Overview
Vetaverse (“we,” “us”) provides veterinary business intelligence tools for practice owners and managers. This policy describes how we handle data when you upload PIMS exports, P&L files, and related financial reports.
We are designed for financial and operational reports, not full medical records. Upload standard sales or accounting exports — not complete patient charts — whenever possible.
What we collect
- Account information — email address and authentication data via One Account (Auth0 at auth.dvm.com). Practice data remains in Supabase.
- Practice profile — practice name, PIMS software, and subscription tier linked to your account.
- Billing information — when you subscribe, payment is processed by Stripe; we store subscription status and related billing identifiers, not full card numbers.
- Uploaded files — Excel or CSV exports you choose to upload (PIMS sales reports, P&L statements).
- Generated reports — analysis results, KPIs, findings, and AI-generated narrative insights stored with your practice.
- Usage metadata — basic operational logs (e.g., upload timestamps, analysis duration) to run and improve the service.
How we use your data
- Parse and analyze your uploads to produce revenue, ACT, leakage, and P&L insights.
- Store reports so you can view them on your dashboard over time.
- Generate narrative summaries and recommendations using AI (see below).
- Provide support and maintain platform security.
We do not sell your practice data to third parties.
Where data is stored
Your practice profile, uploaded files, and generated reports are stored in Supabase (PostgreSQL database and object storage), with access scoped to your authenticated account and linked practice. Sign-in is handled by Auth0 (One Account). Reports and findings are isolated by practice_id so other practices cannot access your data.
AI processing (Google Gemini)
Vetaverse uses Google's paid Gemini API to generate narrative insights — caseload descriptions, finding explanations, and action directives. Under Google's paid API terms, your prompts and responses are not used to train or improve Google's models.
Important details about what is sent to Gemini:
- We send aggregated summaries — KPIs, provider names, product names, category totals, and finding titles — not your raw Excel file.
- Client/patient names are not included in AI prompts for PIMS analysis.
- Core financial math (revenue, ACT, leak counts) is computed deterministically on our servers before any AI call. If Gemini is unavailable, you still receive accurate numbers with a fallback narrative.
- Google may retain prompts briefly for abuse detection and safety, per their Gemini API terms.
Third-party subprocessors
- Auth0 — One Account sign-in (auth.dvm.com), shared with VetGPT where you enable it.
- Supabase — database and file storage for practices and reports.
- Stripe — subscription billing for Practice Bundle (when you subscribe).
- Google (Gemini API) — AI narrative generation on paid terms.
- Vercel — application hosting.
Security
For a full overview of controls, see our Security page.
- One Account authentication via Auth0 (auth.dvm.com) — password or social login managed by Auth0, not stored in Vetaverse application code.
- Upload and analysis routes require a signed-in user.
- Tenant isolation — each practice sees only its own reports.
- Admin access is limited to an explicit email allowlist for support.
What we are not
Vetaverse is a business intelligence tool, not a covered entity under HIPAA. We do not offer a Business Associate Agreement (BAA) by default. Do not upload protected health information unless you have independently assessed compliance requirements for your use case.
Your choices
- You choose what files to upload and when.
- You can request deletion of your account and associated data by contacting us.
- Use financial exports rather than full medical records to minimize sensitive data.
Contact
Questions about this policy or your data: hello@vetaverse.ai
Related: Terms of Service (EULA)