PRIVO handles identity and consent for online services
Privacy Vaults Online, Inc., doing business as PRIVO, operates the Platform for account creation, identity verification and consent management on behalf of websites, apps, connected toys and other online services. School or district EdTech providers may also use it.
Details not recorded for this card
Supporting quotations
The PRIVO iD Platform, (aka PRIVO-Lock) is an identity and consent management platform owned and operated by Privacy Vaults Online, Inc. d/b/a PRIVO®.
EdTech providers that have an agreement with a school or district may also use the PRIVO iD Platform.
Qualifications & exceptions
EdTech use described here involves an agreement with a school or district.
PRIVO asks users who disagree to avoid the Platform
If you disagree with any part of this policy, PRIVO asks you not to use the Platform or myPRIVO.
Details not recorded for this card
Supporting quotations
If you disagree with any part of this Privacy Policy, please do not use the Platform or myPRIVO.
Account & Service Control · Context
The PRIVO symbol indicates technology use, not PRIVO operation
A service displaying the powered by PRIVO iD symbol uses PRIVO technology but is not operated by PRIVO. The solution supports consent for an online property’s collection, use, sharing, disclosure or blocking of personal information.
Details not recorded for this card
Supporting quotations
The powered by PRIVO iD (PiD) symbol indicates that the online service uses PRIVO's technology solution, but it is not operated by PRIVO.
The solution enables individuals to give informed consent to an online property to legally collect, use, share, disclose or block personal information.
Account & Service Control · User right or choice
A PiD account lets users manage consent and account data
A PiD login can be used by services in the PRIVO iD network, which includes only COPPA compliant services and services meeting PRIVO Privacy Assured Program requirements. Account holders can manage consent, settings and PRIVO-collected data through a dashboard, myPRIVO and registered services. myPRIVO also presents program-member information.
Details not recorded for this card
Supporting quotations
Only COPPA compliant services and those that have met the requirements of the PRIVO Privacy Assured Programs are included in this network.
PiD account holders have a dashboard that allows individuals to manage consent and their account settings and data collected by PRIVO.
Individuals can manage their own PiD account on myPRIVO and with the online services they have registered with.
It also showcases information on members of PRIVO's FTC approved COPPA Safe Harbor and Kids Privacy Assured programs.
Qualifications & exceptions
Network services must satisfy the stated compliance or assurance requirements.
Account & Service Control · Procedure
Parents may need an account and verification widget
A parent or guardian may be asked to create an account at a service using the Platform. PRIVO’s verification widget may be used depending on the regulatory requirements for informed consent, age assurance and proof of parental responsibility.
Details not recorded for this card
Supporting quotations
A parent or guardian may be asked to create an account on service that uses the Platform and depending on the regulatory requirement for informed consent, age assurance and proof of parental responsibility, PRIVO’s verification widget may be utilized.
Qualifications & exceptions
Widget use depends on the applicable consent, age assurance and parental-responsibility requirements.
Account & Service Control · User right or choice
Parents can give verifiable consent offline
Parents may give PRIVO verifiable parental consent by mailing, faxing or emailing a signed form, or by calling PRIVO Customer Service.
Details not recorded for this card
Supporting quotations
Parents may also provide PRIVO with verifiable parental consent through an offline method, such mailing, faxing or emailing a signed form to PRIVO or calling the PRIVO Customer Service number.
Account & Service Control · Company practice
Registration provides a PiD that may work across accepting services
Each individual receives a unique PiD account after registration. Adults, teens, parents and children may use it to log into services that accept the credential, although additional consent may be required.
Details not recorded for this card
Supporting quotations
When you have completed the registration process, individuals will each receive a unique PiD account. This PiD may allow adults, teens, parents and their child(ren) to securely log into online services that accept the PiD credential, but additional consent may be required.
Qualifications & exceptions
Only accepting services can use the credential, and additional consent may be required.
Account & Service Control · Context
The policy offers no account-closure download of user data
In its retention section, PRIVO says it does not collect personal data or content that a user could download when an account is closed. Read with its explicit account-data collection and access provisions, this describes no downloadable data at closure rather than no personal-data collection at all. Users may contact privacy@privo.com for retention information.
Details not recorded for this card
Supporting quotations
We do not collect any personal data or content from a user that the user could download when an account is closed.
For more information on data retention contact us here:
There, you will be able to see all the permissions you have set for your child, access the personally identifiable information that PRIVO has collected from you and/or your child, correct factual errors in such information and can delete this information.
Qualifications & exceptions
Concerns downloading at closure; the policy separately describes personal-information access.
Not stated here
No download process or file format is specified.
Cross-references
qualified by (model-proposed): You can request return of personal information at any time — A contact-based right to request return of personal information coexists with the statement about no downloadable data at account closure. No download format or automatic export is inferred.
Users can inspect, correct and delete their or their child’s information
Users can sign in through their registered client service or my.privo.com, then use the profile image and Account & Settings to inspect child permissions, access PRIVO-collected personal information, correct factual errors and delete information. They can also contact PRIVO for deletion. PRIVO takes reasonable steps to verify identity before access. Deletion is ordinarily within five working days of a request or revoked consent, subject to legally required retention. A later paragraph also gives 30 days for a parent or child deletion request; the policy does not explain how these deadlines fit together.
Details not recorded for this card
Supporting quotations
To manage your information, or the information we maintain about your child, sign in through the client service you registered with directly or you can visit my.privo.com and click on “sign in” at the top right of your screen. Then click on your profile image and select “account & settings”.
There, you will be able to see all the permissions you have set for your child, access the personally identifiable information that PRIVO has collected from you and/or your child, correct factual errors in such information and can delete this information. Information can also be deleted by contacting PRIVO directly.
To protect your child’s privacy and security online, we will take reasonable steps to help verify your identity before granting you access to the personal information that we collect and maintain about you or your child.
If consent is revoked or data deletion is requested, then it will be deleted within five working days unless there is a legal requirement to retain the information.
If a parent or child requests to delete their information this request will be met within 30 days unless there is a legal requirement to retain the information.
Qualifications & exceptions
Identity verification precedes access; legally required retention can limit deletion.
The policy also states a 30-day deletion deadline elsewhere, without explaining the difference.
Not stated here
How the five-working-day and 30-day deletion periods relate is unspecified.
Cross-references
qualified by (model-proposed): Consent and verification data are stored for seven years — The information-deletion control is subject to legally required retention; the policy gives both five-working-day and 30-day request periods without reconciling them.
You can request return of personal information at any time
PRIVO allows users to ask at any time for their personal information to be returned by contacting privacy@privo.com. This is a contact-based request; it does not establish a downloadable account-closure export.
Details not recorded for this card
Supporting quotations
You may request your personal information is returned to you at any time by contacting us at
Not stated here
No return format or response period is stated in this passage.
Cross-references
qualifies (model-proposed): The policy offers no account-closure download of user data — A contact-based right to request return of personal information coexists with the statement about no downloadable data at account closure. No download format or automatic export is inferred.
Account & Service Control · User right or choice
Email PRIVO to opt out, review or request deletion
Users can contact privacy@privo.com to opt out of services, review information or request deletion. The policy’s deletion terms remain subject to legal retention and contain both five-working-day and 30-day periods without explaining their relationship.
Details not recorded for this card
Supporting quotations
If you want to opt out of services, review your information, or delete your information, please contact us at
If consent is revoked or data deletion is requested, then it will be deleted within five working days unless there is a legal requirement to retain the information.
If a parent or child requests to delete their information this request will be met within 30 days unless there is a legal requirement to retain the information.
Qualifications & exceptions
Legal retention may limit deletion.
Not stated here
Which of the two deletion periods governs a particular request is unspecified.
PRIVO provides postal, telephone, fax and email privacy contacts
Privacy questions can be directed to Privacy Vaults Online, Inc., doing business as PRIVO, Attn: Privacy Officer, at 17949 Main St., Unit 1025, Dumfries, VA 22026-8043; telephone 703–569–0504; US fax 866–588–8452; international fax 703–531–8424; or privacy@privo.com. The policy also supplies a privo.com/contact link.
Details not recorded for this card
Supporting quotations
Privacy Vaults Online, Inc., d/b/a PRIVO 17949 Main St., Unit 1025 Dumfries, VA 22026-8043 703–569–0504 (telephone) 866–588–8452 (fax within the US) 703–531–8424 (fax outside of the US) privacy@privo.com (email) Attn: Privacy Officer