Depending on applicable law, a consumer may have the right to confirm whether Auteva is collecting, sharing, or selling consumer health data; access that data; obtain information about the third parties and affiliates with whom the data was shared or sold; withdraw consent to future collection or sharing; request correction where applicable; and request deletion. To exercise these rights, email legal@autevahealth.com from an address associated with the account or use an in-product privacy request method if one is available. We may use commercially reasonable methods to authenticate the consumer or authorized representative. We do not require a person to create a new account solely to exercise a right. We respond within the time required by applicable law. For Washington requests, we generally respond within 45 days and may extend once by an additional 45 days when permitted and necessary. A Washington deletion request applies to Auteva’s records and requires us to notify applicable affiliates, processors, contractors, and other third parties that received the data; deletion from archived or backup systems may be delayed as permitted by law, but not more than six months after authentication of the request. If we deny a request, the consumer may appeal by replying to the decision or emailing legal@autevahealth.com with “Privacy Appeal” in the subject line. If an appeal is denied, we will provide information about any applicable regulator complaint process.