This Privacy Policy describes how Laudin AI ("the platform") handles personal data related to the creation and delivery of veterinary reports. The platform operates globally and seeks compliance with the data protection laws applicable in each jurisdiction — in particular Brazil's Lei Geral de Proteção de Dados (LGPD - Law 13.709/2018), the European Union/EEA General Data Protection Regulation (GDPR - EU 2016/679), and applicable U.S. state privacy laws. Jurisdiction-specific notices are in section 10.
1. CONTROLLER AND PROCESSOR
The veterinary clinic using the platform is the data controller for tutor and patient data. Laudin AI acts as a data processor, handling data under the clinic's instructions. For EU/EEA residents, the clinic or Laudin AI will designate an EU representative where applicable.
2. DATA COLLECTED
We collect personal data (name, contact), animal identification (species, breed, age), exam images and clinical report text. On the tutor portal, we also collect IP and user-agent at the time of consent, for auditing purposes.
3. PURPOSE AND LEGAL BASIS
Data is processed exclusively for: (a) generating and delivering the veterinary report; (b) clinical communication between clinic and tutor; (c) compliance with legal and regulatory obligations of veterinary practice. The legal basis for processing varies by jurisdiction (see section 10): performance of a contract and consent, compliance with a legal obligation, and legitimate interests, subject to the specific requirements for sensitive/health data.
4. SHARING AND SUB-PROCESSORS
We do not share data with third parties, except: (a) infrastructure and service providers under data processing agreements — Supabase (database, authentication and storage), Hostinger (hosting and image PACS), Cloudflare R2 (image backup), OpenRouter/Anthropic (artificial intelligence), ZapSign (electronic signature), Resend (email delivery), Google (maps/addresses), Sentry (error monitoring) and Stripe (clinic payments); (b) when required by law. An up-to-date list of sub-processors is maintained by the platform.
5. INTERNATIONAL DATA TRANSFERS
The platform is operated from primary infrastructure in Brazil (single-region). Some sub-processors handle data outside the country of origin (United States and European Union) — for example, image (DICOM) backups are stored in the European Union (Cloudflare R2, Frankfurt). These international transfers are covered by contractual safeguards, including Standard Contractual Clauses (SCCs) and equivalent mechanisms provided for under applicable law.
6. USE OF ARTIFICIAL INTELLIGENCE
The platform uses artificial intelligence models (Claude, by Anthropic) to assist in generating and reviewing reports. Input data is not used by the AI provider for model training.
7. IMAGE USE FOR TRAINING
The clinic may opt to request tutor consent for the anonymized use of images for training the platform's own models. This consent is optional and separate from the main terms.
8. YOUR RIGHTS
You may, at any time, request from the responsible veterinary clinic: access to your data, correction, deletion, anonymization, portability, or revocation of consent. Depending on your jurisdiction, additional rights may apply (see section 10), such as the right to object to processing, not to be subject to automated decisions, to lodge a complaint with a supervisory authority, and to opt out of the "sale" or sharing of data.
9. RETENTION
Clinical data is retained for the period required by veterinary legislation. Consent audit data is retained for the applicable statutory period.
10. JURISDICTION-SPECIFIC NOTICES
(a) Brazil (LGPD - Law 13.709/2018): processing relies on the legal bases of articles 7 and 11 (consent, performance of a contract, compliance with a legal obligation, and protection of health). Data subjects have the rights under article 18 and may petition the National Data Protection Authority (ANPD).
(b) European Union/EEA (GDPR - EU 2016/679): processing relies on article 6 (consent, contract, legal obligation, legitimate interests) and, for health data, on article 9. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the supervisory authority of your Member State. International transfers use SCCs (see section 5). Data Protection Officer (DPO) contact: [to be defined].
(c) United States: under applicable state laws (for example, the California Consumer Privacy Act/CPRA), you may have the right to know, access, correct and delete personal data, and to opt out of the "sale" or sharing of data. Laudin AI does not sell personal data. There is no discrimination for exercising these rights.
11. CONTACT AND DATA PROTECTION OFFICER (DPO)
For questions, please contact the veterinary clinic responsible for your appointment. For platform-related questions or questions about this policy, contact Laudin AI. DPO: [to be defined].
Last updated: June 2026.Privacy policy