Legal

Privacy Policy

Last updated: May 31, 2026

Draft placeholder. This document is a starting template. Vetra has not yet had it reviewed by counsel. Replace the language below with finalized, jurisdiction- specific terms before launch.

1. What we collect

Account information (name, email), assessment responses, skin scans and photos you submit, basic device and usage data, and payment metadata processed by our payment provider.

2. How we use it

To deliver and personalize the Service, generate scan analyses, improve our methodology, communicate with you, process payments, prevent fraud, and meet legal obligations.

3. Skin imagery and sensitive data

Skin scans and photos are treated as sensitive personal data. See our Skin & Health Data notice for specifics on storage, access, and deletion.

4. Sharing

We share data only with the service providers required to operate Vetra (hosting, payments, email, analytics) under written data processing agreements. We do not sell your personal information.

5. Retention

We retain your data for as long as your account is active. You may request deletion at any time and we will erase your data within 30 days unless retention is legally required.

6. Your rights

Subject to your jurisdiction (including GDPR and CCPA), you have the right to access, correct, delete, export, restrict, or object to processing of your personal data. Contact privacy@vetra.example to exercise these rights.

7. Security

We use encryption in transit and at rest, role-based access controls, and routine security reviews. No system is perfectly secure; we will notify affected users of any data breach as required by law.

8. International transfers

Where we transfer data internationally, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children

Vetra is not directed to children under 16 and we do not knowingly collect their data.

10. Contact

For privacy questions, contact privacy@vetra.example.