Your California Privacy Rights

In the 12 months prior to the last updated date of this notice, we have collected the following categories of personal information:

• Identifiers: name, email, phone, IP address, account ID.
• Personal information under Cal. Civ. Code § 1798.80: name, address, phone, medical information, insurance information.
• Protected classifications: age, sex (used for clinical eligibility).
• Commercial information: products and services purchased, billing history.
• Internet or network activity: browsing history, search history, interactions with our Service.
• Geolocation data: approximate location derived from IP address.
• Sensory: photos uploaded as part of identity verification or clinical intake.
• Professional/employment: none collected from consumers.
• Inferences: preferences and characteristics drawn from the above.
• Sensitive personal information: health data, government identifiers (ID photos), precise geolocation only where voluntarily provided.

• Directly from you (account creation, intake, checkout, support).
• Automatically from your device (cookies, analytics, session replay).
• From third parties (advertising partners, service providers, identity-verification vendors).

We collect personal information for the business and commercial purposes described in our Privacy Policy, including providing the Service, processing payments, supporting care, preventing fraud, and complying with legal obligations.

We disclose the categories above to the Medical Group, pharmacies, service providers, legal authorities, and successor entities, as described in our Privacy Policy. Proveta does not sell personal information for money.

We share personal information with advertising partners for cross-context behavioral advertising (such as retargeting). Under the CPRA, this sharing may constitute a "sale" or "share". You have the right to opt out.

• Right to know what personal information we collect, use, disclose, and sell or share.
• Right to access a copy of your personal information in a portable, machine-readable format.
• Right to correct inaccurate personal information.
• Right to request deletion of your personal information.
• Right to opt out of the sale or sharing of your personal information.
• Right to limit the use and disclosure of sensitive personal information to what is necessary to provide the Service.
• Right to not be discriminated against for exercising any of these rights.

To exercise your rights, email [email protected] with the subject line "California Privacy Request". We will verify your identity before responding and will respond within the timeframes required by law (typically 45 days, with a possible 45-day extension). Authorized agents may submit requests on your behalf with appropriate documentation.

California Civil Code Section 1798.83 permits California residents to request information about the categories of personal information we have shared with third parties for their direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.