Legal
Acceptable use policy
Last updated 2026-08-28
This is a template pending counsel review, but the substance reflects how we intend to operate.
You may not
- Run the service on a website that does not present a consent request before identification logic executes.
- Configure the service to process data for visitors who declined or did not respond to a consent request, or attempt to bypass the consent gate by any means.
- Misrepresent the consent language — for example by showing a consent request that describes analytics while routing records to text-message outreach.
- Route records to a channel the visitor did not consent to. Consent to analytics is not consent to be texted. See TCPA & texting.
- Install the service on a website you do not control or are not authorized to modify.
- Use the service to identify visitors for harassment, intimidation, doxxing, or to target individuals for harm, including on the basis of protected characteristics or inferred political affiliation.
- Resell or redistribute supporter records to third parties as a data product.
- Attempt to re-identify data we have de-identified, or reverse-engineer the identification pipeline.
- Use the service in a manner that violates applicable telephone consumer protection law, state privacy law, or campaign finance law.
How this is enforced
Violations of items 1 through 4 result in immediate suspension pending investigation, because they compromise visitors who did nothing wrong. Other violations follow the notice-and-cure process in the terms.
Reporting
If you believe a site is using Ballot Signal in violation of this policy, tell us through the contact page. Include the URL. We investigate every report.