Consumer retention: all data kept while account active plus 7 years, then automatically deleted
Standard Consumer retention is the active-account period plus 7 years, after which Ovia automatically deletes the data — it does not require the user to act.
Details not recorded for this card
Supporting quotations
Data Retention
If you are a Consumer user, we store your data (all categories) for the period that your account is active and then for 7 years after that. After this period, we automatically delete your data.
Qualifications & exceptions
Applies to Consumer (free-version) users.
Deletion after the period is automatic.
Retention & Deletion · Company practice
Ovia+ retention: stored during benefits; generally deleted after benefits end, with notice/conversion offer
Ovia+ data is stored during the benefits period and “generally” — not absolutely — must be deleted after benefits end. Ovia will notify before deletion and, where possible, offer conversion to a Consumer account to retain the data (which then follows the 7-year Consumer rule).
Details not recorded for this card
Supporting quotations
If you are an Ovia+ user, we store your data (all categories) during the period that you are receiving Ovia+ benefits. Ovia is generally required to delete your data after your Ovia+ benefits end.
We will notify you before your data is deleted and, where possible, offer you the opportunity to convert your account to a Consumer account and retain your data.
Qualifications & exceptions
Deletion after Ovia+ benefits end is qualified by “generally required”.
Conversion to a Consumer account is offered only “where possible”.
Retention & Deletion · User right or choice
Standard retention periods are stated, but the user can delete their data at any time
The automatic timelines are “standard” periods, not fixed minimums: the user can Delete data at any time per the choices section.
Details not recorded for this card
Supporting quotations
While these are our standard retention periods, you can delete your data at any time as described in the next section.
Qualifications & exceptions
User-initiated deletion overrides the timescales; it is described in the choices section.
Retention & Deletion · Restriction or exception
Deletion exceptions: retention for records, law, security/investigation, litigation, protecting rights/property
The deletion control is qualified: Ovia “may” retain personal data despite a deletion request for proper business records, compliance with and as permitted by law, security management and investigation, litigation, or protecting the rights or property of Ovia or third parties.
Details not recorded for this card
Supporting quotations
Exceptions to Deletion
Even if you exercise your rights described above, Ovia may retain personal data to maintain proper business records, to comply with and as permitted by law, for security management and investigation, in connection with litigation, or to protect the rights or property of Ovia or third parties.
Not stated here
The linked page “How Does Ovia Respond to Data Requests” is not supplied by this source; this card cannot say what it adds about data requests.
Retention & Deletion · Restriction or exception
Notices continue after opt-out; all email stops only with deletion; public posts stay; research may delay
Four practical limits: opting out leaves account-management notices; the only stated way to stop all emails and push is account deletion; deleting data does not remove posts or comments already shared publicly on Ovia’s social media, community or chat features; and consented research participation may delay deletion until the study completes.
Details not recorded for this card
Supporting quotations
Other Relevant Information
If you opt-out of marketing emails and push notifications, you will still receive account management notices. To stop all emails and push notifications, you must delete your account and data.
If we delete your data, we will not delete the posts or comments you have shared publicly on Ovia’s social media, community or chat features.
If you have consented to participate in a research study and subsequently request deletion of your data, we may delay deletion until completion of the study.
Qualifications & exceptions
The 30-day appeal and research-delay statements are Ovia commitments in this policy, not external law.
Public posts/comments deletion gap persists after data deletion.
Retention & Deletion · Company practice
Data kept on US AWS servers and possibly other US vendors; non-US users may face weaker safeguards; use means consent
Collected data is transferred to US servers of AWS; some personal data may also reach other US-based vendors (principal vendors are on a linked Subprocessors Page). Non-US residents are warned data may become subject to US jurisdiction, which may provide weaker safeguards and rights. Accepting the Policy, using the Services or providing data is treated as acknowledgment and consent to the transfer/processing described.
Details not recorded for this card
Supporting quotations
The data we collect is transferred to servers located in the US of our cloud computing provider, Amazon Web Services (AWS); some personal data may be transferred to other US-based vendors who provide services to Ovia, including the principal vendors listed
If you are resident outside the US, your data may as a result become subject to US jurisdiction which may provide you with weaker data protection safeguards and rights than you would enjoy in your home jurisdiction.
By accepting this Privacy Policy, using the Services or providing us with your personal data you acknowledge and consent to your personal data being transferred and/or processed as described in this Policy.
Qualifications & exceptions
Consent-by-use applies through accepting the Policy, using the Services or providing personal data.
The weaker-safeguards warning is directed at non-US residents.
Not stated here
The linked Subprocessors Page is not supplied by this source; the card cannot name the vendors listed there.