Sub-processors

Running VetsGPT means other companies process some personal data on our instructions. This page names them. We keep it current and update it when a provider is added, removed, or changed; material changes are announced the same way as changes to the Privacy Notice.

Providers listed here act on our instructions. Where a provider decides its own purposes for data it receives, that is stated in its entry rather than buried.

Vercel — application hosting. Receives every request, including IP addresses in request logs.

Neon — database. Holds account details, conversations, and the text extracted from files you upload. Data is stored in the European Union (Frankfurt) and encrypted at rest.

Amazon Web Services — file storage and outbound email, both in the European Union (Frankfurt). Stores the files you attach, and sends verification, password-reset and invitation email.

OpenAI — generates answers. Receives your question, limited recent conversation history, and the source passages retrieved for it. Called on an EU endpoint. Your name, email address and account identifier are never sent.

Google Cloud (Vertex AI) — turns text into the vectors used for retrieval, and describes uploaded images. Processing is pinned to an EU location.

Mistral — extracts text from uploaded PDF documents. Mistral is established in the European Union.

Exa — finds published sources to support an answer. It receives a search query generated from your question, with instructions to leave out identifying details; it does not receive your account, your identity, or your conversation history.

Exa processes these queries in the United States and, unlike the providers above, may use them for its own purposes. We say so plainly rather than describing it in general terms.

Stripe — takes subscription payments and holds the billing relationship. Card details are entered directly into Stripe's own fields and never reach our servers. Stripe keeps invoice records after an account is deleted, because accounting law requires it.

Google and Microsoft appear only if you choose to sign in with them, and receive what that sign-in involves by design.

Write to info@vetnio.com for information about a particular provider, the safeguards used for transfers outside the European Economic Area, or to be told when this page changes.