Privacy at DraftPeople.

Information DraftPeople collects

Account information may include your email address, sign-in provider, and provider account identifier. A private district lookup collects your street address, city, state, and postal code. Activity information includes drafts you start, people you support, notification choices, identity claims, campaign-finance notice acknowledgements, and reports you submit.

If you create or claim a public person card, public information may include a name, general location, public-profile link, photo, biography, personal or professional website, contact-page link, office status, affiliation, office-specific campaign website, aggregate supporter count, and whether that count includes the person shown. Other supporter identities are not displayed.

How information is used

DraftPeople uses information to authenticate accounts, identify districts and relevant offices, display and rank matches, prevent duplicate identities, let people control claimed profiles, request one-time identity confirmation from an original drafter, answer support requests, investigate safety reports, and protect the service from misuse.

Stepping forward, claiming and considering a community draft, or accepting an office records one expression of support from the person shown. Declining removes that self-support, and a person may also withdraw it. A DraftPeople expression of support is not a petition signature, vote commitment, campaign contribution, or ballot-access determination.

Location privacy

Your full voting address is never displayed on a public profile. It is used for district lookup and retained privately so you can review or update your districts. A claimed person may choose to display a district-derived city and state, state only, or no location. Editing a public profile or connecting Facebook does not change district information.

Information saved on your device

DraftPeople may temporarily save one unfinished draft on your device, including the proposed person’s name, Facebook profile address, any general location supplied, and selected offices. The unfinished draft expires after seven days and is cleared when you submit or discard it. A profile shared from another app is reviewed in this unfinished state and is not published automatically.

The optional mobile app may keep a private, on-device list of public Facebook profile links that you share to DraftPeople, along with a name, any general location supplied, possible office categories, shared text, the time saved, and a random local identifier. Sharing a profile to the app does not upload or publish it. The list remains on that device until you remove or clear its entries or uninstall the app. Continuing from an entry transfers its saved fields and local identifier to DraftPeople’s review page but does not submit a public draft. After DraftPeople confirms that the draft was saved, the identifier lets the app remove only the matching review entry; it is not used as an account identifier.

The app may also keep an encrypted-on-device shortcut list of public drafts that the signed-in account supports or recently created. This cache includes the account identifier used only to prevent one person’s list from appearing for another account, public person and office details, profile links, public website links, and synchronization times. Signing out clears this private shortcut cache. Account deletion clears it and removes the app’s retained DraftPeople browser data.

The mobile app’s dedicated DraftPeople browser may retain authentication cookies and ordinary website data on the device so a signed-in session can continue between visits. Signing out ends the DraftPeople account session, and uninstalling the app removes its locally retained browser data.

The installable web app may cache public interface files, brand images, and an offline explanation so DraftPeople can open reliably. It does not intentionally cache authenticated account pages, your full voting address, or private database responses for offline use.

Identity and service providers

A verified DraftPeople email proves control of an account, not legal identity. If you claim a community draft by email, the original drafter receives one required account notice asking whether you are the person they intended. Your public label records whether a profile is self-created, awaiting drafter confirmation, drafter-confirmed, administratively reviewed, or Facebook-verified.

DraftPeople uses Supabase for authentication and database services, Cloudflare for hosting and security, and Geocodio for address geocoding and district lookup. If you use optional Facebook verification, Meta and Supabase process the connection. DraftPeople does not receive your Facebook password, post to your account, or request your friends list.

Who can see information

Public profile information and aggregate community activity can be seen by DraftPeople users. The drafted person may hide a claimed card. Automated safeguards screen public submissions for clear threats, unsafe markup, and automated spam. Authorized support, moderation, and owner administrators can review private reports, hide content, and suspend or restore account activity through logged moderation actions. They do not need routine access to full voter addresses.

DraftPeople does not sell personal information. Information may be disclosed when required by law or when reasonably necessary to protect people, DraftPeople, or the integrity of the service.

Retention and choices

DraftPeople retains information while it is needed to operate the service, preserve legitimate moderation and draft history, resolve disputes, or meet legal obligations. Hiding a card removes it from ordinary public match results without necessarily deleting its history. You can update your district address, withdraw support, change notification choices, hide a claimed profile, or permanently delete your signed-in account. Direct deletion removes private account records and self-started public content; independently submitted community draft history may be retained only in a hidden, de-identified form.

Security and age

DraftPeople uses access controls and separates private information from public profile data, but no Internet service can promise absolute security. Do not submit passwords, government identification numbers, or sensitive private information in public fields. DraftPeople is not intended for children under 13.

Questions or requests

Use the private support form for privacy questions, access problems, or corrections. A dedicated data-deletion page explains how to request deletion, including after using Facebook Login. This policy may change as the pilot develops; a new effective date will appear here when it does.