Privacy Policy

We process sign-in identifiers and verified email from Microsoft Entra External ID; your username, avatar, profile choices, and preferences; derived civic geography; groups, connections, invitations, posts, comments, reactions, chats, events, and reports; payment transaction status and amounts; and technical logs and limited usage analytics needed for security, reliability, and service improvement. Democralink does not receive PayPal card, bank, or wallet credentials.

An address is used to resolve civic geography and may be sent to mapping, geocoding, census, representative, or election-data providers. If you enable automatic election updates, Democralink retains a protected, encrypted copy so it can refresh ballot details, voting locations, and deadlines without asking again. The address is not displayed on your profile, map, or election guide; is excluded from analytics and application logs; and can be removed from profile settings while retaining the civic boundaries already derived from it. Changing civic location replaces the prior protected address, and account deletion removes it.

We use information to provide accounts, maps, representatives, elections, groups, relationships, moderation, notifications, support, security, analytics, and service improvement. We do not currently sell personal information or use it for cross-site targeted advertising.

We use Microsoft Azure Monitor Application Insights to measure page visits, broad navigation paths, feature outcomes, performance, browser and device characteristics, approximate region, and application errors. Democralink configures browser analytics without analytics cookies and does not deliberately send names, email addresses, usernames, street addresses, civic geography names, search text, private group membership, political preferences, or user-created content. Page telemetry excludes URL query strings. Analytics is used to operate and improve Democralink, not for cross-site advertising.

We share information with vendors only as needed to operate the service, including identity, hosting, database, mapping, civic-data, email, logging, and payment providers. Your chosen username, avatar, public profile fields, and content may be visible to other members or the public according to product settings.

Private account data is kept while your account is active and only as long afterward as needed for security, legal obligations, backups, and disputes. Provider-derived data is retained according to the provider's license and cache rules. Data without durable reuse rights is expired rather than added to a permanent archive.

Account deletion removes or anonymizes sign-in identifiers, email, residence profile, civic associations, relationships, notifications, reactions, preferences, and similar private account data. We also schedule the corresponding Microsoft Entra identity for deletion. Microsoft may keep that identity recoverable for approximately 30 days before permanently removing it, after which Democralink removes the retained directory object identifier from its deletion record. Community content and governance records may remain under a generic deleted-account identity so other members' discussions and group history continue to make sense. Minimal policy-acceptance, transaction, security, and legal records may be retained without active profile identifiers where reasonably needed. Backups may retain deleted data temporarily until they rotate out.

We use access controls, encrypted transport, managed identity services, and operational logging, but no system can guarantee absolute security. Profile settings control public civic geography and connection visibility. You may request access, correction, or deletion by using profile settings or contacting support@democralink.com.

Democralink is not intended for children under 13. We may update this policy as features, providers, and legal requirements change and will identify the updated date.