Legal Rights & Agreement Rules · Restriction or exception
Client privacy practices are covered by their own policies
This policy covers the PRIVO iD Platform and myPRIVO. It does not encompass the privacy practices of services using the Platform; users must consult those services’ policies to understand their and their child’s information use.
Details not recorded for this card
Supporting quotations
This policy covers the PRIVO iD Platform and myPRIVO (my.privo.com). It is not intended to, encompass the privacy practices of the sites and services that use the Platform.
To understand how our clients, use your information, and that of your child, please review their privacy policy.
Not stated here
The clients’ policies are not supplied by this document.
PRIVO describes separate privacy assurance programs
PRIVO also offers a COPPA Safe Harbor Program, GDPRkids Privacy Assured and Children’s Code Privacy Programs. The document directs readers to its website and a separate privacy policy for those solutions.
Details not recorded for this card
Supporting quotations
The privacy solutions offered by PRIVO also include an FTC-approved COPPA (Children’s Online Privacy Protection Act) Safe Harbor Program, as well as GDPRkids™ Privacy Assured and the Children's Code Privacy Programs.
Not stated here
The separate website privacy policy is not supplied here.
Legal Rights & Agreement Rules · Context
PRIVO is subject to FTC oversight
The policy states that PRIVO is subject to the Federal Trade Commission’s investigatory and enforcement powers.
Details not recorded for this card
Supporting quotations
PRIVO is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).
Legal Rights & Agreement Rules · Context
This policy was updated January 12, 2026
The policy identifies January 12, 2026 as its last update and says the update added information about service providers and data collection. Previous versions can be requested using PRIVO’s contact details.
Details not recorded for this card
Supporting quotations
Last Updated: January 12, 2026
To review previous versions of this policy please contact us using the details below.
This policy was updated on January 12, 2026, to include further information on use of service providers and data collection.
Legal Rights & Agreement Rules · Company commitment
Material data-practice changes trigger advance notice steps
PRIVO may make minor nonmaterial changes and reflect them in the last-updated date while users remain bound. For material changes to collection and processing of personal information, it promises reasonable steps to contact users first by email and a login alert, and to obtain consent when necessary before the change takes effect for them. Past versions can be requested by email.
Details not recorded for this card
Supporting quotations
We may make minor non material changes to this policy from time to time. When we do the last updated date will reflect this and you will continue to be bound by this policy.
If we make a material change, that is a change to the way we collect and process personal information we will take reasonable steps to contact you first by email and by alert on login and when necessary, obtain your consent, before making the change effective for you.
Qualifications & exceptions
Contact involves reasonable steps by email and login alert; consent is obtained when necessary.
Legal Rights & Agreement Rules · Restriction or exception
PRIVO keeps parental-consent duties separate from schools
For its service obtaining parent consent for a child’s use of a customer’s online service, PRIVO says FERPA school-official exceptions do not apply and parental-consent duties are not transferred to a school or district. It says it neither collects nor discloses directory information.
Details not recorded for this card
Supporting quotations
PRIVO’s services is provided to obtain the correct level of parent consent for a child to use an online service of one of our customers. FERPA school official exceptions do not apply in this context. PRIVO does not transfer parental consent obligations to a school or district. PRIVO does not collect or disclose directory information.
Qualifications & exceptions
These statements concern the described parent-consent service.
Legal Rights & Agreement Rules · User right or choice
Users can file a dispute or contact PRIVO by email
The policy offers a dispute form at privo.com/file-dispute and privacy@privo.com as routes to raise a dispute.
Details not recorded for this card
Supporting quotations
You can file a dispute by clicking here or you can contact us at privacy@privo.com.
Legal Rights & Agreement Rules · User right or choice
Applicable laws may provide access, correction, transfer and deletion rights
In its US-state and other-jurisdiction notice, PRIVO describes rights that may apply under law: review personal information; request collected or processed categories, personal information and disclosure recipients; potentially transmit information to another entity; correct inaccurate or incomplete data; and request deletion. Rights are not absolute and may be declined where law permits; legally required retention can limit deletion. PRIVO may verify identity, generally charges no fee unless reasonably justified, promises nondiscrimination and says appeal rights may apply. Contact privacy@privo.com to act.
Details not recorded for this card
Supporting quotations
Applicable laws in some US states and other global jurisdictions provide individuals certain rights. These rights may include the following:
Reviewing and transferring personal information: Individuals may review Personal Information we have about them:
Requesting access to information. Individuals may request access to information on what categories of personal information we have collected and processed about them.
Requesting information. Individuals may request access to their personal information and information on any parties their personal information is disclosed to and may have the right to transmit that information to another entity.
Requesting to correct. Individuals may request that inaccurate or incomplete Personal Information concerning them is corrected.
Deleting information : Individuals may request deletion of their personal information however some information may need to be retained if legally required.
Individuals’ rights are not absolute, and in certain cases, maybe declined if permitted by law.
PRIVO does not charge a fee for actioning these rights unless there is a reasonable case for doing so. It may be necessary to establish your identity before sharing personal information with you to protect individuals. PRIVO will not discriminate against individuals who action their rights Individuals may also have the right to appeal any decision not to action their rights.
For more information or to action any of these rights please contact: privacy@privo.com
Qualifications & exceptions
Rights depend on applicable law and may be lawfully declined; legal retention, identity checks and reasonably justified fees may apply.
Legal Rights & Agreement Rules · User right or choice
Australian users may complain to the OAIC
If Australian data-protection law applies to a person’s information and they believe its processing violates that law, the policy says they may complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Details not recorded for this card
Supporting quotations
If your personal information is subject to the applicable data protection laws of Australia and you have reason to believe that processing of your personal data violates those laws you have the right to make a complaint to the competent supervisory authority, the Office of the Australian Information Commissioner which can be contacted here:
Qualifications & exceptions
Australian data-protection law must apply and the complaint concerns believed violation.
Legal Rights & Agreement Rules · User right or choice
The EU and UK notice lists correction, access and control rights
PRIVO says it complies with EU and UK citizens’ GDPR and UK GDPR rights, listing correction, withdrawal of processing consent, a copy of held data, deletion, transfer to another controller for services, restriction and stopping processing. Users can act through privacy@privo.com. The policy elsewhere preserves legally required retention and states both five-working-day and 30-day deletion periods without explaining their relationship.
Details not recorded for this card
Supporting quotations
PRIVO complies with the rights given to EU and UK Citizens under the General Data Protection Regulation (GDPR) and the UK GDPR. These rights are as follows:
to correct the personal data we have about you;
to withdraw your consent to the processing of your personal data;
to obtain a copy of the personal data we hold about you;
to have your personal data deleted;
to transfer your personal data to another controller to provide you with services;
to restrict the personal data we have;
to request we stop processing your personal data.
You can action any of these rights by contacting us at:
If consent is revoked or data deletion is requested, then it will be deleted within five working days unless there is a legal requirement to retain the information.
If a parent or child requests to delete their information this request will be met within 30 days unless there is a legal requirement to retain the information.
Qualifications & exceptions
The list is addressed to EU and UK citizens; legally required retention may limit deletion.
Not stated here
The policy does not explain how its two deletion periods relate.
Legal Rights & Agreement Rules · User right or choice
EU citizens can complain to a data-protection authority
An EU citizen with a complaint about PRIVO’s personal-data processing can contact the relevant Data Protection Authority. PRIVO offers privacy@privo.com for further information.
Details not recorded for this card
Supporting quotations
If you are an EU citizen and would like to make a complaint about the way we process your personal data, you can contact the relevant Data Protection Authority (DPA). Please contact us at
Qualifications & exceptions
This specific notice addresses EU citizens.
Legal Rights & Agreement Rules · Company commitment
PRIVO states Data Privacy Framework compliance and Principles priority
PRIVO says it complies with the EU–US Data Privacy Framework, its UK Extension and the Swiss–US Framework, and has certified adherence to EU–US Principles for EU and UK personal data received in reliance on those arrangements. If this policy conflicts with EU–US or Swiss–US Principles, the Principles govern. The policy identifies US AWS data storage and links to the government program and certification site.
Details not recorded for this card
Supporting quotations
PRIVO complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
PRIVO has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.
If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.
PRIVO uses AWS servers in the United States to store data.
Qualifications & exceptions
The stated EU/UK certification concerns data received in reliance on the Framework arrangements; Principles take priority on conflict.
Not stated here
The linked Principles and certification record are not supplied; no independent certification verification is claimed.
Legal Rights & Agreement Rules · Procedure
Framework inquiries and complaints go to PRIVO first
PRIVO commits to resolving complaints about collection or use under the EU–US Framework Principles. For Framework-policy inquiries or complaints, users should first contact PRIVO’s Privacy Officer at privacy@privo.com, telephone 703–569–0504, or 17949 Main St., #1025, Dumfries, VA 22026. The notice also supplies US and international fax numbers.
Details not recorded for this card
Supporting quotations
In compliance with the EU-U.S. DPF Principles, PRIVO commits to resolve complaints about our collection or use of your personal information. If you have any inquiries or complaints regarding our EU-U.S. Data Privacy Framework policy you should first contact PRIVO at:
17949 Main St., #1025 Dumfries, VA 22026 703–569–0504 (telephone) 866–588–8452 (fax within the US) 703–531–8424 (fax outside of the US) privacy@privo.com (email) Attn: Privacy Officer
Qualifications & exceptions
The first-contact instruction concerns the Framework policy.
Legal Rights & Agreement Rules · User right or choice
Unresolved Framework complaints can go to VeraSafe without charge
For privacy complaints or disputes involving personal data received in reliance on the Data Privacy Framework or a predecessor that internal processes cannot resolve, PRIVO agrees to participate in VeraSafe’s Framework dispute procedure. Appropriate recourse is free to the user subject to that procedure’s terms. Users must submit the required information through the linked VeraSafe dispute form.
Details not recorded for this card
Supporting quotations
If a privacy complaint or dispute relating to Personal Data received by Privacy Vaults Online, Inc in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you.
To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here:
Qualifications & exceptions
Requires unresolved internal handling and Framework or predecessor data; recourse is subject to the procedure’s terms.
Not stated here
The linked VeraSafe procedure is not supplied.
Cross-references
referred to by (model-proposed): Framework disputes may give users a binding-arbitration option — The conditional Framework arbitration recourse follows failure of PRIVO and the preceding dispute-resolution mechanism; it does not impose arbitration on all users or all disputes.
Legal Rights & Agreement Rules · Company commitment
PRIVO agrees to authority-panel dispute procedures after internal failure
If a complaint or dispute cannot be resolved internally, PRIVO also agrees to cooperate with EU and UK data-protection authorities and the Swiss Federal Data Protection and Information Commissioner, and to participate in their established panel’s dispute procedures. This appears in the Framework dispute-resolution section.
Details not recorded for this card
Supporting quotations
If a complaint or dispute cannot be resolved through our internal process, we have also agreed to cooperate with the EU and UK data protection authorities and the Swiss Federal Data Protection and Information Commissioner and to participate in the dispute resolution procedures of the panel established by such data protection authorities.
Qualifications & exceptions
Follows failure of the internal process within the Framework dispute section.
Legal Rights & Agreement Rules · User right or choice
Framework disputes may give users a binding-arbitration option
For a dispute about personal data received in reliance on the Framework that neither PRIVO nor the preceding dispute mechanism resolves, a user may have a right to require PRIVO to enter binding arbitration under the Framework’s Recourse, Enforcement and Liability Principle and Annex I. This is a conditional user recourse, not a requirement to arbitrate every dispute.
Details not recorded for this card
Supporting quotations
If your dispute or complaint related to your Personal Data that we received in reliance on the Data Privacy Framework cannot be resolved by us, nor through the dispute resolution mechanism mentioned above, you may have the right to require that we enter into binding arbitration with you under the Data Privacy Framework “Recourse, Enforcement and Liability” Principle and Annex I of the Data Privacy Framework.
Qualifications & exceptions
Applies to Framework-reliant personal data after unresolved internal and preceding dispute-resolution steps.
Not stated here
The external Principle and Annex I are not supplied; further eligibility conditions are unknown here.
Cross-references
refers to (model-proposed): Unresolved Framework complaints can go to VeraSafe without charge — The conditional Framework arbitration recourse follows failure of PRIVO and the preceding dispute-resolution mechanism; it does not impose arbitration on all users or all disputes.