Privacy Policy

1. Introduction

This Privacy Policy describes how Wizzvet SAS (the publisher of NoteVetIA) collects, uses and protects the personal data of users and animal owners, in accordance with the General Data Protection Regulation (GDPR) and French data protection law.

2. Controller and Processor Roles

Wizzvet SAS acts as:

• Data controller for user account data (veterinarians, clinics);
• Data processor within the meaning of article 28 GDPR for the clinical and personal data entered by veterinarians about their patients and animal owners.

3. Data Collected

4. Legal Bases and Purposes

• Performance of the contract: providing the Service, managing the account, billing;
• Legitimate interest: improving the Service, security, fraud prevention;
• Legal obligation: retaining invoices (10 years), responding to judicial requests;
• Consent: sending marketing communications (withdrawable at any time).

5. Processors and Data Transfers

We rely on the following processors to provide the Service:

Scalingo

hosting of the application and of the PostgreSQL database — France, European Union

Object storage

storage of files and audio recordings — France, European Union

Deepgram

automatic transcription of consultation audio recordings — United States

Mistral AI

AI-assisted content generation and extraction — France, European Union

Resend

delivery of transactional emails — United States

Stripe

card payment processing — Ireland and United States

Sentry

technical monitoring and application error reporting — United States

Some of these processors are established outside the European Union. Those transfers are covered by the European Commission's standard contractual clauses or by an adequacy decision. Data sent to artificial intelligence providers is not used to train their models.

The audio recording of a consultation is sent to a transcription provider established in the United States. This transfer only happens when the transcription feature is used.

6. Retention Periods

• User account: for the duration of the subscription + 3 years after cancellation;
• Clinical data: kept for as long as the contract is active; after cancellation, returned and then deleted within 30 days, unless a legal obligation requires otherwise;
• Invoices: 10 years (accounting obligation);
• Connection logs: 12 months.

7. Security

We implement appropriate technical and organisational measures: encryption of data in transit (TLS 1.3) and at rest, strict access control (RLS), strong authentication, regular backups, security audits, logging of sensitive access.

8. Your GDPR Rights

You have the following rights:

• Right of access, rectification and erasure;
• Right to restriction of and objection to processing;
• Right to data portability;
• Right to give instructions on what happens to your data after your death;
• Right to withdraw your consent at any time.

To exercise these rights: dpo@notevetia.com — reply within 30 days.

In the event of a dispute, you may refer the matter to the CNIL.

9. Cookies

The website only uses cookies strictly necessary for the Service to work (authentication, preferences). No advertising cookie or third-party tracker is set without consent.

10. Veterinary Professional Secrecy

The Provider acknowledges the sensitive nature of the data processed and the professional secrecy that binds veterinarians (article R.242-33 of the French Rural Code). Everyone with access to the data is bound by a contractual confidentiality obligation.

11. Changes

This policy may be updated. Any substantial change will be notified by email or through the application.

12. DPO Contact

Data protection officer: dpo@notevetia.com