PRIVO iD Platform Privacy Policy

Teladoc Health · agreement dated January 12, 2026 · Official agreement

Read the agreement

5 of 60 cards in Retention & Deletion

Retention & Deletion · Company practice

Verification may leave limited transaction records

PRIVO uses providers to verify adults’ information and says it uses that information only for identity verification. Depending on the method, it may securely retain the last four credit-card digits, hashed SSN or driver’s license number as a transaction record. The linked provider details are separate from this text.

Details not recorded for this card

Supporting quotations

PRIVO uses service providers to verify adult’s information and does not use it for any other purpose but verifying identity. Depending on the method you use to verify, PRIVO may securely retain the last four digits of your credit card, hashed SSN or driver’s license number as record of a transaction.

Qualifications & exceptions

  • What is retained depends on the verification method.

Not stated here

  • The linked provider page is not supplied; this passage sets no retention duration.

Retention & Deletion · Company practice

Consent and verification data are stored for seven years

PRIVO says consent and verification data are stored for seven years to meet legal requirements. Revoked consent or a deletion request ordinarily leads to deletion within five working days, unless retention is legally required. If a parent does not consent within 30 days, the parent email and collected information are deleted. PRIVO also says it will not retain personal data beyond statutory needs. A later paragraph also gives 30 days for a parent or child deletion request; the policy does not explain how these deadlines fit together.

Details not recorded for this card

Supporting quotations

Data collected to obtain consent and verification is stored for seven years to meet legal requirements. If consent is revoked or data deletion is requested, then it will be deleted within five working days unless there is a legal requirement to retain the information. If a parent does not consent within 30 days your parent email address and any information collected will be deleted.
PRIVO will not retain personal data longer than needed to meet statutory requirements.
If parent consent is not obtained PRIVO deletes any personal information collected from a child (first name, email address, parent email address).
If a parent or child requests to delete their information this request will be met within 30 days unless there is a legal requirement to retain the information.

Qualifications & exceptions

  • Deletion requests and revoked consent have a five-working-day period, subject to legally required retention.
  • Lack of parental consent after 30 days triggers deletion.
  • The policy also states a 30-day deletion deadline elsewhere, without explaining the difference.

Not stated here

  • How the five-working-day and 30-day deletion periods relate is unspecified.

Cross-references

Also annotated in the same passage (5)

Retention & Deletion · Company commitment

The policy also gives 30 days for parent or child deletion requests

A paragraph directing users to client privacy policies for rights over client-collected data says parent or child deletion requests will be met within 30 days, unless legal retention is required. The earlier retention section says five working days for revoked consent or deletion requests, with the same legal-retention exception. The policy does not explain how the two deadlines fit together, so no single deadline can be inferred for every request.

Details not recorded for this card

Supporting quotations

If we are providing our service on behalf of another company, website or app then please review their privacy policy to understand your rights in relation to the personal information they have collected from you. If a parent or child requests to delete their information this request will be met within 30 days unless there is a legal requirement to retain the information.
If consent is revoked or data deletion is requested, then it will be deleted within five working days unless there is a legal requirement to retain the information.

Qualifications & exceptions

  • Legally required retention can limit deletion under either paragraph.

Not stated here

  • The relationship between the five-working-day and 30-day deadlines is unspecified.

Cross-references

  • contrast (model-proposed): Consent and verification data are stored for seven years — One paragraph gives 30 days for parent or child deletion requests, while the retention paragraph says five working days for revoked consent or deletion requests. Both preserve legal retention. The source does not explain the difference; no preferred deadline is inferred.
Also annotated in the same passage (5)

Retention & Deletion · Company practice

PRIVO stores data on US AWS servers

PRIVO says it stores data using AWS servers in the United States. Further information can be requested at privacy@privo.com.

Details not recorded for this card

Supporting quotations

PRIVO uses AWS servers in the United States to store data. For more information on this please contact us at privacy@privo.com.