LEGAL // PRIVACY

Privacy Policy

How VetIOS handles clinical data, inference traces, and operator telemetry across the platform mesh.

Data Collection Architecture

VetIOS is designed with a privacy-first clinical mesh. We collect three primary categories of data to facilitate veterinary intelligence:

Clinical Signal Ingress: Inputs provided for inference, including species, breed, symptoms, and vitals. This data is processed through our CIRE (Clinical Intelligence Runtime Engine).
Inference Traces: Metadata regarding model resolution, confidence bands, and performance metrics used for system optimization.
Operator Telemetry: Usage patterns within the console to ensure security, auditability, and platform stability.

Security & Encryption

All data is encrypted in transit via TLS 1.3 and at rest using AES-256. We utilize Supabase for robust authentication and Row Level Security (RLS) to ensure that clinical signals are only accessible to authorized tenants.

Third-Party Disclosure

VetIOS does not sell clinical data. We may use anonymized, aggregated signals to train and refine our veterinary models, but specific patient or clinic identities are never shared with external advertisers.

Google API Services — User Data Policy

VetIOS uses Google OAuth through Supabase Auth for sign-in only. The integration requests standard OpenID Connect scopes and does not access Google Drive, Calendar, Gmail, Workspace APIs, or any other Google service. VetIOS requests minimum scopes only.

Data Accessed

Email address: The email scope is used as the unique account identifier.
Basic profile: The profile scope provides display name and profile picture for console personalisation.
OpenID sub-claim: The openid scope provides a stable Google-issued ID linking Google identity to the VetIOS Supabase account.

Data Usage

Google user data is used solely for authentication and for no other purpose.
Google user data is never used to train or improve VetIOS AI/ML models and is excluded from all inference, simulation, and outcome datasets.
Google user data is never sold, rented, or shared with third parties for advertising or any other purpose.
Google access tokens are handled by Supabase Auth and are not stored in VetIOS application databases beyond the encrypted Supabase session layer.

Revoking Access

You can revoke VetIOS Google access from your Google Account permissions page at myaccount.google.com/permissions.

To request VetIOS account deletion, contact privacy@vetios.tech.

AI/ML Model Training Exclusion

VetIOS does not use Google user data, including email, profile, or any Google-sourced information, to train, fine-tune, or improve any AI or machine learning model. Veterinary inference models are trained exclusively on structured clinical signals, including species, vitals, and symptoms, submitted directly by platform operators. Google-sourced identity data is fully isolated from the ML training pipeline.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your Rights & Compliance

As a platform operator or partner, you retain ownership of your clinical inputs. You may request data exports or deletion of your tenant space at any time via the Control Plane or by contacting our platform team.

Contact Privacy Team

For inquiries regarding GDPR, CCPA, or specific clinical data handling policies, please reach out to:

privacy@vetios.tech