Legal & Privacy
Privacy Notice
This notice explains how the BallotBox corporate website handles information and how future connected services will be reviewed before activation.
Effective date: August 30, 2026
This notice applies to the BallotBox corporate website, including ballotbox.io and any official BallotBox-hosted address that presents this notice. It describes the website's current data practices and will be updated before any material expansion of personal-data processing.
Current Website Forms
The Contact and MyVoteCounts Beta forms transmit the information you enter when you submit them. The Contact form collects your name, organization, role or title, email address, conversation type, the goals you describe, your consent confirmation, and operational submission information such as a submission identifier, submission timestamp, and the page address of the form. The MyVoteCounts Beta form collects your name, organization, role or perspective, email address, Maryland county or region, participant type, your interest statement, your consent confirmation, and the same operational submission information.
Service Providers Used for Form Submission
Cloudflare Turnstile helps identify automated abuse before a submission is accepted. Resend provides operational email delivery for the internal notification and your acknowledgment message. Google Workspace receives the internal notification sent to BallotBox. HubSpot stores a non-marketing contact record and an inquiry ticket so the request can be reviewed, routed, documented, and answered. Lovable provides website hosting and server-side processing for the submission handler.
How Submitted Information Is Used
Information you submit is used to secure, route, review, document, and respond to your request. Submitting a form is not marketing consent. BallotBox does not automatically create a deal, promotional workflow, newsletter subscription, or advertising audience from a website submission.
Retention of Form and Inquiry Records
Operational form and CRM records may be retained for up to 24 months after the last meaningful interaction, unless a longer period is reasonably required for security, legal, contractual, or dispute-resolution purposes.
Current BallotBox Data Systems
The corporate website has no BallotBox application database, user account system, authentication, payments, advertising trackers, or customer analytics platform. Additional connected services will receive separate privacy, security, legal, and operational approval before activation.
Hosting & Technical Service Data
Hosting, content-delivery, security, and infrastructure providers may process ordinary technical information needed to deliver and protect the website. This may include an internet protocol address, browser or device information, request timestamps, requested pages, error information, and security signals. Provider processing is governed by the applicable provider’s terms, privacy practices, and service configuration.
Third-Party Resources & Links
The website may load resources such as fonts from third-party providers and contains links to third-party websites, standards, public sources, and technology platforms. Those providers may receive technical request information and apply their own privacy notices and terms. BallotBox does not control third-party websites.
Future Product & Access Information
Future connected BallotBox services may process information such as contact details, account information, role and organization details, beta-access requests, product-support information, or location context used to resolve civic geography. Before covered processing begins, BallotBox will publish the applicable notice, purpose, access controls, retention approach, service-provider terms, and available privacy-request procedures.
Privacy Principles
BallotBox’s privacy approach centers on defined purpose, data minimization, access control, retention discipline, security, transparency, correction, and human accountability. Product teams are expected to identify why information is needed before collection begins.
Maryland Privacy Rights
Maryland residents may have privacy rights under applicable law when a covered organization processes personal data. Before covered processing begins, BallotBox will publish the applicable rights, request methods, identity-verification process, response procedures, and any applicable appeal process.
Children’s Privacy
The BallotBox corporate website is not directed to children under 13 and is not designed to collect personal information from children. Any future youth-facing or education-related experience will require separate product, privacy, safety, legal, and parental-consent review before launch.
Security
BallotBox develops around controlled access, environment separation, secure configuration, review, testing, monitoring, incident planning, and accountable release decisions. No online service can guarantee absolute security, and production safeguards will be documented according to the systems and information involved.
Changes to This Notice
BallotBox may update this notice as the website, products, data practices, providers, or legal requirements change. The effective date will be updated when a revised notice is published.
Privacy Contact
Privacy and legal requests can be submitted through the Contact form by selecting “Privacy or legal request.” BallotBox will publish additional privacy-request channels as connected services expand.
This notice describes the corporate website's current data practices. Individual BallotBox products, connected services, and professional engagements may be governed by additional notices or agreements based on their functions and data practices.