Privacy Notice

This notice explains personal data processing by US-based Vetigen Incorporation (Vetigen) through its website, Connect, PetConnect, Veti and related support services. Contact: hello@vetigen.com.

This is a privacy notice. Visiting the website, reading this notice or using a service does not constitute consent to optional tracking, marketing messages or other processing requiring consent. Service terms, cookie choices and communication permissions are separate.

Vetigen acts as controller where it determines the purposes and means of its account administration, subscriptions, billing, support, security and website activities. Being established in the US does not displace KVKK, GDPR or other local data protection rules where they apply to the processing.

Clinics may be controllers for their own relationships with pet owners, veterinary records and communications. Vetigen acts as processor when handling this data on the clinic’s documented instructions. A PetConnect account or shared customer/patient record does not give any one party unrestricted control over all records.

• Data Processing Agreement

Information comes from your submissions, authorized clinic users, integrations you enable and technical operation of the service. Animal records can contain personal data when linked to an owner or user; animal health records are not automatically human health data.

• Account and contact: name, phone, email, language, user/clinic relationships and permissions.
• Clinic workflows: owner contact details, animal information, appointments, examination and SOAP notes, prescriptions, diagnostics, attachments, sales and payment records.
• Subscriptions and payments: plan, billing details, transaction status and payment provider references. Card transactions are handled through the payment provider’s relevant interface.
• Support and callback requests: submitted name, role, phone, request content, language and request/security records. Google reCAPTCHA bot checks activate when the callback form is submitted.
• Technical data: IP address, device/browser information, session and operation records, error records and, depending on your choices, visit and campaign measurement information.

We assess the following bases according to applicable law and our controller role. Under KVKK, conditions such as contract formation/performance, express legal provision, legal obligation, establishment/exercise/defence of a right or legitimate interests that do not prejudice fundamental rights apply only to the relevant activity. Where no other condition applies, required consent must be obtained separately.

• Accounts, access, clinic workflows and requested support: contract formation/performance; for clinic data, the clinic’s instructions and applicable legal basis.
• Billing, statutory records and competent authority requests: applicable legal obligations and protection of rights.
• Unauthorized access, abuse and error investigation: the legitimate interest in a secure, functioning service, subject to balancing rights and interests.
• Optional analytics and advertising measurement: category-specific consent in cookie settings. Promotional messages: permission required for the channel and purpose or an applicable legal exception.

For features you enable, such as Veti voice/text interaction, SOAP drafting and document or invoice reading, the service may process submitted text, audio, images and documents, necessary patient/clinic context and operation results. Relevant content may be transmitted to AI providers such as OpenAI to perform the feature.

This notice does not authorize use of customer or clinic data for general-purpose model training. Processing needed to operate an AI feature and model training are different purposes. Do not submit unnecessary sensitive information about people. AI output can be incorrect; clinical assessment and approval of actions remain with authorized users.

Data may be shared as needed for the relevant purpose with authorized clinics/users and providers of hosting/file storage, AI, payments, error monitoring and messaging. Legally required disclosures and lawful, limited disclosures in a corporate transaction may also apply.

Reminders and service messages may use push, WhatsApp, SMS or email depending on the feature, channel availability, clinic preferences and relevant permissions. Device notification permission, marketing-cookie consent and clinic communication permission are not interchangeable.

• Providers and subprocessors
• Messaging privacy

Vetigen is based in the US; depending on providers and service configuration, data may be processed in the US or other countries. This notice does not promise that all data stays in Türkiye or exclusively in Europe.

Transfers require both a processing basis and an applicable transfer mechanism. Where KVKK applies, the requirements for an adequacy decision, appropriate safeguard or statutory exception under Article 9 must be assessed; where GDPR applies, the relevant adequacy or safeguard provisions apply. General website use, cookie choices or this notice do not replace a standard contract or another transfer safeguard. Contact hello@vetigen.com for recipient, country and safeguard details for your service.

Retention depends on the processing purpose, account and contract status, clinic record obligations, financial laws, disputes and security needs. A single ten-year period or fixed post-cancellation deletion deadline does not apply to every category. Appropriate deletion, destruction or anonymization is required when the purpose and legal basis end.

An account deletion request first disables access and starts a 30-day recovery period. After this period, cleanup processes account identity fields and associated account data; clinic medical/financial records and data required by law are assessed separately. Cancelling a subscription is not an account deletion request.

• Account deletion process
• Cookie and browser storage durations

Where KVKK Article 11 applies, your rights include learning whether data is processed; requesting information; learning its purposes and whether use matches them; knowing domestic/overseas recipients; rectifying incomplete/inaccurate data; requesting deletion/destruction when conditions are met and notification of rectification/deletion to recipients; objecting to adverse outcomes from exclusively automated analysis; and seeking compensation for unlawful processing.

Submit requests using the contact below. Requests under KVKK are handled as soon as possible and no later than 30 days, normally without charge, subject to costs permitted by law. Where the clinic is controller, the clinic may need to determine requests about its records.

You may withdraw consent prospectively; this does not affect lawful processing before withdrawal. For rejection, an inadequate response or no timely response, you may complain to the Turkish Board under the conditions and deadlines in KVKK Article 14. Rights of access, correction, erasure, objection, restriction and portability in other countries apply according to local law.

Where US state privacy laws apply to you and the processing, rights may include access, correction, deletion, portability, opting out of targeted advertising or processing defined as sale/sharing, and appealing a request decision. Your right not to receive discriminatory treatment for exercising applicable rights is preserved. Disable optional website tracking in cookie settings and send other requests to our contact address.

• Turkish Personal Data Protection Authority
• EEA/UK/Switzerland supplementary notice

Technical controls include authentication, authorization, clinic access boundaries and operation records. No online service can guarantee absolute security. Specific certification, audit or hosting assurances must be assessed within their verified scope.

• Security policy

Services are designed for adults and authorized clinic staff and are not directed at people under 18. Contact us if you believe a child’s personal data has been processed improperly.

The current date and version appear on this page. Material changes are communicated through appropriate channels; a use requiring new consent is not authorized merely by updating this notice or continued service use.

Send privacy and data requests to Vetigen Incorporation at hello@vetigen.com. Describe your request, the relevant account or clinic, and how to contact you. We may request proportionate information to verify your identity; do not send passwords or verification codes.

• Send email