Privacy Policy

Vetzilla is a multi-tenant SaaS platform for veterinary clinic management, incorporated in Mexico.

This policy covers two different contexts, and our role under data protection law is not the same in each:

• Public website (vetzilla.net): Vetzilla is the data controller. We decide what is measured about the people who visit our marketing site.
• Application (app.vetzilla.net): Vetzilla is a data processor, acting on the instructions of each veterinary clinic, which is the controller of its own clients' and patients' data.

Sections 5 and 8 state separately what applies to each context.

Contact: [email protected]

2.1 Account and Staff Data

• Names, email addresses, and phone numbers of clinic staff
• Role assignments and permissions within the platform
• Login history and session data

2.2 Client and Patient Data (entered by your clinic)

• Names, contact information, and addresses of pet owners
• Animal patient records: species, breed, age, weight, medical history, diagnoses, treatments, and vaccinations
• Appointment history and clinical notes

Vetzilla only handles veterinary (animal) health data. We do not process human health records regulated by health privacy laws applicable to individuals.

2.3 Billing and Financial Data

• Invoice records and payment history stored by our payment processor (Stripe)
• Subscription plan details
• Payment method metadata processed by third-party providers

2.4 Technical and Usage Data

• IP addresses for access logs
• Access logs
• Error reports

2.5 Communications

• Support requests and email correspondence

The processing of your data is carried out under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP).

• Operation: Providing, operating, and maintaining the Service
• Management: Processing transactions and managing subscriptions
• Communication: Sending service notifications (maintenance, security alerts, billing)
• Support: Responding to requests for technical assistance
• Optimization: Improving the platform using aggregated and anonymized data
• Compliance: Addressing legal obligations and preventing fraud

Vetzilla does not sell your personal data and does not use it for third-party advertising purposes.

We do not commercialize your information. We share data only with the following sub-processors:

On the public website (vetzilla.net)

• Google (Tag Manager and Google Ads): measures which advertisement led to an account or a demo request. Only with your consent.
• Mixpanel: product analytics, including session recording — it registers how you move through the page. Only with your consent.
• ContentSquare: experience analytics, including session recording. Only with your consent.
• Tawk.to: support chat, so you can write to us from any page.

Inside the application (app.vetzilla.net)

• Payments: Certified payment processors for billing
• Monitoring: Error detection services in production environment
• Bot protection: Cloudflare Turnstile protects our forms from spam and automated abuse. Cloudflare processes technical signals (such as IP address and browser data) as a sub-processor. See Cloudflare's Turnstile Privacy Addendum.
• Umami: usage analytics. Only with your consent.
• Google (Tag Manager): measures account creation and demo requests. Only with your consent.
• Tawk.to: support chat.

What session recording does and does not capture. Our public website contains no forms: there is no field anywhere on it where you could type anything. The recording therefore registers only your path through the site — pages visited, scrolling and clicks. It captures no typed content, no credentials and no payment details, and it is never active inside the application, where your clients' and patients' data lives. All of it travels encrypted over HTTPS.

All our sub-processors are contractually obligated to process data under our strict instructions and with robust security measures.

Legal Disclosures: We may disclose data when strictly required by law, court order, or to protect the legal integrity of the platform.

Upon expiration of these periods, data is securely and irreversibly deleted.

• Encryption: Protection in transit (TLS/HTTPS) and at rest
• Access control: Role-based access strictly limited to necessary personnel
• Monitoring: Periodic security assessments and incident response protocols

Public website (vetzilla.net)

Application (app.vetzilla.net)

Before you decide. Until you accept, Google's tags run in a restricted mode that writes no identifiers, and the analytics and session recording tools are not loaded at all.

Withdrawing your consent. You can change your decision at any time from the "Cookies" link in the site footer, or from the cookie settings inside the application. Tools already loaded in the current tab keep running until you reload the page; from the next page load they are no longer loaded.

• Mexico (LFPDPPP): ARCO rights — Access, Rectification, Cancellation, and Opposition
• Brazil (LGPD): Confirmation, access, portability, and deletion
• Colombia (Law 1581): Knowledge, update, and rectification
• Argentina (Law 25.326): Access, rectification, and deletion
• European Union (GDPR): Access, erasure, limitation, and portability

Email us at [email protected]. We will respond within a maximum of 20 business days.

Vetzilla operates primarily in Latin America. For transfers outside your country of origin, we guarantee protection through:

1. Standard contractual clauses
2. Data processing agreements with sub-processors
3. Assessment of adequacy decisions

Our service is exclusive to professionals over 18 years of age. We do not collect data from minors. If you detect an error in this regard, contact us for the immediate deletion of the information.

We reserve the right to update this document. We will notify any material changes via email or within the app 14 days in advance.

• General Inquiries: [email protected]
• Privacy & Deletion Requests: [email protected]