1. Introduction
Viva Voters ("we", "our", or "us") is committed to protecting the privacy of all individuals who use our platform. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with applicable data protection laws including GDPR.
2. Information We Collect
We collect the following categories of personal data:
- Account information: Name, email address, organization name, and password (stored as a secure hash) when you register as an administrator.
- Voter information: Name, email address, and voter ID provided by administrators for election participants.
- Usage data: IP addresses, browser user agent, and timestamps recorded for security audit purposes.
- Contact form data: Name, email, phone number, and message content when you contact us.
3. How We Use Your Information
We use your personal data to:
- Provide and operate the Viva Voters platform and its elections.
- Send voting invitations and election-related communications to registered voters.
- Maintain security audit logs to detect and investigate unauthorized access.
- Respond to support and contact form enquiries.
- Comply with legal obligations.
4. Data Security
We implement industry-standard technical safeguards to protect your data:
- AES-256 encryption for all personal data stored at rest.
- TLS 1.3 to encrypt all data in transit between your browser and our servers.
- Secure, HttpOnly cookies to protect session data.
- Account lockout after repeated failed login attempts to prevent brute-force attacks.
- Comprehensive audit logging of all access and changes to sensitive data.
5. Data Retention
We retain personal data only as long as necessary:
- Administrator and voter records are retained for the duration of the account and deleted upon request.
- Security audit logs are automatically pruned after 90 days.
- Contact form submissions are retained for up to 12 months.
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing: Request that we limit how we use your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests.
To exercise any of these rights, please contact us using the details in Section 9.
7. Sharing of Data
We do not sell, rent, or trade your personal data to third parties. We may share data with trusted service providers (e.g. email delivery, cloud hosting) strictly for the purpose of operating the platform, under binding data processing agreements.
8. Cookies
We use a single session cookie to maintain your logged-in state. This cookie is essential for the platform to function and does not track you across other websites. No third-party advertising or analytics cookies are used.
9. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us via the contact form on our website or email us at privacy@vivavoters.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered administrators of any material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.