We are a team passionate about democracy and transparency. Our mission is to track government efficiency and put pressure on the issues that truly matter to people. Votio is the first global, unbiased, factual metric for continental, national, regional, and local government efficiency. We believe that by giving citizens a voice and governments real-time feedback, we can create more responsive and effective governance worldwide. If you have questions or requests, contact us via the Contact page in the app.

This policy covers personal data processed when you use our website and application, create an account, interact with features such as issues and proposals, or communicate with us.

• Account information: email address and profile details you provide (e.g., display name, language).
• Geographic preferences: country, region, and city selections used to determine eligibility and tailor content.
• Identity verification data: limited metadata required to verify eligibility (e.g., document type, verification status). We do not store raw identity document images in our systems unless explicitly required by law or a program and clearly disclosed.
• Usage data: app activity such as views, votes, and interactions, collected to provide core functionality and anti-abuse protections.
• Device and technical data: IP address, browser type, and settings used for security, fraud prevention, and performance.
• Cookies and similar technologies: used to keep you signed in and remember preferences. See Cookies below.

• Provide, operate, and improve the service, including geo-eligibility for voting and participation.
• Authenticate users, maintain sessions, and protect accounts.
• Prevent fraud and abuse, and ensure the integrity of voting and participation.
• Provide aggregate, anonymized analytics to program administrators and governments.
• Communicate updates, security notices, and important service information.
• Comply with legal obligations and enforce our Terms.

• Contract: to provide the service you request.
• Legitimate interests: security, fraud prevention, and service improvement.
• Consent: where required for optional features.
• Legal obligation: to meet regulatory and compliance requirements.

We take security seriously and use administrative, technical, and organizational measures to protect your data. Sensitive data is encrypted and secured.

• Encryption in transit: all traffic between your device and our services is protected using TLS (HTTPS).
• Encryption at rest: databases and storage used by our managed cloud providers are encrypted at rest (e.g., AES-256) by default.
• Access controls: production access is restricted to authorized personnel under least-privilege and MFA.
• Data-layer protections: we use row-level security (RLS) policies to ensure users can only access their own data, and we validate authorization on the server.
• Authentication: passwords and credentials are handled by our authentication provider and are never stored in plaintext.
• Backups: provider-managed backups are encrypted and retained for disaster recovery within limited windows.
• Monitoring and logging: we monitor for suspicious activity and investigate potential incidents.

No method of transmission or storage is 100% secure, but we continuously work to improve our safeguards and respond to incidents consistent with applicable laws.

We do not sell your personal information. We share data with trusted service providers who process it on our behalf to deliver the service (e.g., hosting, authentication, analytics). These providers are bound by contractual obligations to protect your personal data and use it only for the services we request. We may also provide aggregated, anonymized statistics and insights to government entities to help them monitor and evaluate the impact of public policies and programs.

Your data may be processed in countries other than your own. Where required, we implement appropriate safeguards such as standard contractual clauses to protect your information.

We retain personal data only for as long as necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is securely deleted or anonymized.

Depending on your location, you may have rights to access, correct, delete, or port your data; to object to or restrict processing; and to withdraw consent where processing is based on consent. You also may have the right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us via the Contact page in the app. We will verify your request and respond as required by law.

• You must be registered to view, create issues, and submit proposals.
• You must have a verified identity document to vote in the regions for which you have been verified.
• You can only vote in your current location.
• You can change your current location only once per week.

Our service is not directed to children under the age required by applicable law, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

We use essential cookies to operate the service (e.g., to keep you signed in) and preference cookies to remember settings such as language. You can control cookies through your browser settings, but essential cookies are required for core functionality.

Some browsers offer a Do Not Track (DNT) setting. Because there is no common standard, we do not respond to DNT signals.

We may update this Privacy Policy from time to time. We will post the updated version with an updated effective date. If changes are material, we will provide additional notice as required by law.

Questions or requests about this policy or your personal data? Please reach out via the Contact page in the app.