Last updated: 16.05.2026
Welcome to VetBlood. Your privacy is important to us. This Privacy Policy explains how we collect, use, process, and safeguard your information when you use our application.
Who We Are
The controller of your personal data is IMBT Marcin Siedlecki, ul. Grzybowa 20, 85-367 Bydgoszcz, Poland (NIP 8211053144). Contact: vetblood@vetblood.io.
Information We Collect
We collect the following types of information:
- Information You Provide: the species, breed, age, sex and weight of your animal, additional clinical comments, the blood/urine test results you upload (including any data extracted via OCR), and the e-mail address to which the report is sent.
- Payment Information: Processed securely by our payment provider. We do not store your full credit card details. We may receive transaction identifiers confirming that payment succeeded.
- Documents You Upload: you choose the file yourself, and you review and confirm the extracted values before the analysis begins.
- Usage Data (Optional/Future): We may collect information about how you access and use the service (e.g., error logs, performance data) for improvement purposes.
How We Use Your Information
We use the information we collect solely for the purpose of:
- Processing your payment.
- Generating the interpretation of your submitted test results.
- Delivering the generated interpretation report to you by e-mail and via a secure link.
- Temporarily storing processing status and the report link.
- Troubleshooting issues and improving the service (using anonymized or aggregated data where possible).
Your submitted results and OCR data are processed only to generate the report you requested after payment.
Automated Processing
The interpretation is generated automatically, without human involvement. It is not a diagnosis and does not constitute a decision producing legal effects concerning you or similarly significantly affecting you.
Legal Basis
- Producing and delivering the report you paid for, and taking payment — performance of a contract (Art. 6(1)(b) GDPR).
- Troubleshooting, security and prevention of abuse — our legitimate interest (Art. 6(1)(f) GDPR).
- Accounting and tax records — legal obligation (Art. 6(1)(c) GDPR).
Data Processing and Storage
- OCR processing occurs entirely within your browser. No original file content leaves your device for OCR.
- Form data and OCR text are temporarily stored in your browser’s localStorage before payment.
- After payment, your form data and OCR text are sent to our backend and stored temporarily to initiate processing.
- The AI interpretation is generated by sending the relevant data (form details, OCR text) to our AI provider.
- The final HTML report is held in temporary storage and is sent to you by e-mail.
- Processing status and the link to the report are stored temporarily.
Data Retention and Deletion
- Input data (form details, OCR text) held temporarily before processing is deleted shortly after the interpretation report is generated.
- The generated HTML report held in temporary storage is automatically deleted approximately 1 hour after its creation by an automated cleanup process. The copy delivered to you by e-mail is yours to keep, share or transfer.
- You also have the option to delete your generated report data immediately after download using the “Delete My Interpretation Data Now” button. This will delete both the report file and the corresponding status record.
- Status records for pending or failed processes may expire after 48 hours.
- Browser localStorage data is cleared after successful submission for analysis.
Third-Party Services (Sub-Processors)
We use the following categories of sub-processors. Each receives only the minimum data necessary for its specific function:
- Payment provider: processes your payment. We never see or store your card number.
- AI provider: generates the interpretation from the submitted values.
- Cloud infrastructure providers: hosting, application runtime, background job processing and temporary storage of the report.
- E-mail delivery provider: delivers your report to the address you gave us.
These providers are located in the United States; transfers are made under the European Commission’s Standard Contractual Clauses. You may request the identity of any of these providers and details of these safeguards by writing to us at the address below.
Cookies and Website Analytics
Our website uses cookies that are strictly necessary for it to work, and — only if you agree — analytics cookies that tell us in aggregate which pages are read and how they are used. You choose this when you first visit the site and can change it at any time in the cookie settings. Withdrawing consent does not affect anything done before you withdrew it.
Cookies are also set by the providers that keep the website running — hosting, security and content delivery — and, where you have consented, by our analytics provider.
Data Security
No human access. No human ever reads your data — the analysis is fully automated end-to-end.
We implement reasonable measures to protect your information, but no system is completely secure. Data is transmitted over HTTPS. Access to backend systems and keys is restricted.
Your Rights (GDPR/Data Protection)
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, write to vetblood@vetblood.io. You may also lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
As the service is largely anonymous after data deletion, exercising some rights might be limited once the analysis and associated data are deleted.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us at vetblood@vetblood.io.