The policy enumerates CCPA/CPRA rights for California residents, including rights to know, delete, correct, and opt out of sale or sharing, and states that Ro will not discriminate against users who exercise these rights.
This analysis describes what Ro's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the procedural rights available to California residents under CCPA/CPRA, including the mechanisms for exercising deletion and opt-out rights, which are operationally significant for compliance with California Privacy Protection Agency enforcement requirements.
California residents operating under these terms have the right to request disclosure of personal information categories collected and shared, request deletion of their personal information, correct inaccurate data, and opt out of the sale or sharing of personal information. The agreement states that Ro will not discriminate against users who exercise these rights.
Cross-platform context
See how other platforms handle California Resident Privacy Rights (CCPA/CPRA) and similar clauses.
Compare across platforms →Monitoring
Ro has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have certain rights with respect to your personal information, including the right to know what personal information we collect, use, disclose, and sell; the right to request deletion of your personal information; the right to correct inaccurate personal information; and the right to opt-out of the sale or sharing of your personal information.— Excerpt from Ro's Ro Privacy Policy
REGULATORY LANDSCAPE: This provision directly implements CCPA/CPRA requirements enforced by the California Privacy Protection Agency (CPPA) and the California AG. The CPPA has authority to issue regulations and impose civil penalties for non-compliance. The provision's scope is limited to California residents, but analogous rights statutes in Colorado, Connecticut, Virginia, Texas, and other states may require equivalent operational capabilities for those resident populations. GOVERNANCE EXPOSURE: Medium. The operational requirements for honoring deletion, correction, and opt-out requests within CCPA/CPRA timelines require functioning request intake, verification, and fulfillment workflows. Compliance teams should audit whether these workflows are operational and whether response time requirements are met. JURISDICTION FLAGS: California creates primary exposure. Colorado, Connecticut, Virginia, Montana, and Texas have enacted analogous statutes requiring comparable rights fulfillment. Washington's My Health MY Data Act imposes additional authorization requirements for health data that may apply to Ro's user population. CONTRACT AND VENDOR IMPLICATIONS: Downstream data sharing agreements must include provisions requiring vendors to honor deletion and opt-out requests passed from Ro, consistent with CCPA/CPRA service provider requirements. Vendors that receive personal information and use it for their own purposes may be classified as third parties rather than service providers, with different contractual implications. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that request intake channels, identity verification procedures, and response timelines comply with CCPA/CPRA regulatory requirements. The opt-out mechanism should be tested against GPC signal requirements. Annual privacy policy updates and updated categories of personal information disclosed should be reviewed for accuracy against current data practices.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the procedural rights available to California residents under CCPA/CPRA, including the mechanisms for exercising deletion and opt-out rights, which are operationally significant for compliance with California Privacy Protection Agency enforcement requirements.
California residents operating under these terms have the right to request disclosure of personal information categories collected and shared, request deletion of their personal information, correct inaccurate data, and opt out of the sale or sharing of personal information. The agreement states that Ro will not discriminate against users who exercise these rights.
ConductAtlas has identified this type of provision across 14 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ro.