Where your files end up

The path of your file

When you upload a report, here's what happens in sequence.

1. Upload to Supabase Storage

The file is uploaded directly from your browser to our cloud storage (Supabase). The transfer is encrypted (HTTPS).

The path is anonymous:

• If logged in: users/<uuid>/<timestamp>-<filename>
• If anonymous: anon/<uuid>/<timestamp>-<filename>

The UUID is an opaque unique identifier. Your email never appears in the file path.

2. Analysis with OpenAI

The file is passed to OpenAI's AI engine (gpt-4.1) via their Files API for reading. OpenAI is our AI engine provider for report analysis.

What happens at OpenAI:

• File stays on their servers max 30 days per their Terms
• Not used for training: we have opt-out active (Enterprise/Business policy)
• Not accessible to other OpenAI users

3. Result saved

The structured output (analysis JSON) is saved in our Postgres database (Supabase). Linked to your account if logged in, or to the email you provided if anonymous.

4. Your report stays in your archive

The original file (the report PDF/photo you uploaded) stays in your archive together with the analysis result: it builds your pet's medical history and you can reopen it whenever you want.

No automatic deletion: we never remove your files on our own. If you want a report (or the whole analysis) gone, just ask and we delete it everywhere (storage and database).

What we DON'T do

• Never share your file with third parties other than the AI engine needed for analysis (OpenAI)
• Never publish your pet's reports, even anonymized
• Never sell them for marketing, profiling, advertising
• Never use them for AI training (ours or third parties')

Encryption

• In transit: HTTPS (TLS 1.2+) between your browser and our servers, and between us and OpenAI
• At rest: Supabase encrypts files automatically (AES-256) and the Postgres database
• Backups: encrypted same way, 30-day retention

For maximum privacy

If you have a report you'd rather keep as private as possible, consider:

• Use the anonymous analysis (1 free trial without account, email only at the end)
• Manually redact personal data not strictly necessary before upload (you can cover your name, address or other personal details with a marker; leave the exam values and the pet's name readable, the analysis needs them)
• Ask us to delete the analysis right after reading the result (email hello@decifra-vet.it)

FAQ

Can I request immediate file deletion?+

Yes, email hello@decifra-vet.it with your email and the analysis ID: we delete file and analysis as soon as possible, normally within one business day.

Can OpenAI read my pet's reports?+

The AI model processes the file to generate the analysis. OpenAI employees don't read contents unless for abuse investigations (per their Terms). File stays on their servers max 30 days.

Which providers do you rely on?+

Supabase for storage and database, OpenAI for the AI engine. Data transfers to OpenAI (USA) are covered by Standard Contractual Clauses and the Data Privacy Framework.