Privacy Policy
Effective: August 1, 2026
This service is available only to U.S. citizens, U.S. residents, and U.S. military and government personnel. E.U. residents are not permitted unless they are verified U.S. users. See our Terms of Use and Privacy Policy for details.
1. Overview
Civic Toolkit is a nonpartisan civic intelligence platform that helps U.S. voters track congressional actions, evaluate alignment with political beliefs, and engage with their representatives. This Privacy Policy explains how we collect, use, store, and protect your information. This policy is tailored for users in the United States and is designed to comply with U.S. federal privacy laws and applicable state privacy laws, including the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA").
2. U.S.-Only Service
This service is available only to U.S. citizens, U.S. residents, and U.S. military and government personnel. We do not offer this service to E.U. residents. We do not process personal data under the GDPR and we do not target users in the European Union. If you are an E.U. resident, you may not use this service unless you are a verified U.S. user (U.S. citizen, U.S. military member, or U.S. government personnel).
3. Data Residency
All user data — including account information, favorites, feedback, subscription records, and usage logs — is stored, accessed, and processed exclusively on servers operated and located within the United States. We do not transfer, store, or process your personal data on servers outside the United States. This commitment helps us avoid GDPR-related data transfer incidents.
4. Information We Collect
Account data: your email address, name, and authentication credentials (managed by the platform's authentication service). Profile preferences: lifestyle/political beliefs questionnaire responses, favorite legislators and bills, and notes. Subscription data: payment status and plan type. We do not store full payment card numbers — all payment processing is handled securely by our payment provider (Base44 Payments) on their U.S.-based infrastructure. Feedback: messages and ratings you submit. Usage data: aggregated, non-identifying analytics events such as page views and feature usage.
5. How We Use Your Information
To provide and improve the Civic Toolkit platform, to generate AI-powered legislative analysis and alignment scores, to process subscriptions, to send service-related notifications, and to respond to your feedback. We do not sell your personal data to third parties.
6. AI Usage and Export Controls
Civic Toolkit uses AI models to generate legislative summaries, alignment analysis, and impact reports. We confirm that the AI models used by this platform are not on the U.S. Bureau of Industry and Security (BIS) Entity List or any other U.S. government restricted-party list. This app does not make use of frontier AI models and does not provide access to restricted AI capabilities to foreign persons. The app does not export, transfer, or provide access to controlled AI model weights. All AI processing occurs on U.S.-based infrastructure.
7. Data Sharing
We share data only with service providers that support our platform operations (authentication, payments, hosting, and AI processing), all of which operate on U.S.-based infrastructure. We may disclose information when required by U.S. law or legal process. We do not share data with non-U.S. entities or transfer data outside the United States.
8. Your Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to: know what personal information we collect about you; request deletion of your personal information; request correction of inaccurate personal information; opt out of the sale or sharing of your personal information; and limit the use of sensitive personal information. To exercise these rights, contact us at the address provided below. We do not sell or share personal information as defined by California law.
9. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time. Certain data may be retained as required by U.S. law or for legitimate business purposes such as fraud prevention.
10. Children's Privacy
Civic Toolkit is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can delete it.
11. Security
We implement reasonable technical and organizational measures to protect your data, including encryption in transit and at rest on U.S.-based servers. However, no method of transmission or storage is completely secure.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date. Continued use of the service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through the in-app feedback tool or at our support channel. We are a U.S.-based organization and respond to inquiries in accordance with U.S. law.
