Privacy Policy

1. What We Collect

Civitus collects the following categories of personal information:

• Account information: Name, email address, and profile data provided when you create an account via Clerk.
• Verified address: Your residential address, used to assign you to the correct congressional and state legislative districts. We do not sell or share your address.
• Voting history: Your yes/no/abstain votes on legislation. This is used to calculate the citizen mandate and representative compliance scores.
• Device information: If you use our mobile app and enable push notifications, we collect your Expo push token to deliver notification services.
• Usage data: Standard server logs including IP address and pages visited, retained for up to 90 days.

2. How We Use Your Data

• To assign you to your correct legislative jurisdictions (congressional district, state senate, state house).
• To record and display citizen votes on legislation, calculate mandate results, and evaluate representative compliance.
• To send push notifications about upcoming floor votes and representative non-compliance alerts, if you have opted in.
• We do not sell your personal information to third parties.
• We do not use your data for targeted advertising.

3. Political Contributions

Contribution and PAC terms are under revision and will be published after attorney review.

4. Data Sharing

We share your data only with:

• Clerk: Authentication and session management.
• Stripe: Payment processing for platform subscriptions. Stripe's privacy policy applies to payment data.
• Expo: Push notification delivery for mobile users.

5. Data Retention

We retain your account data for as long as your account is active. Counted-position events are committed to an append-only civic ledger without storing the raw choice in that ledger. Each private event commitment uses a per-person random salt. Account deletion destroys that salt and the private ownership index, so the remaining historical commitment cannot be linked back to the deleted account by Civitus. Public daily commitments and aggregate totals remain because removing them would invalidate the integrity record. You may request deletion by contacting us at privacy@civitus.ai.

6. Your Rights

You have the right to access, correct, or delete your personal information, except where retention is required by law. To exercise these rights, contact privacy@civitus.ai.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Clerk, and encrypted payment processing via Stripe. No internet transmission is 100% secure; we cannot guarantee absolute security.

Public ledger manifests contain bill-scoped keyed commitments, never user IDs or raw choices. A commitment cannot be followed across bills. Daily bill cohorts below 10 participants are withheld from the public manifest, while their opaque hashes remain committed inside the Merkle root for private receipt verification.

8. Contact

Questions about this policy: privacy@civitus.ai