๐๏ธ State Privacy Rights
Your State Privacy Rights โ
All 50 States Welcome
Effective Date: March 27, 2026 | Supplement to the ROI Privacy Policy
This page is a supplement to ROI's main Privacy Policy. It describes additional privacy rights available to residents of specific states that have enacted comprehensive privacy laws. We honor these rights for all users, regardless of where you live.
If you are a resident of any of the states listed below, you have specific legal rights regarding your personal information. To exercise any of these rights, visit our Privacy Rights Request page or email us at hello@roithatworks.com. We respond to all verified requests within 45 days.
- โ
Right to Know โ Request disclosure of the categories and specific pieces of personal information ROI has collected about you, the sources, the purposes, and any third parties it has been shared with.
- โ
Right to Delete โ Request deletion of your personal information, subject to certain legal exceptions.
- โ
Right to Correct โ Request correction of inaccurate personal information ROI maintains about you.
- โ
Right to Opt Out of Sale / Sharing โ Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. ROI does not sell or share your personal information for advertising purposes. See our
Do Not Sell page.
- โ
Right to Limit Use of Sensitive Personal Information โ Limit ROI's use of sensitive personal information (such as health-related data) to what is necessary to perform the services you requested.
- โ
Right to Non-Discrimination โ We will not deny you services, charge you different prices, or provide a different level of service because you exercised a privacy right.
- โ
Shine the Light (California Civil Code ยง1798.83) โ California residents may request information about categories of personal information disclosed to third parties for direct marketing purposes. ROI does not disclose personal information for direct marketing purposes.
How to exercise: Submit a request via our
Privacy Rights Request page or email hello@roithatworks.com with "California Privacy Request" in the subject line. We will verify your identity before processing your request and respond within 45 days (extendable to 90 days with notice).
- โ
Right to Access โ Confirm whether ROI is processing your personal data and access that data.
- โ
Right to Correct โ Correct inaccuracies in your personal data.
- โ
Right to Delete โ Delete personal data you have provided to or that ROI has obtained about you.
- โ
Right to Data Portability โ Obtain a copy of your personal data in a portable, readily usable format.
- โ
Right to Opt Out of Sale โ Opt out of the sale of personal data, targeted advertising, and certain profiling activities. ROI does not sell your personal data.
- โ
Right to Appeal โ If we deny your request, you may appeal within a reasonable period. We will respond to appeals within 60 days and inform you of any further right to complain to the Texas Attorney General.
How to exercise: Email hello@roithatworks.com with "Texas Privacy Request" in the subject line. We respond within 45 days. Appeals must be submitted within 30 days of our response to your initial request.
- โ
Right to Opt Out โ Opt out of processing for targeted advertising, sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects.
- โ
Right to Access โ Confirm whether ROI processes your personal data and obtain a copy.
- โ
Right to Correction โ Correct inaccurate personal data.
- โ
Right to Deletion โ Delete personal data concerning you.
- โ
Right to Data Portability โ Obtain personal data in a portable, readily usable format.
- โ
Right to Appeal โ Appeal a denial of your request within a reasonable period. We will respond within 45 days of receiving an appeal.
How to exercise: Email hello@roithatworks.com with "Colorado Privacy Request" in the subject line. Response within 45 days, with a possible 45-day extension with notice.
- โ
Right to Confirm & Access โ Confirm whether ROI processes your personal data and access that data.
- โ
Right to Correct โ Correct inaccuracies in your personal data.
- โ
Right to Delete โ Delete personal data provided by or obtained about you.
- โ
Right to Data Portability โ Obtain a copy of your personal data in a portable format.
- โ
Right to Opt Out โ Opt out of targeted advertising, sale of personal data, and profiling for consequential decisions. ROI does not engage in these activities.
- โ
Right to Appeal โ Appeal a denied request. We must respond to appeals within 60 days and provide a mechanism to contact the Virginia AG if the appeal is denied.
How to exercise: Email hello@roithatworks.com with "Virginia Privacy Request" in the subject line. We respond within 45 days.
Washington's My Health MY Data Act provides enhanced protections specifically for health data. Because ROI serves healthcare billing professionals and may process health-related operational data in the context of consulting services, we take particular care to comply with this law.
- โ
Right to Confirm & Access โ Confirm whether ROI collects, shares, or sells your consumer health data and access that data.
- โ
Right to Withdraw Consent โ Withdraw consent for collection or sharing of consumer health data at any time.
- โ
Right to Deletion โ Delete consumer health data collected from you.
- โ
Right Against Geofencing โ ROI does not use geofencing around healthcare facilities or use location data to infer health conditions.
- โ
Right to Non-Discrimination โ No discriminatory treatment for exercising your health data rights.
How to exercise: Email hello@roithatworks.com with "Washington Health Data Request" in the subject line. We respond within 45 days. Health data requests are treated with the highest priority.
- โ
Right to Access โ Confirm whether ROI processes your personal data and access that data.
- โ
Right to Correct โ Correct inaccuracies in your personal data.
- โ
Right to Delete โ Delete personal data concerning you.
- โ
Right to Portability โ Obtain a copy of your data in a portable format.
- โ
Right to Opt Out โ Opt out of targeted advertising, sale of data, and certain profiling. ROI does not engage in these activities.
- โ
Right to Appeal โ Appeal a denial within a reasonable period. We will respond within 60 days and inform you of your right to contact the Connecticut AG.
How to exercise: Email hello@roithatworks.com with "Connecticut Privacy Request" in the subject line. We respond within 45 days.
๐ Universal Appeal Process โ All States
If we deny your privacy rights request, we will tell you why in writing within the required timeframe for your state. You may appeal by emailing hello@roithatworks.com with "Privacy Rights Appeal" in the subject line, along with your original request and the reason you believe the denial was incorrect. We will respond to all appeals within 60 days. If your appeal is denied, we will provide information about how to contact your state's Attorney General or relevant regulatory authority.
Our Universal Commitment to Privacy
Even if your state is not listed above, ROI is committed to being transparent about our data practices and respecting your privacy. We honor access, correction, and deletion requests from users in all 50 states, regardless of whether your state has enacted a comprehensive privacy law.
We never sell your personal information. We never share it for advertising. We use it only to provide the Platform services you've signed up for. That's a commitment we make to every user.
Questions, requests, or concerns: hello@roithatworks.com | roithatworks.com/do-not-sell.html