Privacy policy

This is a template. It reflects how the product is designed to work, and it must be reviewed and adapted by your counsel before it governs a live service. Do not publish it as-is.

Two different roles

Ballot Signal handles personal information in two distinct capacities, and the rules differ.

As a controller, for visitors to ballotsignal.com — the people reading this page.

As a processor, for people identified through our customers’ websites. In that role our customer is the controller: they decide the purposes, they hold the relationship, and our obligations to you run through them and through the data processing agreement.

What we collect on this website

• With your consent: analytics about how you use the site. Our consent banner defaults every category to denied, and nothing loads until you choose otherwise.
• When you submit a form: the fields you fill in — typically name, email, organization and message.
• Automatically, as a necessary part of serving the page: server logs including IP address, user agent and timestamp, retained on a short schedule for security and abuse prevention.

We do not sell personal information. We do not share it with data brokers. We do not run advertising on this site that profiles you.

What we process on behalf of customers

When a customer installs Ballot Signal, and a visitor to that customer’s website grants consent, we process contact information, postal address, on-site behavior after consent, attribution parameters, and the consent record itself. The customer determines what is collected and where it goes. See what you get for the full field list.

Legal basis and consent

Processing of identified-visitor data is based on the visitor’s consent, captured before processing begins. Consent can be withdrawn at any time through the consent management platform on the site where it was given; withdrawal stops processing and is recorded as an event.

Retention

Website analytics and server logs are retained on a short schedule. Customer-directed supporter data is retained per the customer’s configured retention schedule and deleted on their instruction or at the end of the agreement. Details are in security & privacy.

Your rights

Depending on where you live you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to withdraw consent. For data we hold as a controller, contact us. For data we process on behalf of a customer, contact that customer — we will assist them, but the request belongs with the controller.

Children

This service is not directed to children and we do not knowingly collect their information.

Changes

Material changes are versioned. The version in force when a consent was captured is stored with that consent record.

Contact

Write to us at the address on the contact page.