Transparency about how we handle your data, in accordance with Brazil's LGPD (Law No. 13,709/2018).
VetVirtual is the controller of the personal data processed on this platform, under Brazil's General Data Protection Law (Law No. 13,709/2018 — LGPD). For any request related to personal data, use the channels listed in item 9 or our Contact page.
Registration data: name, email, and, when you use social login, your Google or Apple account identifier. Usage data: conversations with the AI, photos and audio you send, pet data (name, species, breed, age, weight), service history, date and time of access. Payment data: processed directly by Stripe — we do not store card numbers. Technical data: IP address, device and browser type, and cookies as described in item 6.
We use your data to: (a) create and maintain your account; (b) generate the requested veterinary guidance; (c) maintain your conversation history and pet profiles; (d) process subscriptions and payments; (e) provide support; (f) ensure security, prevent fraud, and comply with legal obligations; (g) improve service quality through aggregated, anonymized analysis.
Performance of a contract (LGPD art. 7, V) for account creation, AI-based assistance, and billing; consent (art. 7, I) for analytics cookies and optional communications; legitimate interest (art. 7, IX) for security, fraud prevention, and service improvement; compliance with a legal or regulatory obligation (art. 7, II) for tax and accounting records.
We share only what is necessary with service providers that support us: artificial intelligence providers, which process the content of your messages (text, photos, and audio) solely to generate the response, without using it to train third-party models; Stripe, to process payments (card and Pix); Supabase/Lovable Cloud, for hosting, database, and authentication; Google Analytics, only if you consent to analytics cookies. Some of these providers may process data outside Brazil — in those cases, the international transfer takes place with appropriate contractual safeguards (LGPD arts. 33 and 34). We do not sell personal data.
We use essential cookies, necessary for login, security, and the platform's operation — these do not require consent. Analytics cookies (Google Analytics) are only loaded after you accept them in the cookie banner. You can decline with one click and change your choice at any time using the button below.
We keep account data and conversation history while your account is active. After a deletion request, we remove personal data within 30 days, except for records that the law requires us to retain (for example, tax records related to payments for 5 years and access logs for 6 months, under Brazil's Marco Civil da Internet). Photos and audio you've submitted can be deleted at any time along with the corresponding conversation.
You may, at any time: confirm whether processing exists; access your data; correct incomplete or outdated data; request anonymization, blocking, or deletion of unnecessary data; request data portability; withdraw consent; and obtain information about who we share your data with. We respond to requests within 15 days.
We use encryption in transit, per-user access control (row-level security in the database), and continuous monitoring. Even so, no system is completely immune to incidents; in the event of a significant incident, we will notify affected individuals and Brazil's data protection authority (ANPD). To exercise your rights or speak with our data protection officer, use VetVirtual's Contact page.
This policy may be updated to reflect changes to the service or applicable law. The current version will always be available on this page, along with the date of the last update.
Last updated: July 2026.
