Terms of Service

These Terms govern your use of the Petra platform: the websites at petraverify.id, the owner app at owner.petraverify.id, the vet app at vet.petraverify.id, the public verifier at petraverify.id/verify, and the APIs that back them. The platform is operated by Petra Inc., a Delaware corporation (“Petra”, “we”, “us”).

Petra is built around a simple principle: your data stays yours. If you’re a clinic, the credentials you issue and the records you keep belong to your clinic. If you’re a pet owner, the pet profile and records you create belong to you. Petra operates the platform; it does not own anything in it. Petra holds issuer signing keys in hardware-isolated storage (AWS KMS under per-clinic isolation) so clinics can issue credentials without running their own key infrastructure. Section 4 spells out the ownership model in detail; the rest of these Terms exist so the platform can run.

1. Who can use Petra

Petra has two kinds of accounts: clinic accounts (held by licensed veterinary clinics and their staff) and owner accounts (held by individuals on behalf of one or more animals). You can create an account if you’re at least 18 years old and capable of entering into a binding agreement under the law of your jurisdiction.

Clinic accounts are scoped to a single legal entity. If you sign up on behalf of a clinic, you confirm that you’re authorized by that clinic to do so. We may verify clinic credentials (e.g., USDA accreditation, state license) before turning on features that issue verifiable certificates.

2. Your account

You’re responsible for keeping your sign-in credentials secret. Tell us at hello@petraverify.id if you suspect unauthorized access. We use WorkOS AuthKit for authentication and store sealed session cookies on the domains above; see the Privacy Policy for details.

Clinic-staff accounts inherit the access of the clinic they belong to. Adding, removing, or changing the role of staff is the clinic’s responsibility through its administrators in the Petra vet app.

3. What Petra provides

The platform offers, among other things:

• Tools for clinics to issue digitally signed credentials (rabies vaccinations, USDA Form 7001, EU AHC, FAVN titer, heartworm test, and others as the catalog grows)
• Tools for owners to maintain a pet profile and gather records
• A patient intake flow that clinics can send to new clients
• A public verifier surface (petraverify.id/verify) anyone can use to validate a credential’s signature and revocation status without a Petra account
• Travel-day packet generation, destination-rule checks, wallet pass issuance, and the supporting APIs

We may add, change, or retire features. Material changes will be communicated in advance through the app or by email.

4. Who owns what

This section is load-bearing. Petra’s product only works if the trust relationships are clear, so we state them here, not in fine print.

Credentials issued by a clinic

When a clinic issues a credential through Petra, the signing key used to sign it belongs to that clinic. Petra operates that key on the clinic’s behalf in hardware-isolated storage (AWS KMS under per-clinic isolation) so the clinic can sign without running its own key infrastructure. The clinic remains the issuer of record. Credentials issued by a clinic are owned by that clinic. If a clinic leaves Petra, the credentials it has issued remain verifiable through Petra’s public verifier surface and, where commitments have been published, through any trust network described below. We will return a portable, machine-readable export of every credential the clinic issued. Revocation requests are honored through Petra’s verifier surface for as long as the credentials are in our index. The signing-key material Petra operates is not exported on departure, to prevent post-departure misuse of the clinic’s old identity; the clinic retains the issuer-of-record claim through the credentials already signed and the public key already published.

You authorize Petra to publish anonymous credential commitments (cryptographic hashes and revocation status only, never personal data) derived from credentials issued through the platform to a trust network operated by Petra or by a federation of credential issuers and registries. Petra may participate in, contribute to, or operate such a network. Nothing about the data-ownership model in this section changes if and when commitments are published.

Pet profiles and uploaded records

Pet profiles, microchip identifiers, photos, uploaded health records, and any notes an owner adds are owned by the owner. Owners can export, edit, and delete their data at any time through the owner app. Deleted data is removed from the live database and purged from backups within 30 days. The rights Petra licenses from the owner to operate the platform (including making credentials verifiable to whoever the owner presents them to, and anchoring anonymous commitments to the trust network) are described below in “What Petra does and does not claim.”

What Petra does and does not claim

Petra has no ownership stake in clinic-issued credentials or owner-uploaded records. We license a minimal set of rights from you to operate the platform: store, process, serve, back up, transmit, and (per the network paragraph above) publish anonymous commitments derived from your credentials, and to make verification work the way it has to. We may use aggregated, de-identified data to operate and improve the platform and to support any trust network described above. We do not sell your data, share it for advertising, or use your personal data to train machine-learning models for parties other than you.

5. Sharing and consent

Sharing is owner-driven. Credentials become visible to a third party only when the owner generates a share link, sends a verifiable packet, or consents to a clinic-to-clinic transfer. Clinics can see records of pets in their own care; they cannot browse other clinics’ patients.

Verifiers (airlines, border officers, boarding facilities, other clinics) can validate a credential through the public verifier or its QR code without a Petra account. The verifier sees what the credential carries: subject identity, credential type, issuer, validity dates, and signature status. Nothing more.

6. Acceptable use

You agree not to:

• Misrepresent yourself, your clinic, or the animals you manage
• Issue a credential you don’t have the legal authority to issue. Credential issuance is gated to credentialed clinic staff for this reason
• Tamper with the platform, attempt to forge signatures, or bypass the verification surfaces
• Use Petra to harass another user or to upload material you don’t have the right to share
• Scrape the platform or its APIs outside the documented endpoints

7. Fees

Owner accounts have a free tier and a paid tier. The free tier covers the data-ownership baseline — creating a pet profile, storing records, viewing credentials your vet has issued, sharing them, and letting anyone verify them — at no charge, with no time limit. The paid tier (“Premium,” with annual, monthly, lifetime, and per-trip billing options) covers the travel-and-continuity workflow that wraps around credentials; current prices and the feature split are published at petraverify.id/owners.

We may change prices for new subscribers from time to time; existing subscribers are not subject to price increases for as long as their subscription remains active and uninterrupted. Lifetime is lifetime. Refunds for owner Premium and Lifetime are available within 30 days of purchase by writing to hello@petraverify.id.

Nothing about this Section 7 changes the data-ownership story in Section 4, and we will never paywall the free-tier baseline above: record storage, viewing vet-issued credentials, sharing them, or the public verifier surface.

8. Termination and data portability

You can close your account at any time. Clinics that leave Petra get a machine-readable export of every credential they issued and the records they uploaded. Owners that leave get a portable archive of their pet profiles, records, and a copy of every credential issued for their pets. Either side can request the export through hello@petraverify.id.

We may suspend or terminate an account for material breach of these Terms, with reasonable notice when the situation allows. Verifiability of credentials already issued does not depend on either party still using Petra. Personal data tied to a terminated account is deleted; any anonymous commitments published under Section 4 are not personal data and remain.

9. Disclaimers and liability

Petra is provided “as is”. While we work hard to make credentials verifiable and the platform reliable, we don’t guarantee that the platform will be uninterrupted, error-free, or that any particular regulator, airline, or border authority will accept a Petra credential at the moment you present it. Verifying that the documents you carry meet the rules of your destination remains your responsibility.

To the maximum extent permitted by applicable law, Petra’s aggregate liability arising out of or relating to your use of the platform is limited to the fees you paid Petra in the twelve months preceding the claim. Neither party is liable for indirect, incidental, special, consequential, or punitive damages. Nothing in this paragraph limits liability that cannot be limited under applicable law.

10. Changes to these Terms

We’ll update these Terms from time to time. When we do, we’ll post the new version at this URL and update the “Last updated” date at the top. Material changes will be announced in the app and by email at least 14 days in advance. Continued use of the platform after a change takes effect is acceptance of the updated Terms.

11. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-law principles. Any dispute will be resolved in the state or federal courts located in Delaware, except that nothing in this section prevents either party from seeking injunctive relief in any court of competent jurisdiction to protect intellectual property or confidential information.

12. Contact

Questions, complaints, or formal notices: hello@petraverify.id. We’ll do our best to respond promptly.