Privacy Policy

1. Who we are

This Privacy Policy describes how Vetano ("Vetano", "we", "us", or "our") collects, uses, shares, and protects personal information when you use our mobile applications, websites, and related services (collectively, the "Platform").

Controller / business of record: Vetano, Inc., a Delaware corporation, 4 International Drive, Suite 110, Rye Brook, NY 10573, USA. Privacy contact: privacy@vetano.com.

2. Information we collect

We collect the following categories of personal information:

• Account & identifiers: name, email, phone, password hash, account IDs.
• Profile content: job title, skills, work history, profile photo.
• Video & audio: skill demonstration videos and voice recordings you upload. These may contain biometric identifiers (your face and voice).
• Identity verification: government ID images and selfie used for verification (processed via our verification vendor and not retained by us once verification completes).
• Commercial information: subscriptions, purchases, billing details (handled by Stripe — we do not store full card numbers).
• Device & technical: IP address, device identifiers, OS, browser, crash logs.
• Approximate location: derived from IP address; precise location only if you grant the app permission.
• Usage: pages viewed, features used, clicks, scroll depth, session timing.
• Inferences: aggregated signals we derive to improve matching and the product.
• Communications: messages you send us, support tickets, survey responses.

3. How we use information

• Operate, maintain, and improve the Platform.
• Verify identity and credentials (anti-fraud).
• Match talent with employers and surface relevant opportunities.
• Process payments, subscriptions, and refunds.
• Send transactional emails (receipts, account, security).
• Send marketing emails where you have consented or where allowed by law (you can opt out at any time).
• Measure performance and run analytics.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

GDPR lawful bases: performance of a contract, our legitimate interests (product improvement, security, fraud prevention), your consent (analytics & advertising cookies, marketing emails, precise location), and compliance with legal obligations.

4. Third parties we share information with

We share personal information with the service providers and partners below. Each is contractually limited to using the information only to provide services to Vetano, except for advertising and analytics partners which may use data for cross-context behavioral advertising — see Section 5.

• Hosting & database: Lovable Cloud / Supabase, Amazon Web Services (AWS).
• Analytics: Google Analytics (Google LLC), Amplitude.
• Advertising: Google Ads (conversion tracking), and similar advertising pixels we may add and disclose.
• Payments: Stripe.
• Email: Resend (transactional and marketing).
• Customer support & messaging: Intercom, Slack (internal notifications).
• Voice / AI: ElevenLabs, OpenAI / Google AI (only as required to power specific features).
• Geo enrichment: IPinfo.
• Push notifications: AWS SNS and web-push providers.
• Other recipients: employers (you choose what to share on your profile), legal/regulatory authorities when required, and acquirers in a business transaction.

5. Sale & sharing of personal information (CCPA / CPRA)

Under the California Consumer Privacy Act (as amended by the CPRA), the use of third-party advertising cookies, SDKs, and pixels — including Google Analytics, Google Ads, and similar tools — can qualify as a "sale" or "sharing" of personal information for cross-context behavioral advertising. To the extent these technologies operate on the Platform, Vetano discloses that we "share" (and in some jurisdictions "sell") the following categories of personal information for these purposes: identifiers, internet/network activity, device information, approximate location, and inferences.

We do not sell or share the contents of your videos, identity verification documents, government IDs, precise geolocation, or sensitive personal information.

You can opt out at any time on our Do Not Sell or Share My Personal Information page or in Cookie Settings. We also honor the Global Privacy Control (GPC) browser signal as an opt-out request.

6. Cookies & tracking

We use the following categories of cookies and similar technologies:

• Strictly necessary: required for login, security, and basic functionality.
• Analytics: Google Analytics, Amplitude. Only loaded after you accept analytics cookies.
• Advertising: Google Ads conversion. Only loaded after you accept marketing cookies.

You can change your choices at any time in Cookie Settings.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your personal information.
• Port your information in a portable format.
• Restrict or object to certain processing (GDPR).
• Opt out of "sale" or "sharing" and of profiling for significant decisions (CPRA, VCDPA, CPA, CTDPA, UCPA, and similar state laws).
• Withdraw consent at any time where processing is based on consent.
• Non-discrimination for exercising any of these rights.
• Appeal our decision (in states that require it).

To exercise these rights, email privacy@vetano.com or use the in-app account controls. We will verify your identity before responding. An authorized agent may submit a request on your behalf with written authorization.

8. GDPR & international transfers

If you are in the European Economic Area, United Kingdom, or Switzerland, your personal information may be transferred to and processed in the United States and other countries. We rely on the EU Standard Contractual Clauses and equivalent UK / Swiss safeguards for these transfers, and apply additional technical measures (encryption in transit and at rest) where appropriate.

EU/UK representative and Data Protection Officer: [to be appointed; contact privacy@vetano.com in the meantime]. You also have the right to lodge a complaint with your local supervisory authority.

9. Data retention

We keep personal information only as long as needed for the purposes described in this Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Accounts you delete are removed within 30 days from active systems and within 90 days from backups, except where retention is legally required (e.g., tax records).

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including TLS in transit, encryption at rest for sensitive fields, role-based access controls, audit logging, MFA for administrators, and regular review. No method of transmission or storage is 100% secure.

11. Children

The Platform is not intended for anyone under 16, and accounts require users to be at least 16 (18 in some jurisdictions). We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact privacy@vetano.com and we will delete it.

12. Biometric notice

The video and audio you upload may include biometric identifiers (your face and voice). We process this content to display your profile to employers and to power features you request. We do not sell biometric identifiers, do not disclose them for cross-context behavioral advertising, and retain them only while your account is active or as required by law.

13. Changes

We may update this Policy from time to time. Material changes will be highlighted in the app or via email. The "Last updated" date at the top reflects the current version.

14. Contact