Privacy Policy

Last Updated: September 17, 2025

At ca-vetlabs.ai, operated by Cherehani Labs, Inc ("we", "us", or "our"), we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (collectively, the "Services").

1. Data Controller

We are the data controller responsible for your personal data. For inquiries, contact our Data Protection Officer at [email protected].

2. Personal Data We Collect

We collect the following personal data when you use our Services:

  • Usage Data: IP address and approximate location data derived from your IP address.
  • User Content: Microscope images of animal samples, feedback, or comments you submit.
  • Analytics Data: Information about your interactions with the Site (e.g., pages visited, time spent).

Animal sample images and analysis results are not considered personal data under GDPR but are treated with similar care to ensure security.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To provide the Services, including processing uploaded images for AI analysis and delivering results.
  • To improve our AI models and Services, using anonymized data where possible.
  • To communicate with you, including responding to inquiries or providing support.
  • To ensure the security of our platform and prevent misuse.
  • To comply with legal obligations, such as GDPR or local laws.

The legal bases for processing include your consent, the necessity to perform our Services, and our legitimate interests (e.g., improving the platform).

4. Data Storage and Transfers

Your data, including images and feedback, is stored securely in Microsoft Azure cloud servers, which may be located outside your jurisdiction (e.g., outside Kenya or the EU). We implement appropriate safeguards, such as Standard Contractual Clauses, to ensure GDPR-compliant data transfers. Data is encrypted during transfer and storage.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined above or as required by law. Images and analysis results may be stored indefinitely to improve our AI models unless you request deletion. Contact us at [email protected] to request data deletion.

6. Your GDPR Rights

If GDPR applies to you (e.g., if you are in the EU/EEA), you have the following rights:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data, subject to legal obligations.
  • Restriction: Limit how we process your data.
  • Objection: Object to processing based on legitimate interests.
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Withdraw Consent: Withdraw consent at any time, though this may limit access to Services.

To exercise these rights, contact us at [email protected]. We will respond within one month, as required by GDPR.

7. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers (e.g., Microsoft Azure for storage) under strict data protection agreements.
  • Legal authorities if required by law.

8. Security Measures

We use industry-standard security measures, including encryption and access controls, to protect your data. However, no system is completely secure, and you use the Services at your own risk.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience and analyze usage. You can manage cookie preferences via your browser settings. Essential cookies are required for the Services to function, while non-essential cookies require your consent.

10. Third-Party Links

Our Site may contain links to third-party websites (e.g., Google Maps). We are not responsible for their privacy practices. Review their policies before providing data.

11. Children’s Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via the Site or email. Continued use of the Services after changes constitutes acceptance.

13. Contact Us

For questions or to exercise your rights, contact us at:

You may also lodge a complaint with your local data protection authority if you believe we have not complied with GDPR.