ElectionsMCP
Privacy Policy
This policy describes what ElectionsMCP collects, why, who else processes it, and how to get it back or deleted. It is written against what the software actually does rather than what a template says, and it is kept current as the product changes.
Who we are
ElectionsMCP is an election scenario calculator operated from the United States. You can reach us about anything on this page — including access, correction and deletion requests — at [email protected].
What we collect, and why
| What | Why | When |
|---|---|---|
| Email address | To sign you in and to send account and billing email. We use one-time sign-in links, so we never ask for or store a password. | When you create an account or request a sign-in link |
| Name, organization, role or use case | To set up your workspace and address you correctly. All optional except a name at signup. | When you fill in the signup form |
| Billing details | To take payment and manage your subscription. Card numbers are handled entirely by Stripe and never reach our servers. We store a Stripe customer identifier, your plan, its status and its renewal date. | When you subscribe |
| Your work product | The scenarios, maps, campaigns, comments, uploaded files and any data you import. This is yours; we store it so the product works. | As you use the product |
| Marketing opt-ins | If you ask for a briefing or updates, we store your address, what you asked for, and where you asked from, so we can send it and honour an unsubscribe. | Only when you explicitly opt in |
| Product analytics | To see where the signup flow breaks. These records hold an event name, a coarse account type and a path — no email addresses and no personal identifiers. | As you move through the site |
| Server logs | Ordinary operational logs, used to keep the service up and investigate abuse. | Automatically |
Cookies
We set one cookie, ems_sess, which holds your sign-in session. It is HttpOnly, SameSite=Lax and marked Secure in production. We do not use advertising cookies, third-party trackers, or cross-site profiling, so there is no consent banner to dismiss.
Data you bring with you
If you import data into your workspace — a voter file, a donor list, a membership roster — you remain responsible for it. You must have the right to upload it and to have us process it on your behalf, and your own licences and legal obligations continue to apply. We process that data only to provide the service to you, and we do not sell it, mine it, use it to train models, or use it to improve the product for anyone else.
Data you import is scoped to your workspace, and within a workspace to the specific campaign it belongs to. It is not visible to other customers.
Who else processes your data
We use a small number of vendors to run the service. Each processes data only to perform its function:
| Provider | What it does |
|---|---|
| DigitalOcean | Hosts the application. Traffic reaches it through their content network. |
| Supabase | Database and file storage. |
| Stripe | Payments and subscriptions. Stripe is the only party that sees your card details. |
| Resend | Sends transactional email — sign-in links, receipts, anything you opted into. |
| mapsmcp | The geographic workspace behind the maps. |
| RoutPoint | Supplies published election results and official data. |
We will update this list when it changes. If you need a data processing agreement naming these vendors, write to us.
How long we keep things
Account and workspace data is kept while your account is open. Marketing contacts are kept until you unsubscribe. Analytics records and server logs are kept for a limited operational period and are not linked back to a person. When you ask us to delete your account, we delete your workspace content and personal data, except where we must keep a record for tax, accounting or legal reasons — billing records being the usual example.
Backups persist for a short window after deletion by design, so that an accident is recoverable. Deleted data ages out of those backups on their normal cycle.
Your choices
- Access and export — ask us and we will give you a copy of your data.
- Correction — most of it you can change in the product; ask us for the rest.
- Deletion — ask us and we will delete your account and its contents, subject to the retention note above.
- Marketing — every email we send you carries an unsubscribe link, and it works immediately. Unsubscribing does not affect account or billing email, which you need to receive.
Depending on where you live you may have further rights, including under the California Consumer Privacy Act or the GDPR. We honour these requests regardless of where you are; write to [email protected]. We do not sell or share personal information as those laws define it.
Security
Data is encrypted in transit. Sign-in is by one-time link, so there are no stored passwords to breach. Workspaces are isolated from one another, and within a workspace, campaign content is limited to the people placed on that campaign. Uploaded files are held in private storage and reachable only through short-lived links issued after we check that the requester is entitled to them.
Our security page describes this in more detail, including what we do not yet claim.
Children
The service is for professional and organizational use and is not directed at children under 13. We do not knowingly collect their data.
Changes
If we change this policy materially, we will update the date above and tell account holders by email. Continued use after a change means you accept the updated policy.