EFFECTIVE AS OF 04/01 2025

California Privacy Notice (CCPA/CPRA)

This California Privacy Notice supplements the information in our [Privacy Policy] and applies solely to California residents. It is provided in compliance with the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA).

Categories of Personal Information We Collect

We collect the following categories of personal information (PI) about California consumers:
Sources of Personal Information

We collect PI from:

- You, when you visit our website or use our services
- Providers, partners, and service vendors (e.g., telehealth, payment processors)
- Cookies and tracking technologies on our website

Purpose of Collection

We use your PI for :

- Providing telehealth and platform services
- Processing payments and transactions
- Improving platform performance and user experience
- Communicating with you
- Complying with legal obligations

Retention of Personal Information

We may disclose your PI to:

- Our service providers (e.g., hosting, analytics, payment processors)
- Affiliated medical groups for treatment and healthcare operations
- Legal or regulatory authorities when required

We do not sell your personal information. We may share your PI for targeted advertising as defined under CPRA.

Your California Privacy Rights

You have the right to:

- Know what PI we collect and how we use it
- Access your PI
- Delete your PI (subject to certain exceptions)
- Correct inaccurate PI
- Limit use of sensitive PI (if applicable)
- Opt out of sale or sharing of PI

To exercise these rights, submit a request to privacy@viviomd.com

We will verify your identity and respond within 45 days.

Non-Discrimination
We will not discriminate against you for exercising your privacy rights.

Updates
We may update this notice. If we do, we’ll update the “Effective Date” and notify users as required.
Category Examples Collected
A. Identifiers Name, email address, IP address, account login Yes
B. Customer Records Address, phone number, payment card info Yes
C. Protected Characteristics Age, gender (if disclosed voluntarily) Yes
D. Commercial Info Records of services purchased or considered Yes
E. Internet Activity Browsing history, interactions with website/app Yes
F. Geolocation Data Approximate location based on IP Yes
G. Audio/Visual Video call recordings (if applicable) No
H. Professional Info Employment or license info (if provided) No
I. Education Info Not collected No
J. Inferences Preferences derived from behavior Yes
K. Sensitive PI Health data, log-in credentials, government ID (if collected during onboarding) Yes