Privacy Notice

Vetnio AB, Swedish company registration number 559494-6807, Grev Magnigatan 10, 114 55 Stockholm, Sweden, is the controller of personal data described in this notice. Contact us at info@vetnio.com.

We collect account and profile data such as your name, email address, password-verification status, optional occupation, authentication and session records, and account-recovery information. We store your acceptance of the Terms, this Privacy Notice, and the Acceptable Use Policy.

We collect questions, relevant conversation history, generated answers, citations, source records, feedback, and saved-chat metadata. We also process technical and usage data such as timestamps, request and usage counters, security events, device or browser information, and IP address where supplied through our hosting and security infrastructure.

We process account, authentication, chat, and service data to create and administer your account, provide saved chats and cited answers, communicate with you, enforce usage limits, and fulfil our agreement with you. The legal basis is performance of a contract or taking steps at your request before entering a contract.

We process limited usage, security, and service data to protect VetsGPT, prevent abuse, troubleshoot, measure performance, and improve the service. The legal basis is our legitimate interests in operating a secure, reliable, and useful service, balanced against your rights. We process data where necessary to comply with legal obligations and, where we specifically request it, on the basis of consent that you may withdraw.

To provide VetsGPT, we use providers of cloud infrastructure, artificial-intelligence services, email delivery, databases, and AI-powered public-source search. A question, limited relevant conversation history, and source material may be sent to an AI service provider to prepare a search query and generate an answer. Our current AI API provider does not use API inputs or outputs to train its general-purpose models by default.

When VetsGPT generates a public-source search query, its instructions require the query to exclude personal identifiers. The search request does not attach your account name, email address, account identifier, or complete chat history. Prompt-based minimisation reduces risk but cannot guarantee that every identifier will be removed.

The public-source search provider may retain and use query data for its own purposes, including operating, securing, developing, improving, training and fine-tuning its technologies. We do not publicly identify individual providers where doing so would reveal confidential service architecture, but we maintain internal records and will provide information about recipients where required by law.

VetsGPT does not require patient or client identity. Do not submit names, contact details, addresses, clinic identifiers, medical-record or customer numbers, microchip numbers, credentials, or other personal, sensitive, or confidential information. Remove or generalise these details before submitting a question.

If you include personal data about another person, you are responsible for having a lawful basis and authority to do so. This does not change the prohibition above.

We disclose data only where reasonably necessary to providers supporting hosting, databases, authentication, transactional email, security, analytics, AI processing, and public-source retrieval; to professional advisers; in connection with a corporate transaction; or to authorities and other parties where required by law or necessary to protect rights, safety, and security.

Some providers process data on our instructions, while a provider may process limited data for its own purposes as described above. We do not sell or rent personal data.

Some recipients may process data outside the European Economic Area. Where a transfer is restricted under applicable data-protection law, we use a recognised transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, and supplementary safeguards where required. You may contact us for information about the relevant safeguards.

We retain account information while your account is active and for a reasonable period afterwards where needed for security, disputes, or legal compliance. Saved chats remain until you delete them, close your account, or the beta is discontinued, subject to backup and legal-retention periods.

Verification and password-reset tokens expire after their stated validity period. Security, usage, and operational records are retained only for as long as reasonably necessary for their purpose. When retention is no longer necessary, data is deleted or irreversibly anonymised.

We use technical and organisational measures intended to protect personal data, including access controls, encryption in transit, and separation between public VetsGPT and private product data. No internet service is completely secure, and we cannot guarantee absolute security.

Depending on applicable law, you may request access to, correction or deletion of your personal data, restriction of processing, data portability, or information about recipients. You may object to processing based on legitimate interests and withdraw consent at any time where consent is the basis. Withdrawal does not affect prior lawful processing.

To exercise a right, contact info@vetnio.com. We may need to verify your identity. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se or with the supervisory authority where you live or work.

VetsGPT is not intended for anyone under 18, and we do not knowingly collect personal data from children through account registration. Contact us if you believe a child has provided personal data.

We may update this notice when our processing, providers, or legal obligations change. We will update the effective date and provide reasonable notice of material changes through VetsGPT or by email where required.