Privacy Policy

1. Information we collect

You provide:

• Account data: email, name, username, password (hashed).
• Compliance data: date of birth, country of residence — used to verify eligibility.
• Profile data: bio, country, avatar, privacy preferences.
• Payment data: processed directly by Stripe; we store the Stripe customer ID and payment metadata, never the card number.
• Content: comments, market suggestions, room descriptions, vote / position data.

Collected automatically:

• Activity: markets viewed, positions taken, rooms joined, redemptions requested.
• Device + usage: browser type, OS, IP address, referrer, basic analytics.
• Cookies: authentication session cookies; no third-party advertising trackers.

2. How we use your information

• to operate, secure, and improve the service;
• to process payments and credit purchases;
• to verify age and jurisdictional eligibility;
• to fulfill gift-card redemptions (we share your email + selected item with our fulfillment vendor);
• to detect fraud, manipulation, and abuse;
• to send transactional, compliance, and (if opted in) marketing email;
• to comply with applicable law and respond to lawful requests.

3. Legal bases (GDPR / Canadian PIPEDA context)

• Contract: processing needed to provide the service you signed up for.
• Legal obligation: age verification, tax and financial record-keeping.
• Legitimate interest: fraud prevention, security, improving the product.
• Consent: optional marketing email (opt-in).

4. Who we share with

We share personal information only with processors required to run the service:

• Convex — database and function runtime (data at rest in US regions).
• Stripe — payment processing.
• Amazon Web Services (via EmailMate) — email delivery (SES).
• Our gift-card fulfillment vendor — email and selected item only, scoped per redemption.
• Cloudflare — DNS and edge network.
• Analytics — privacy-preserving product analytics (no personal profiling, no third-party ad trackers).

We do not sell your personal data. We do not share your positions or trading history with advertisers.

5. What we don't do

• We do not run advertising or behavioral ad tracking.
• We do not sell data to data brokers.
• We do not use your identity or positions to target ads on or off the service.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• delete your account and associated personal data (historical financial and market-integrity records may be retained per Section 7);
• port your data in a machine-readable format;
• withdraw consent for optional processing at any time.

Email privacy@votingmachine.app and we will respond within 30 days. You can also use the self-service delete flow at Settings → Account.

7. Data retention

• Account data: until you delete the account, then anonymized and retained only where required by law.
• Financial records (credit purchases, redemptions): retained for 7 years for tax and compliance.
• Market positions and public comments: retained indefinitely for accuracy-tracking and audit integrity (scrubbed of PII on account deletion).
• Server logs: 90 days unless required for fraud or security investigation.

8. Children

Voting Machine is 18+. We do not knowingly collect personal data from minors. If you believe a minor has registered, email privacy@votingmachine.app and we will remove the account and associated data.

9. International data transfers

Your data may be processed in Canada, the United States, or the European Union depending on which processor is involved. By using Voting Machine, you consent to transfer of your data to those jurisdictions under appropriate safeguards (standard contractual clauses where required).

10. Security

We use industry-standard encryption (TLS in transit, encrypted at rest), password hashing, and principle-of-least-privilege access controls. No system is perfectly secure; we will notify affected users of any breach of their personal data within 72 hours as required by applicable law.

11. Cookies

We use strictly necessary cookies to authenticate your session and a small number of first-party analytics cookies. No third-party advertising cookies.

12. Changes to this policy

We may update this policy. Material changes will be surfaced in-app and the "Last updated" date at the top will change. Your continued use after changes constitutes acceptance.

13. Contact

Lysensy Inc. (operating Voting Machine, part of the Snow Labs portfolio)
Privacy / data requests: privacy@votingmachine.app
General: hello@votingmachine.app