Privacy notice

1. Marketing website

This static site may be served with standard web server logs (IP address, user agent, referrer, timestamps) for security and operations. We do not require an account to read these pages.

If you email us (including via the hosted request form’s mailto flow), we process the content of your message to respond to your enquiry.

Analytics: We prefer privacy-light operations. If analytics are enabled later on this marketing site only, they will not instrument voter cast paths or attempt to correlate ballots with individuals. Prefer self-host or first-party metrics over cross-site ad trackers.

2. Demo sandbox

Demo environments are for evaluation only. Do not enter real personal data of third parties. Demo data may be deleted or reset without notice. Demo is not a production voting system.

3. Hosted lease

When you lease a hosted instance, we process officer account data and system configuration necessary to operate the service. Membership personal data that you enter is processed on your instructions as the institutional controller (or equivalent); we act as a service operator / processor for that tenant data, subject to the hosted agreement.

Ballot Mode B ciphertexts and log artefacts are stored to provide the voting service; plaintext choices are not available to operators when threshold tallier custody is correctly maintained by your officers.

4. Self-hosted software

If you run the open-source software yourself, this notice does not apply to your deployment — you are responsible for your own privacy compliance.

5. Contact

support@publicvoting.org · Built by CPT Software.

This page is a plain-language baseline and will be expanded with jurisdiction-specific terms before commercial launch.