ElectionsMCP
Privacy Policy
This policy describes what ElectionsMCP ("ElectionsMCP", "we", "us") collects, why, who else processes it, and how to get it back or deleted. It applies to our website, our web application and our Model Context Protocol (MCP) server (together, the "service"). It is written against what the software actually does rather than what a template says, and it is kept current as the product changes. Our Terms of Service govern your use of the service; this policy forms part of them.
Who we are
ElectionsMCP is an election scenario calculator operated from the United States. Our postal address is:
ElectionsMCP
3101 Park Boulevard
Palo Alto, CA 94306
United States
You can reach us about anything on this page — including access, correction and deletion requests — at [email protected].
Our two roles
For account, billing, website and marketing information, we decide how the data is used, so we are its controller. For data that a customer imports into a workspace — a voter file, a donor list, a membership roster — the customer decides what is uploaded and why, so the customer is the controller and we act as its processor (a "service provider" under California law). If you are a person whose details appear in a customer's imported data, please contact that customer; we will help them answer your request.
What we collect, and why
| What | Why | When |
|---|---|---|
| Email address | To sign you in and to send account and billing email. Customers sign in with one-time links or codes, or with Google, so we never ask a customer for a password. The only password accounts are internal test accounts we create for app-store reviewers. | When you create an account or request a sign-in link |
| Name, organization, role or use case | To set up your workspace and address you correctly. All optional except a name at signup. | When you fill in the signup form |
| Billing details | To take payment and manage your subscription. Card numbers are handled entirely by Stripe and never reach our servers. We store a Stripe customer identifier, your plan, its status and its renewal date. | When you subscribe |
| Your work product | The scenarios, maps, campaigns, comments, uploaded files and any data you import. This is yours; we store it so the product works. | As you use the product |
| Connected AI assistants | When you connect an AI assistant over MCP, we store the API key or authorization grant that links it to your account, and a record of the tool calls it makes, so we can enforce your plan and investigate misuse. | When you connect an assistant and as it works |
| Marketing opt-ins | If you ask for a briefing or updates, we store your address, what you asked for, and where you asked from, so we can send it and honour an unsubscribe. | Only when you explicitly opt in |
| Campaign tags | To learn which of our ads and links work. If you arrive through a link that carries campaign tags (such as utm_source), we record those tags and attach them to the signup or request that follows. | When you arrive through a tagged link |
| Product analytics | To see where the signup flow breaks. These records hold an event name, a coarse account type, a path and any campaign tags — no email addresses and no personal identifiers. | As you move through the site |
| Server logs | Ordinary operational logs, including IP address and browser type, used to keep the service up, secure it and investigate abuse. | Automatically |
We also hold public election data — official results, candidate filings and the names of candidates and office holders. These are public records about public roles.
Cookies
We use only first-party cookies that the service needs:
ems_sessholds your sign-in session.em_srcremembers the campaign tags of the link that first brought you to us, for 30 days, so a later signup can be attributed to it. It holds only those tags.- When you authorize an AI assistant to connect to your account, the sign-in and consent screens set short-lived cookies that keep that authorization step secure.
All of them are HttpOnly and SameSite=Lax, and marked Secure in production. We do not use advertising cookies, third-party trackers, or cross-site profiling. Our pages load fonts from Google Fonts, which receives your IP address as part of that request.
How we use information
We use the information above to provide, maintain and secure the service; to process payments; to communicate with you about your account; to send marketing you asked for; to understand and improve how the service is used; to prevent fraud and abuse; to enforce our terms; and to comply with law. We may also create aggregated or de-identified information from usage data — for example, how many workspaces used a feature — and use it for any lawful purpose, because it no longer identifies you. We do not do this with data you import into your workspace.
Legal bases
Where the GDPR or a similar law applies, we rely on: performance of our contract with you (to provide the service and take payment); our legitimate interests (to secure, understand and improve the service, and to market it to business users in ways they can refuse); your consent (for marketing you opt into, which you may withdraw at any time); and legal obligation (for tax, accounting and lawful requests).
Data you bring with you
If you import data into your workspace — a voter file, a donor list, a membership roster — you remain responsible for it. You must have the right to upload it and to have us process it on your behalf, and your own licences and legal obligations continue to apply. That includes any notices or consents owed to the people in it, and the extra care that data revealing political affiliation calls for. We process that data only on your instructions and to provide the service to you, and we do not sell it, mine it, use it to train models, or use it to improve the product for anyone else.
Data you import is scoped to your workspace, and within a workspace to the specific campaign it belongs to. It is not visible to other customers.
Who else processes your data
We use a small number of vendors to run the service. Each processes data only to perform its function for us:
| Provider | What it does |
|---|---|
| DigitalOcean | Hosts the application. Traffic reaches it through their content network. |
| Supabase | Database and file storage. |
| Stripe | Payments and subscriptions. Stripe is the only party that sees your card details. |
| Resend | Sends transactional email — sign-in links, receipts, anything you opted into. |
| mapsmcp | The geographic workspace behind the maps. |
| RoutPoint | Supplies published election results and official data. |
| Serves the fonts on our pages. If you sign in with Google, Google confirms your identity to us. If you choose to connect a Google Sheet to a campaign, Google also provides that sheet to us at your direction. |
When you connect an AI application such as Claude or ChatGPT, the results of the tools you ask it to run are returned to that application, under your account with its provider and that provider's own privacy terms. We send it only what the tool you called returns.
We will update this list when it changes. If you need a data processing agreement naming these vendors, write to us.
Other disclosures
We also disclose information:
- Inside your workspace — to the teammates you invite, according to the roles and campaigns you give them, and to anyone you share a published map or report with.
- When the law requires it — in response to a valid subpoena, court order or similar request, and where we believe in good faith that disclosure is needed to protect the rights, property or safety of our users, the public or ElectionsMCP. Where the law allows, we will tell you before we disclose your data.
- In a business transfer — if ElectionsMCP is involved in a merger, acquisition, financing, reorganization or sale of assets, information may transfer as part of that transaction, and the successor will be bound by this policy for the information it receives.
- With your consent — or at your direction, for example when you connect a third-party service.
How long we keep things
Account and workspace data is kept while your account is open. Marketing contacts are kept until you unsubscribe. Analytics records and server logs are kept for a limited operational period and are not linked back to a person. When you ask us to delete your account, we delete your workspace content and personal data, except where we must keep a record for tax, accounting, security or legal reasons — billing records being the usual example.
Backups persist for a short window after deletion by design, so that an accident is recoverable. Deleted data ages out of those backups on their normal cycle.
Where your data is processed
We are based in the United States and process data there. If you use the service from elsewhere, your information is transferred to the United States, where data protection law may differ from yours. Where the law requires a transfer mechanism, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.
Your choices
- Access and export — ask us and we will give you a copy of your data.
- Correction — most of it you can change in the product; ask us for the rest.
- Deletion — ask us and we will delete your account and its contents, subject to the retention note above.
- Marketing — every email we send you carries an unsubscribe link, and it works immediately. Unsubscribing does not affect account or billing email, which you need to receive.
Depending on where you live you may have further rights, including under the California Consumer Privacy Act (CCPA) or the GDPR, such as the right to object to or restrict processing, and the right to complain to your local data protection authority. We honour access, correction and deletion requests regardless of where you are; write to [email protected]. To protect your account, we verify a request, usually by confirming it from the email address on the account. You may use an authorized agent; we may ask for proof of the agent's authority. We will not discriminate against you for exercising these rights.
California notice
In the last twelve months we collected the categories described above: identifiers (such as email and IP address), commercial information (plan and billing status), internet activity (analytics and logs), and professional information (organization and role). We collected them from you, from your use of the service, and from our vendors, for the purposes described in this policy. We do not sell or share personal information as the CCPA defines those terms, and have not done so in the last twelve months. We do not use sensitive personal information for any purpose that would give you a right to limit it. Because we do not sell or share, we already treat browsers that send a Global Privacy Control signal as opted out; we do not otherwise respond to "Do Not Track" signals.
Security
Data is encrypted in transit. Customer sign-in is by one-time link, code or Google, so there are no customer passwords to breach. Workspaces are isolated from one another, and within a workspace, campaign content is limited to the people placed on that campaign. Uploaded files are held in private storage and reachable only through short-lived links issued after we check that the requester is entitled to them.
No system is completely secure, and we cannot guarantee the security of information sent to or stored by the service. If we learn of a breach that affects your personal data, we will notify you as the law requires. Our security page describes our controls in more detail, including what we do not yet claim.
Children
The service is for professional and organizational use by adults and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
Changes
We may update this policy as the product and the law change. If we change it materially, we will update the date above and tell account holders by email before the change takes effect. Continued use after a change takes effect means you accept the updated policy.
Contact
Email [email protected], or write to ElectionsMCP, 3101 Park Boulevard, Palo Alto, CA 94306, United States.