Data Safety

We do not sell your personal data to third parties. The table below discloses each data category we collect, whether it is shared with a third party, and why.

Data is encrypted in transit using TLS. You can request deletion of your data at any time — see Data Deletion.

Data may be used to:

• Operate core product workflows including clinical, shelter, and behavioral intelligence features
• Support scheduling, records, communications, billing, and account administration
• Power AI-assisted clinical documentation, adoption readiness scoring, and behavioral intervention plans
• Improve performance, reliability, and user experience
• Maintain security, prevent abuse, and troubleshoot issues
• Comply with applicable legal or operational obligations

For users in the European Economic Area, UK, and Switzerland, we process personal data under the following legal bases:

• Contract: processing necessary to provide the service you signed up for
• Consent: where you have given explicit consent, such as for optional communications
• Legitimate interests: to secure, maintain, and improve the service
• Legal obligation: where required by applicable law or regulation

If applicable data protection law grants you these rights, you may:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to certain processing
• Port your data to another service in a structured format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise these rights, visit Data Deletion or contact us at the Support Center. We respond to verified requests within 30 days.

We retain personal data only as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. When you request account or data deletion, data is deleted within 30 days except where retention is required by law.

Data is protected using industry-standard safeguards, including:

• Encryption in transit (TLS)
• Tenant-isolated databases and role-based access controls
• Secure cloud infrastructure practices
• Ongoing monitoring and audit logging
• You can request data deletion at any time

We do not sell personal data. Data is shared only where necessary to operate the service, including:

• Stripe — payment processing
• Cloud hosting & infrastructure providers — to run and secure the service
• OpenAI and ElevenLabs — AI-assisted features, under enterprise data processing agreements

These providers are contractually bound to protect your data and may not use it for their own purposes.

Data may be processed in countries outside your country of residence, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred internationally.

Careflow Animal Health includes AI-powered modules that process animal welfare and clinical data:

• Clinical Intelligence: AI-assisted SOAP notes, diagnostics, and treatment planning
• Shelter Intelligence: Adoption readiness scoring, capacity forecasting, outcome trend analysis
• Behavior Intelligence: Behavioral trait extraction, severity scoring, intervention plan generation

AI does not make autonomous clinical, behavioral, or shelter management decisions. All AI-generated content is clearly labeled and requires review by a qualified professional before use.

Users can request actions such as:

• Account deletion
• Data deletion requests
• Exporting your data
• Access to relevant account information
• Contacting support regarding privacy or data concerns

Questions about this Data Safety disclosure or your privacy rights? Contact us at careflow@careflow-animal-health.com or call (415) 568-2104

Corporate AI Solutions LLC · 580 California Street, 12th and 16th Floors, San Francisco, CA 94104, United States