is selected. Receives the limited Genie content routed through OpenRouter. The endpoint operator may be xAI or another eligible operator.	The United States or another location identified for the selected endpoint. Without the customer's optional AI-improvement consent, PuppyGenes uses only endpoints advertised as not training on prompt content; limited safety, abuse-prevention, support, or legal retention and human review may still apply. With that separate consent, an endpoint operator may use the prompt, relevant report excerpts, and response to develop, improve, update, or train AI systems, including evaluating the content and results for that purpose. Because routing may change between eligible endpoints, no single fixed contractual retention maximum has been verified.
U.S. academic laboratory partner	Receives the physical cheek swab, a coded sample identifier, and only additional direct identifiers reasonably necessary and disclosed at activation; performs the purchased analysis; and returns derived results and quality information. Service validation means quality or method checks directly related to the purchased analysis, not unrelated external research.	Los Angeles, California, United States. The laboratory may retain the physical sample and derived laboratory information for the purchased analysis, documented quality control and service validation, recordkeeping, and legal requirements. No fixed contractual retention maximum has yet been verified, so PuppyGenes does not promise destruction by a fixed date. A customer may ask PuppyGenes to forward a destruction or deletion request; completion depends on the laboratory's practices and applicable legal, safety, quality-control, and technical restrictions.
Shipping, email, and support providers used for a transaction	Delivery address and shipment data; email address and message content; or support information needed to provide the requested service.	Canada, the United States, or another location disclosed by the relevant provider and assessed by PuppyGenes. Retained only for the applicable delivery, communication, support, security, and legal periods.

PuppyGenes may replace a provider or model where the replacement performs the same disclosed function with privacy and security protections PuppyGenes has assessed as appropriate. We will update this page. We will provide any additional notice or obtain new consent required for a materially new purpose or risk.

Questions: support@puppygenes.com or 416-315-6352.