Privacy Policy

Who we are

BallotPop is an online voting platform built for PTAs, HOAs, and community organizations. You can reach us at hello@ballotpop.com.

What information we collect

We collect different information depending on whether you are an admin or a voter.

Admins (people who create and manage elections) provide:

• Name and email address when creating an account
• Organization name
• Payment information, processed by Stripe — we never see or store your full card number

Voters (people invited to participate in an election) provide:

• First and last name, as entered by the election admin
• Email address, as entered by the election admin (optional — some voters participate via paper ballot)
• Their ballot selections when they vote

We also collect standard technical information when you use the service, including IP addresses, browser type, and pages visited, for security and debugging purposes.

How we use your information

We use the information we collect to:

• Operate the BallotPop platform and deliver the service you signed up for
• Send ballot emails and confirmation emails to voters
• Process payments via Stripe
• Respond to support requests
• Detect and prevent fraud or abuse

We do not sell your personal information to third parties. We do not use voter data for advertising.

Vote privacy and anonymization

Individual votes are private. While an election is active, votes are stored linked to a voter record to support administrative functions such as resending ballots and paper ballot entry. When an admin closes and publishes results, all voter identity links are permanently removed from vote records. After that point, no one — including BallotPop — can connect a specific vote to a specific voter.

Who we share information with

We share data only with the third-party services necessary to operate BallotPop:

• Supabase — our database and authentication provider
• Stripe — payment processing
• Resend — email delivery
• Netlify — website hosting

Each of these providers has its own privacy policy and data processing terms. We do not share your data with any other third parties.

Data retention

Admin account data is retained as long as your account is active. Voter and election data is retained for as long as the election exists in the system. You may request deletion of your organization and all associated data by emailing us at hello@ballotpop.com.

Cookies

BallotPop uses session cookies necessary for authentication. We do not use advertising cookies or third-party tracking cookies.

Your rights

You have the right to request access to, correction of, or deletion of your personal data. To make a request, email hello@ballotpop.com. We will respond within 30 days.

Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), cryptographically generated voter tokens, and access controls on our database. No system is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. Continued use of BallotPop after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at hello@ballotpop.com.