Privacy Policy

1. Who We Are

CivicLens ("we," "us," or "our") operates a civic intelligence platform that helps Americans understand how legislation affects their daily lives. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2a. Information you provide directly

• Name and email address (account registration)
• ZIP code, city, and state (for local bill matching)
• Occupation category and employment details
• Housing status, household size, and family composition
• Health insurance type and income bracket
• Policy interests and topics you care about
• Payment information (processed securely by Stripe — we never see raw card numbers)

2b. Information collected automatically

• Log data: IP address, browser type, pages visited, time of visit
• Device information: operating system, screen resolution
• Push notification subscription tokens (if you opt in)
• Email open and click events (via our email provider)

2c. Information from third parties

• Subscription and payment status from Stripe
• Legislative data from Congress.gov and OpenStates (public records)

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Generate personalized bill relevance scores and AI-written impact summaries
• Deliver your weekly or daily legislative digest via email
• Send urgent alerts when bills you care about have a vote scheduled
• Process payments and manage your subscription
• Respond to support requests and communications
• Improve the accuracy and quality of our AI models and matching algorithms
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

Your life profile details (occupation, housing, family) are used only to personalize legislative summaries. We do not use this information for advertising, political targeting, or any purpose unrelated to civic information.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• Service providers: Stripe (payments), Supabase (database), Resend (email), Anthropic (AI), and Voyage AI (embeddings) — each under data processing agreements
• Legal requirements: If required by law, court order, or to protect the rights and safety of CivicLens and its users
• Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users

5. Data Retention

We retain your account data as long as your account is active. Personalized bill summaries and relevance scores are retained to power your dashboard. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records).

6. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security in our database, and access controls. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

Email communications

You can unsubscribe from all marketing and digest emails at any time by clicking the "Unsubscribe" link in any email, or by disabling notifications in your Settings. We may still send transactional emails (password resets, billing receipts).

Access and correction

You can view and update your profile information at any time through your account settings. If you need assistance accessing or correcting data, contact us at privacy@civiclens.app.

Deletion

You may request deletion of your account and personal data by emailing us. We will complete the deletion within 30 days of receiving your request.

California residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at privacy@civiclens.app.

8. Children's Privacy

Our Service is not directed to individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and sending an email to registered users where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact our privacy team at privacy@civiclens.app.