Legal & Privacy
Privacy Notice
This notice explains how the BallotBox corporate website handles information and how future connected services will be reviewed before activation.
Effective date: August 26, 2026
This notice applies to the BallotBox corporate website, including ballotbox.io and any official BallotBox-hosted address that presents this notice. It describes the website's current data practices and will be updated before any material expansion of personal-data processing.
Current Website Forms
The Contact and MyVoteCounts Beta forms currently perform validation within the browser. Information entered into those forms remains in the browser session and is not transmitted to, received by, or stored by BallotBox. Secure submission routing is currently in development.
Current BallotBox Data Systems
BallotBox has not enabled an application database, user accounts, authentication, payments, customer analytics, advertising trackers, or CRM connection for this corporate website. Connected services will receive separate privacy, security, legal, and operational approval before activation.
Hosting & Technical Service Data
Hosting, content-delivery, security, and infrastructure providers may process ordinary technical information needed to deliver and protect the website. This may include an internet protocol address, browser or device information, request timestamps, requested pages, error information, and security signals. Provider processing is governed by the applicable provider’s terms, privacy practices, and service configuration.
Third-Party Resources & Links
The website may load resources such as fonts from third-party providers and contains links to third-party websites, standards, public sources, and technology platforms. Those providers may receive technical request information and apply their own privacy notices and terms. BallotBox does not control third-party websites.
Future Product & Access Information
Future connected BallotBox services may process information such as contact details, account information, role and organization details, beta-access requests, product-support information, or location context used to resolve civic geography. Before covered processing begins, BallotBox will publish the applicable notice, purpose, access controls, retention approach, service-provider terms, and available privacy-request procedures.
Privacy Principles
BallotBox’s privacy approach centers on defined purpose, data minimization, access control, retention discipline, security, transparency, correction, and human accountability. Product teams are expected to identify why information is needed before collection begins.
Maryland Privacy Rights
Maryland residents may have privacy rights under applicable law when a covered organization processes personal data. Before covered processing begins, BallotBox will publish the applicable rights, request methods, identity-verification process, response procedures, and any applicable appeal process.
Children’s Privacy
The BallotBox corporate website is not directed to children under 13 and is not designed to collect personal information from children. Any future youth-facing or education-related experience will require separate product, privacy, safety, legal, and parental-consent review before launch.
Security
BallotBox develops around controlled access, environment separation, secure configuration, review, testing, monitoring, incident planning, and accountable release decisions. No online service can guarantee absolute security, and production safeguards will be documented according to the systems and information involved.
Changes to This Notice
BallotBox may update this notice as the website, products, data practices, providers, or legal requirements change. The effective date will be updated when a revised notice is published.
Privacy Contact
BallotBox will publish a designated privacy contact and privacy-request channel before connected personal-data collection begins.
This notice describes the corporate website's current data practices. Individual BallotBox products, connected services, and professional engagements may be governed by additional notices or agreements based on their functions and data practices.