Privacy Policy

1. Data We Collect

We collect the following information when you use VetStream:

• Account information: name, email address, and a securely hashed password.
• Lab reports: veterinary laboratory reports you upload for AI parsing.
• Payment information: billing details processed securely by Stripe. We do not store credit card numbers on our servers.
• Usage data: records of parse and email generation activity for billing and rate-limiting purposes.

2. How We Use Your Data

Your data is used to:

• Process and parse lab reports using AI technology.
• Generate draft client emails based on parsed results.
• Send transactional emails (account verification, password resets).
• Process subscription payments and manage billing.
• Enforce usage limits based on your subscription tier.

3. Third-Party Processors

We share your data with the following third-party service providers, solely for the purposes described:

• OpenAI: processes lab report content for AI-powered parsing and email generation.
• Stripe: handles payment processing and subscription management.
• Resend: delivers transactional emails (verification, password reset).
• Supabase: hosts our PostgreSQL database where account and usage data is stored.

4. Data Sharing

We do not sell, rent, or trade your personal information. Your data is only shared with the third-party processors listed above as necessary to provide the Service. We may disclose information if required by law or to protect our legal rights.

5. Payment Data

All payment information, including credit card details, is collected and processed directly by Stripe. VetStream never receives, stores, or has access to your full card numbers. For more information, see Stripe's Privacy Policy.

6. Data Retention & Deletion

We retain your account data and usage records for as long as your account is active. Lab report data is retained to provide your parse history. You may request deletion of your account and all associated data at any time by contacting us. Upon receiving a deletion request, we will remove your data within 30 days, except where retention is required by law.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and personal data.
• Export your data in a portable format.

To exercise any of these rights, contact us at support@vetstream.org.

8. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You have the right to know what personal information we collect about you and how it is used.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt Out: You have the right to opt out of the sale of your personal information. VetStream does not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of personal information we collect: identifiers (name, email address), commercial information (subscription and billing records), internet or network activity (usage logs), and professional information (veterinary practice details).

To exercise any of these rights, contact us at support@vetstream.org.

9. OpenAI & AI Data Usage

VetStream uses the OpenAI API to parse lab reports and generate client emails. Important details about how your data is handled by OpenAI:

• OpenAI's API does not use your inputs or outputs to train their models by default.
• Lab report content sent to OpenAI is processed solely for the purpose of parsing and email generation.
• OpenAI may retain API data for up to 30 days for abuse and misuse monitoring, after which it is deleted.

For full details, see OpenAI's API data usage policy.

10. Cookies

VetStream uses only essential authentication session cookies required for the Service to function. We do not use analytics, advertising, or third-party tracking cookies.

11. Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure password hashing, and access controls. While we strive to protect your information, no method of transmission over the Internet is 100% secure.

12. Children's Privacy

VetStream is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Information

If you have any questions about this Privacy Policy, please contact us at support@vetstream.org.