Privacy Policy

Last Updated: September 23, 2025

At ca-vetlabs.ai, operated by Cherehani Labs, Inc ("we", "us", or "our"), we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (collectively, the "Services").

1. Data Controller

We are the data controller responsible for your personal data. For inquiries, contact our Data Protection Officer at [email protected].

2. Information We Collect

  • User content: microscope images and feedback.
  • Generated data: AI-based outputs such as analysis results, translations, or audio.
  • Usage data: IP address and location (approximate).

3. How We Use Information

  • To provide and improve the Services, including AI analysis and translations.
  • To deliver audio output using Microsoft Azure TTS.
  • To communicate with you for support, updates, and notifications.
  • To ensure platform security and prevent misuse.
  • To comply with legal obligations in Kenya, the EU/UK, and California.

4. Legal Bases for Processing

Where GDPR or the Kenya DPA applies, we rely on consent, contractual necessity, legal obligations, or legitimate interests. Under CCPA/CPRA, we describe how we use, share, and disclose information, and confirm that we do not sell personal data.

5. Your Rights

  • GDPR & Kenya DPA: access, correction, deletion, restriction, portability, objection, withdraw consent.
  • California (CCPA/CPRA): right to know categories and sources of data, right to delete, right to correct, right to opt out of “sale or sharing,” and right to non-discrimination.

To exercise rights, contact us at [email protected].

6. Data Sharing

We may share information with:

  • Service providers such as OpenAI (for GPT analysis/translation) and Microsoft Azure (for hosting and TTS).
  • Legal authorities where required by law.
  • Business partners in the event of a merger, acquisition, or reorganization.

We do not sell personal data.

7. International Transfers

Data may be transferred outside your country, including to the US and EU. Safeguards include Standard Contractual Clauses (GDPR), compliance with Kenya DPA, and disclosures consistent with CCPA/CPRA.

8. Retention

We retain data only as long as necessary for our Services or legal obligations. You may request deletion at any time. Aggregated or anonymized data may be retained indefinitely.

9. Security

We use encryption, access controls, and monitoring to protect your information. No system is 100% secure, and you use the Services at your own risk.

10. Cookies

We use cookies to enhance your experience and analyze usage. Non-essential cookies require your consent. You can disable cookies in your browser settings.

11. Third-Party Services

We integrate with third-party providers (e.g., GPT models, Azure TTS). These remain the property of their respective owners, and their use is subject to their terms and privacy policies.

12. Children’s Privacy

Our Services are not directed to children under 16 (or local minimum age). If we learn we have collected data from a child, we will delete it promptly.

13. Changes

We may update this Policy. Material changes will be communicated via the Site or email. Continued use of the Services constitutes acceptance.

14. Contact Us