US State Law Privacy Notice (CA Privacy Notice)

Roku · agreement dated July 1, 2026 · Official agreement

Read the agreement

3 of 166 cards in Security & Safeguards

Security & Safeguards · Company practice

Account credentials, card numbers with access codes, SSN and licence or passport numbers collected as a category

Row M of the California table lists Personal Information that reveals: (a) account log-in, financial account, debit card or credit card number in combination with any required security or access code, password or credentials allowing access to an account; (b) social security, driver’s licence, state identification card or passport number; and (c) content of consumer emails, texts and messages where Roku is not the intended recipient.

Details
What it covers
account credentials, financial account and card numbers with access codes, social security, licence, state ID and passport numbers, and content of emails, texts and messages where Roku is not the intended recipient

Supporting quotations

M. Personal Information that reveals (a) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, (b) social security, driver’s license, state identification card, or passport number, and (c) content of consumer emails, texts and messages where we are not the intended recipient

Qualifications & exceptions

  • in combination with any required security or access code, password, or credentials allowing access to an account
  • where we are not the intended recipient

Security & Safeguards · Company practice

Multistate credentials and government identifiers: only service delivery, enforcement and fraud purposes

Row L of the multistate chart lists Personal Information revealing account log-in, financial account, debit or credit card number with any required security or access code, password or credentials allowing access to an account; social security, driver’s licence, state identification card or passport number; and content of consumer emails, texts and messages where Roku is not the intended recipient. It attaches only three purposes: service delivery and order fulfilment, enforcement of terms and legal obligations, and fraud and illegal-activity prevention.

Details
What it covers
account credentials, financial account and card numbers with access codes, social security, licence, state ID and passport numbers, and message content where Roku is not the intended recipient
What it does
service delivery, enforcement and fraud prevention

Supporting quotations

L. Personal Information that reveals (a) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, (b) social security, driver’s license, state identification card, or passport number, and (c) content of consumer emails, texts and messages where we are not the intended recipient.
To provide and maintain the Roku Services, and to process and fulfill your requests or orders.
To enforce our terms and conditions or protect our business, partners or users, and comply with our contractual and legal obligations.
To protect, investigate, and deter against fraudulent, unauthorized, infringing or illegal activity, including click fraud.

Qualifications & exceptions

  • in combination with any required security or access code, password, or credentials allowing access to an account
  • where we are not the intended recipient

Security & Safeguards · Company practice

Iowa and Utah credentials and government identifiers used only for service delivery, enforcement and fraud

Row M of the Iowa and Utah chart lists Personal Information revealing account log-in, financial account, debit or credit card number with any required security or access code, password or credentials; social security, driver’s licence, state identification card or passport number; and content of consumer emails, texts and messages where Roku is not the intended recipient. It attaches three purposes: service delivery and order fulfilment, enforcement of terms and legal obligations, and fraud and illegal-activity prevention.

Details
What it covers
account credentials, government identifiers and message content where Roku is not the intended recipient
What it does
service delivery, enforcement and fraud prevention

Supporting quotations

M. Personal Information that reveals (a) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account, (b) social security, driver’s license, state identification card, or passport number, and (c) content of consumer emails, texts and messages where we are not the intended recipient
To provide and maintain the Roku Services, and to process and fulfill your requests or orders.
To enforce our terms and conditions or protect our business, partners or users, and comply with our contractual and legal obligations.
To protect, investigate, and deter against fraudulent, unauthorized, infringing or illegal activity, including click fraud.

Qualifications & exceptions

  • in combination with any required security or access code, password, or credentials allowing access to an account
  • where we are not the intended recipient