Track 3 platforms and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is the privacy policy for Ro (Roman Health Ventures Inc.), a telehealth company operating platforms for weight loss, sexual health, fertility, hair loss, and skin treatments. The policy discloses that Ro collects sensitive health data including medical history, prescriptions, mental health information, sexual orientation, and lab results, and that this information may be shared with advertising networks and used for targeted advertising, subject to opt-out rights that vary by state. Ro also states that de-identified data derived from user information may be shared with any third party including advertisers for any purpose, and that AI technologies process collected information for personalization, customer support, fraud detection, and service improvement.
This Privacy Policy governs the collection, use, and disclosure of personal and sensitive personal information by Roman Health Ventures Inc. and its affiliates (collectively 'Ro') across multiple digital health platforms including ro.co, getroman.com, hellorory.com, modernfertility.com, and others, and is stated to be incorporated into Ro's Terms of Use. The agreement authorizes collection of extensive categories of sensitive personal information including health symptoms, medical history, prescriptions, mental health status, drug or alcohol use, genetics, sexual orientation, and sex life information, as well as identity verification documents, and discloses that this information may be processed through AI technologies and shared with advertising partners, analytics providers, joint marketing partners, and service providers. The agreement states that de-identified or aggregated data derived from any collected information 'may be used for any purpose' and disclosed to any third party including advertisers, and separately asserts that user-generated content posted publicly 'may be used for any purpose including in testimonials or other marketing materials'; the agreement also states that health and sexual orientation information may be used for targeted advertising purposes, with opt-out available but only partially restricted in specific states. The policy engages HIPAA and state consumer privacy frameworks including the California Consumer Privacy Act, Texas Data Privacy and Security Act, and Nevada privacy statutes, with distinct rights disclosures for residents of at least eighteen named states; applicable law in specific states may constrain or override some of the broader data-use assertions in this policy, and the interaction between HIPAA-covered treatment data and state consumer privacy rights creates jurisdictionally variable compliance obligations. Ro's operation as a telehealth platform bridging licensed healthcare providers, pharmacies, and consumer-facing digital services creates heightened regulatory exposure across HHS Office for Civil Rights, FTC, and state attorneys general, particularly regarding the use of health and sensitive personal information for advertising and the adequacy of consent mechanisms under applicable state law.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Get ComplianceEvery distinct legal provision identified in this document. Featured provisions appear above with analysis.
Monitoring
Ro has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Get ComplianceCross-platform context
See how other platforms handle AI Processing of User Information for Business Purposes and similar clauses.
Compare across platforms →How 10 AI platforms describe the use of user data for model training, improvement, and development, based on archived governance provisions.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Anthropic is more transparent than most AI companies about data retention. Here's exactly what happens when you delete your data, and how t…
Buried in Robinhood's customer agreement is broad authority to close your positions, suspend your account, and force arbitration. Here is w…
561 arbitration provisions across 197 platforms. ConductAtlas tracks how dispute resolution is being restructured across the internet.
Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.