Privacy Policy

Effective date: April 1, 2026

1. Information We Collect

We collect information you provide directly (name, email, password) when you create an account. We also collect usage data including pages visited, device type, IP address, and browser type to improve the Platform.

2. How We Use Your Information

We use your information to: (a) provide and improve the Platform; (b) process payments via Paddle; (c) send transactional emails (account confirmation, subscription updates); (d) send weekly digest emails if you opt in; (e) analyze usage patterns to improve the service.

3. Payment Data

We do not store payment card information. All payment processing is handled by Paddle (paddle.com), which acts as Merchant of Record. Please review Paddle's privacy policy for details on how they handle your payment data.

4. Data Sharing

We do not sell your personal data. We share data only with: (a) Paddle for payment processing; (b) Supabase for database hosting; (c) Resend for transactional email delivery; (d) Vercel for platform hosting. All providers are bound by data processing agreements.

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

6. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, your personal data is removed within 30 days. Usage logs may be retained for up to 12 months.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at support@democracy-direct.org. Users in the EU and UK have additional rights under GDPR and UK GDPR respectively.

8. Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and row-level security on all database tables. However, no system is completely secure and we cannot guarantee absolute security.

9. Children's Privacy

The Platform is not directed at children under 13. We do not knowingly collect data from children under 13.

10. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email.

11. Contact

For privacy-related questions: support@democracy-direct.org