This Privacy Policy describes how Veterinary AI collects, uses, stores, and protects users' personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Please read it carefully before using our services, which are intended exclusively for persons aged 18 or over.
Veterinary AI · Contact: support@veterinaryai.ai · Scope: the website https://veterinaryai.ai and all of its services.
| Name | Veterinary AI |
|---|---|
| Activity | Virtual pet health guidance assistant powered by artificial intelligence |
| support@veterinaryai.ai | |
| Website | https://veterinaryai.ai |
| Applicable law | GDPR (EU) 2016/679 · LOPDGDD 3/2018 |
We collect different categories of data depending on how the user interacts with the platform:
Conversations on the platform mainly contain information about the health of the user's pet (symptoms, history, diet, behavior). Data relating to animals is not, in itself, personal data under the GDPR. However, since it is linked to the user's account, we treat it with the same confidentiality and security safeguards as personal data.
If a conversation happens to include personal information about the user or third parties, that information is processed under this Policy. Veterinary AI does not use this data to make clinical decisions, issue diagnoses, or share it with insurers, employers, or any unauthorized third party.
Each processing operation we carry out has a specific purpose and a specific legal basis under Article 6 of the GDPR:
| Purpose | Data processed | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Managing registration and account access | Email, password, username | Performance of a contract (Art. 6.1.b) |
| Providing the AI assistant service | Conversations, session data | Performance of a contract (Art. 6.1.b) |
| Managing subscriptions and payments | Billing data, payment history | Performance of a contract (Art. 6.1.b) + Legal obligation (Art. 6.1.c) |
| Sending transactional communications | Performance of a contract (Art. 6.1.b) | |
| Sending marketing communications and newsletters | Email, name | Consent (Art. 6.1.a) + Art. 21 LSSI |
| Analysis and service improvement | Anonymized usage data | Legitimate interest (Art. 6.1.f) |
| Personalized advertising on Meta (Facebook/Instagram) | Browsing data, Meta Pixel, audience lists | Consent (Art. 6.1.a) via cookie management |
| Compliance with legal obligations (tax, accounting) | Billing data | Legal obligation (Art. 6.1.c) |
| Security, fraud prevention, and abuse detection | IP, session data, logs | Legitimate interest (Art. 6.1.f) |
To provide the service, Veterinary AI works with the following providers, which act as processors under Article 28 of the GDPR:
| Provider | Function | Country / Location | GDPR safeguards |
|---|---|---|---|
| Anthropic, PBC | Conversation processing (Claude AI model) | USA / multi-region | DPA + Standard Contractual Clauses (SCCs) modules 2 and 3 |
| Hostinger International Ltd. | Platform hosting and web infrastructure | Lithuania (EU) | Within the EEA — no international transfer |
| Stripe, Inc. | Payment processing and subscription management | USA / EU office in Ireland | DPA + SCCs + PCI-DSS certification |
| Brevo (Sendinblue SAS) | Transactional emails and marketing communications | France (EU) | Within the EEA — no international transfer |
| Meta Platforms Ireland Ltd. | Advertising on Facebook and Instagram (Meta Pixel, audiences) | Ireland (EU) / USA | DPA + SCCs + EU-US Data Privacy Framework |
Some of the providers listed above involve transfers of data outside the European Economic Area (EEA), mainly to the United States. Such transfers are covered by the Standard Contractual Clauses adopted by the European Commission (Implementing Decision 2021/914) and, in Meta's case, additionally by the EU-US Data Privacy Framework, adopted by an Adequacy Decision of the European Commission in July 2023.
Veterinary AI uses the Anthropic API under commercial terms (not a consumer account). Under this arrangement, Anthropic deletes conversation inputs and outputs within a maximum of 30 days of receipt or generation, and does not use API data to train its AI models by default. In the exceptional case that a conversation is flagged by abuse detection systems, retention may be extended to up to 2 years in accordance with Anthropic's acceptable use policy.
Veterinary AI uses Meta Ads (Facebook Ads and Instagram Ads) to promote its services. This involves the following technologies:
The Meta Pixel is a JavaScript code snippet that Veterinary AI installs on its website. When a user visits the site and has accepted marketing cookies, this pixel collects information about their behavior (pages visited, actions taken, conversions) and sends it to Meta Platforms for the following purposes:
Important: The Meta Pixel is only activated if the user has given prior consent through the cookie management panel. If the user rejects marketing cookies, the pixel will not run and no data will be sent to Meta. Users may withdraw their consent at any time from the website's cookie settings.
Veterinary AI may share with Meta, in encrypted form (SHA-256 hash), lists of email addresses of users who have given their express consent to receive marketing communications. This practice is known as Custom Audiences from Customer List and allows specific ads to be shown to those users on Facebook and Instagram. Users may object to this practice at any time by contacting support@veterinaryai.ai or directly through their Facebook account's ad settings.
In relation to the use of the Meta Pixel, Veterinary AI and Meta Platforms Ireland Ltd. act as joint controllers within the meaning of Article 26 of the GDPR, under the Controller Addendum entered into with Meta. For more information on how Meta processes data, please see the Meta Privacy Policy.
Veterinary AI does not use or share with Meta any data from conversations held on the platform, nor any data that could reveal the health of the user's pet or the user's personal circumstances. The Meta Pixel operates exclusively at the level of browsing behavior (visits, clicks, conversions) and never accesses conversation content. This restriction is absolute and non-waivable.
Veterinary AI uses Brevo (Sendinblue SAS), a company based in France (EU), to send electronic communications to its users. Brevo acts as a processor and has a GDPR-compliant DPA in place.
To send emails, Brevo receives and processes: email address, username, and technical delivery metadata (open rate, clicks, bounces). No conversation data is transmitted to Brevo.
Users may unsubscribe from marketing communications at any time and without giving a reason, using the "Unsubscribe" link included in the footer of every marketing email, by writing directly to support@veterinaryai.ai, or through the preference settings in their account panel.
The website uses first-party and third-party cookies. The main categories are described below:
| Category | Purpose | Examples | Consent |
|---|---|---|---|
| Technical / Strictly necessary | Basic site operation, user session, security | Session cookie, CSRF token | Not required (Art. 22.2 LSSI) |
| Analytics | Analysis of traffic and user behavior in aggregate form | Google Analytics / in-house analytics tool | Required |
| Marketing / Advertising | Conversion measurement, remarketing, custom audiences | Meta Pixel (_fbp, _fbc) | Required |
| Preferences | Remembering user settings (language, interface preferences) | Interface configuration cookies | Required |
For more detailed information on the cookies used, their duration, and the third parties involved, please see our Cookies Policy available on the website. Users may manage or withdraw their consent at any time through the cookie preferences panel.
| Data category | Retention period | Justification |
|---|---|---|
| Account data (email, name) | Duration of the contractual relationship + 5 years after closure | Legal obligation (limitation period for civil claims) |
| Conversation history (platform) | While the account remains active, or until a deletion request | Performance of the service |
| Conversations on Anthropic servers | Maximum 30 days (commercial API) | Anthropic's retention policy for API customers |
| Billing data | 5 years from the date of invoice | Tax obligation (Spanish General Tax Law 58/2003) |
| Security and access logs | 12 months | Legitimate interest in security + Art. 12 LSSI |
| Email marketing data (subscribers) | Until consent is withdrawn or the user unsubscribes | Consent (revocable) |
| Marketing cookie data (Meta Pixel) | Maximum 90 days for _fbp / _fbc cookies | Meta Platforms policy |
Users may exercise the following rights against Veterinary AI as data controller at any time:
| Right | What it means |
|---|---|
| Access | Obtain confirmation as to whether their data is being processed and access it. |
| Rectification | Request the correction of inaccurate or incomplete data. |
| Erasure | Request the deletion of their data when it is no longer necessary or consent is withdrawn. |
| Restriction | Request the suspension of processing in certain circumstances. |
| Portability | Receive their data in a structured, commonly used format to transmit it to another controller. |
| Objection | Object to processing based on legitimate interest or for direct marketing purposes. |
| Withdrawal of consent | Withdraw consent at any time without affecting prior processing. |
| Not to be subject to automated decisions | Request human intervention in decisions taken solely by automated systems that significantly affect them. |
How to exercise your rights: By sending an email to support@veterinaryai.ai indicating the right you wish to exercise and attaching a copy of your identity document. We will respond within a maximum of 30 days of receiving the request.
Complaint to the AEPD: If you believe that the processing of your data does not comply with applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency: www.aepd.es
Veterinary AI applies appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR:
In the event of a security breach that poses a risk to users' rights and freedoms, Veterinary AI will notify the AEPD within a maximum of 72 hours of becoming aware of it, and will inform affected users without undue delay, in accordance with Article 34 of the GDPR.
The service is intended exclusively for persons aged 18 or over. Upon registration, users expressly declare that they are of legal age. Veterinary AI does not knowingly collect data from minors. If it is detected that a user is under 18, their account will be cancelled immediately and their data deleted.
Under Article 7 of the LOPDGDD, consent for the processing of data of children under 14 requires the consent of their parents or legal guardians; nevertheless, given the nature of the service, it remains reserved to persons aged 18 or over.
Veterinary AI reserves the right to amend this Privacy Policy to adapt it to legislative or case-law developments or changes to the services provided. Any material change will be communicated to users by email at least 15 days before it takes effect. The updated version will always be available on the website, stating the date it was last updated.
This Privacy Policy is governed by Spanish law and by European data protection legislation. For the resolution of any dispute relating to it, the parties submit to the courts corresponding to the user's domicile in Spain or, where the user is domiciled outside Spain, to the courts of the controller's domicile, without prejudice to the user's right to lodge a complaint with the AEPD or with the supervisory authority in their country of residence.
