Privacy Policy
Effective June 22, 2026
1. Introduction
M at B LLC ("we", "us", or "eVotaré") operates the eVotaré elections platform at evotare.com. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
2. Who controls your data
eVotaré is a multi-tenant platform. Your organization — the "tenant" that runs your election — is the controller of voter data, and eVotaré acts as a processor on its behalf. Questions about your specific election or voter record should go to your organization. Questions about the platform itself can be sent to privacy@evotare.com.
3. Information we collect
- Account data: name, email, organization, role, and a hashed password.
- Voter data (provided by your organization): name, email, phone (if enrolled for SMS), chair/position assignment, and ballots cast. Cast ballots are stored under ballot secrecy and are not linked to voter identity.
- Messaging data: mobile number and SMS consent status for those who opt in to text notifications; email address for email notifications.
- Prospect / inquiry data: if you request beta access or contact us (for example via the beta-access form), we collect your organization name, your name, email, phone, organization type, and anything you tell us, so we can respond and evaluate fit. This is stored separately from any election or voter data.
- Technical data: IP address, device/browser, session and audit logs, used for security and election integrity.
4. How we use information
We use information to operate elections, authenticate users, send the notifications you have opted into (ballot reminders, results, verification receipts, and multi-factor authentication codes), respond to beta-access requests and other inquiries, secure the platform, and meet our legal obligations. We do not use prospect contact details for unrelated marketing without your consent.
5. SMS / text messaging
We do not sell or share your mobile phone number or SMS opt-in data with third parties or affiliates for marketing or promotional purposes.
Mobile information collected for text messaging — including phone numbers and consent — is used solely to deliver the messaging program you opted into and is not shared with any third parties for their own marketing. We share mobile data only with the messaging provider (Twilio) strictly to deliver your messages. See our Messaging Terms.
6. Email
We send transactional and opt-in notification emails via our email provider (Twilio SendGrid), acting as a processor. Every notification email includes an unsubscribe link and our mailing address ([Mailing address available on request]).
7. Service providers we share with
We share data with Twilio (SMS), Twilio SendGrid (email), and our hosting provider — each bound to process data only on our instructions. We may disclose data if required by law or to protect election integrity. We do not sell personal data.
8. Data retention
We retain election and audit records for as long as needed for the election's integrity and your organization's requirements, after which we delete or anonymize them. Prospect / inquiry data (beta requests) is kept while we evaluate and follow up, and removed on request or once it is clear there is no fit.
9. Security
We protect data with encryption in transit, hashed passwords, encrypted MFA secrets, database-backed sessions, rate limiting, and an immutable audit log.
10. Your choices & rights
You may access, correct, or delete your data by contacting your organization or privacy@evotare.com. You can opt out of SMS at any time by replying STOP, and unsubscribe from emails via the link in any notification message. If you submitted a beta request and want your inquiry data removed, email privacy@evotare.com and we will delete it.
11. Cookies
We use a session cookie and a remember-me cookie strictly for authentication. We do not use third-party advertising cookies.
12. Children
eVotaré is not directed to children under 13/16 (depending on jurisdiction), and we do not knowingly collect their data.
13. Changes
We may update this policy and will post changes here with a new effective date.
14. Contact
M at B LLC
[Mailing address available on request]
privacy@evotare.com