Privacy at DraftPeople.

Information DraftPeople collects

Account information may include your email address, sign-in provider, and provider account identifier. A private district lookup collects your street address, city, state, and postal code. Activity information includes drafts you start, people you support, accounts you block, notification choices, identity claims, office-area concerns and responses, campaign-finance notice acknowledgements, and reports you submit.

If you create or claim a public person card, public information may include a name, general location, photo you choose to publish, biography, personal or professional website, contact-page link, office status, affiliation, office-specific campaign website, aggregate supporter count, whether that count includes the person shown, and a public-safe office-area review status. Other supporter identities, blocked-account choices, office-area reporter identities, and office-area concern counts are not displayed.

Information submitted about another person

A user may submit a person’s name and suggest one or more public offices. The submitting user must reasonably believe the information is accurate, must not knowingly draft a person under 18, and must not submit private or sensitive information.

Before an unclaimed community draft is saved, DraftPeople converts the submitted name to a first name and last initial for the public server record. Public matches may also show the suggested office or voting area and an aggregate supporter count. DraftPeople does not store a Facebook URL, Facebook identifier, Facebook photo, or shared Facebook text in the public or private server record for that unclaimed draft.

How information is used

DraftPeople uses information to authenticate accounts, identify districts and relevant offices, display and rank matches, honor private account blocks, prevent duplicate identities, let people control claimed profiles, request one-time identity confirmation from an original drafter, ask drafters or claimed people to review possible office-area mismatches, answer support requests, investigate safety reports, and protect the service from misuse.

Stepping forward, claiming and considering a community draft, or accepting an office records one expression of support from the person shown when the office pairing is not unresolved or hidden as a mismatch. Declining removes that self-support, and a person may also withdraw it. Blocking an account withdraws your support from profiles connected to that account. A DraftPeople expression of support or office-area concern is not a petition signature, vote commitment, campaign contribution, ballot-access determination, or legal-eligibility ruling.

Location privacy

Your full voting address is never displayed on a public profile. It is used for district lookup and retained privately so you can review or update your districts. A claimed person may choose to display a district-derived city and state, state only, or no location. Editing a public profile or connecting Facebook does not change district information.

Information saved on your device

DraftPeople may temporarily save one unfinished draft in website storage on your device, including the proposed person’s name and selected offices. It expires after 30 days and is cleared when you submit it, discard it, or explicitly sign out. A draft begun while signed in is associated locally with that account so it is not restored for a different or signed-out session.

The iPhone share extension may receive a Facebook address and readable text that you deliberately share with DraftPeople. The app uses that information only on your device to help you confirm the intended person. DraftPeople does not automatically retrieve a Facebook name, photo, posts, friends, or other profile information. Continuing sends only the confirmed name, a random local review identifier, and office choices to DraftPeople’s website; it does not transmit the Facebook address or shared Facebook text. The server keeps only the abbreviated public name and office choices for an unclaimed draft.

After a successful draft that began in the iPhone app, the app may keep the shared Facebook address in its protected on-device shortcut cache for up to 30 days after submission. The address is associated locally with the resulting DraftPeople person profile so the drafter can open the original profile and deliberately share a draft announcement. It is never added to a DraftPeople server record or supplied to another DraftPeople user. The user must write their own message and choose a destination in the iOS share sheet. Only after that explicit choice does the device give the message, Facebook address, and public DraftPeople link to the selected outside service, whose terms and privacy practices apply.

The app’s protected shortcut cache may also include the account identifier used only to prevent one person’s list from appearing for another account, public person and office details, DraftPeople profile paths, public website links, office-area review status, and synchronization times. A user can remove a private Facebook reference without withdrawing support or deleting the public DraftPeople card. The app removes on-device Facebook references when the user removes them, explicitly signs out, deletes the account, uninstalls the app, or reaches the 30-day expiration. A signed-out or different account cannot see the prior account’s cache.

The mobile app’s dedicated DraftPeople browser may retain authentication cookies and ordinary website data on the device so a signed-in session can continue between visits. Signing out ends the DraftPeople account session, and uninstalling the app removes its locally retained browser data.

The installable web app may cache public interface files, brand images, and an offline explanation so DraftPeople can open reliably. It does not intentionally cache authenticated account pages, your full voting address, or private database responses for offline use.

Identity and service providers

A verified DraftPeople email proves control of an account, not legal identity. If you claim a community draft by email, the original drafter receives one required account notice asking whether you are the person they intended. Your public label records whether a profile is self-created, awaiting drafter confirmation, drafter-confirmed, administratively reviewed, or connected to a Facebook account after profile control was established.

DraftPeople uses Supabase for authentication and database services, Cloudflare for hosting and security, and Geocodio for address geocoding and district lookup. Optional Facebook verification is available only after you take control of your DraftPeople profile. Meta and Supabase process that connection; DraftPeople may privately retain the provider account identifier and may publish the verified account name on your DraftPeople profile. DraftPeople’s servers do not store a Facebook profile address received through the iPhone share extension. DraftPeople does not receive your Facebook password, post automatically or without your approval, or request your friends list.

Who can see information

Public profile information and aggregate community activity can be seen by DraftPeople users. The drafted person may hide a claimed card. A private account block is visible only to the person who created it and authorized DraftPeople systems; the blocked account is not notified. Automated safeguards screen public submissions for clear threats, unsafe markup, and automated spam. Authorized support, moderation, and owner administrators can review private reports, hide content, and suspend or restore account activity through logged moderation actions. They do not need routine access to full voter addresses.

DraftPeople does not sell personal information. Information may be disclosed when required by law or when reasonably necessary to protect people, DraftPeople, or the integrity of the service.

Retention and choices

DraftPeople retains information while it is needed to operate the service, preserve legitimate moderation and draft history, resolve disputes, or meet legal obligations. Hiding a card removes it from ordinary public match results without necessarily deleting its history. You can update your district address, withdraw support, change notification choices, block or unblock an account, hide a claimed profile, or permanently delete your signed-in account. Direct deletion removes private account records, including block choices, and self-started public content; independently submitted community draft history may be retained only in a hidden, de-identified form.

Security and age

DraftPeople uses access controls and separates private information from public profile data, but no Internet service can promise absolute security. Do not submit passwords, government identification numbers, or sensitive private information in public fields. DraftPeople is intended for adults. Do not create an account if you are under 18, and do not knowingly draft a person under 18.

Questions or requests

Use the private support form for privacy questions, access problems, or corrections. A dedicated data-deletion page explains how to request deletion, including after using Facebook Login. This policy may change as the pilot develops; a new effective date will appear here when it does.