Privacy Policy

Information We Collect

Information you provide: When you create an account, we collect your display name, email address, home address, and preferred language. Your address is used solely to match you with your elected officials and local services.

Information collected automatically: We collect usage data including pages visited, features used, and general location (city-level, from IP address). We use cookies to store your language preference, engagement level, and session data.

Information we do NOT collect: We do not collect Social Security numbers, financial information, health records, biometric data, or any sensitive personal information beyond what is necessary for civic matching.

How We Use Your Information

District matching: Your address is geocoded to determine your Congressional district, state legislative districts, city council district, and county commissioner precinct. This lets us show you exactly who represents you.

Personalization: Your location helps us surface nearby services, local events, and relevant civic information.

Progress tracking: If you use learning paths or action tools, we track your progress so you can pick up where you left off.

Analytics: We use anonymized, aggregated data to understand how people use the platform and to improve our services. We use Google Analytics and Vercel Analytics.

Communication: We may send you civic alerts, election reminders, or platform updates to your email. You can opt out at any time.

Who We Share With

We never sell your data. Period. Your information is not a product.

Service providers: We use Supabase for data storage, Vercel for hosting, and Google Analytics for usage metrics. These providers process data on our behalf under their own privacy policies.

Anonymized aggregates: We may share anonymized, aggregated statistics (for example, "47% of users in ZIP 77004 contacted their city council member this month") for research and civic engagement purposes. These statistics never identify individual users.

Legal requirements: We may disclose information if required by law, subpoena, or court order.

Data Security

We use industry-standard security measures including encrypted data transmission (HTTPS), encrypted data storage, role-based access controls, and regular security reviews. No system is perfectly secure, but we take reasonable measures to protect your information.

Data Retention

We retain your account data as long as your account is active. If you delete your account, we will delete your personal information within 30 days. Anonymized usage data may be retained indefinitely for research purposes.

Your Rights

You have the right to:

• Access the personal information we have about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, contact us through the About page.

Children's Privacy

Community Exchange does not knowingly collect personal information from children under 13. Users between 13 and 17 require parental consent. If we learn we have collected information from a child under 13, we will delete it immediately.

Cookies

We use essential cookies for authentication, language preference, and location context. We use analytics cookies (Google Analytics) to understand usage patterns. You can disable cookies in your browser settings, but some features may not work correctly.

Changes

We may update this policy. We will notify registered users of material changes and update the effective date at the top of this page.

Contact

For privacy questions or to exercise your data rights, visit our About page.