Privacy Policy

Last updated: August 2026

Last updated: August 2026

1. Introduction

CivicBubble Inc. ("Civic Bubble," "we," "our," or "us") operates the Civic Bubble platform, including the mobile application, website (civicbubble.com), portals, widgets, APIs, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, share, and protect information across all aspects of our Services, including our consumer app, business customer portals, campaign pages, embedded widgets, and data reporting tools.

By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

2. Information We Collect

2.1 Information from Individual App and Website Users

Identity Data: Names, usernames, or similar identifiers
Contact Data: Email addresses and residential addresses used for district matching
Technical Data: IP addresses, login information, browser type and version, device type, operating system, app version
Usage Data: Pages viewed, features used, search queries, time spent on the Services
Communications Data: Messages sent to support and reports submitted, along with associated email addresses
Payment Data: If you make a purchase, payment information is collected and processed by our third-party payment processor. CivicBubble Inc. does not store full payment card numbers.

2.2 Information from Business Customers (Portal Users)

Account Data: Organization name, contact name, email, address, billing information
Customer Data: All data, content, and materials that business customers upload, submit, or manage through their portal, including group member information, campaign content, communications, and event details
Configuration Data: Portal settings, user permissions, integration preferences
Usage Data: Portal activity, feature usage, and login history. For Command Center (organization portal) users, this includes limited product-area activity metadata — which generic sections of the portal were used and when (for example, Voters, Messaging, or Membership). We do not record the specific member, voter, or other records you view.

2.3 Information from Managed Profile Holders and Campaign Page Customers

Profile Content: Published news, events, polls, statements, images, and other content from verified account holders
Campaign Page Content: All content published through paid campaign pages, including candidate statements, event listings, and media
Account Data: Contact information, payment information for campaign page subscriptions

2.4 Information from Widget Viewers

When you view Civic Bubble data through a widget embedded on a third-party website, we may collect:

Technical Data: IP address, browser type, device type, referring URL
Usage Data: Widget interactions, data viewed, time spent

We do not collect personal identity information from widget viewers unless they click through to the Civic Bubble website or app and provide information directly. Widget data collection is limited to what is necessary to serve the widget content and understand aggregate usage patterns. Widgets may use cookies or similar technologies necessary for the widget to function properly.

2.5 Publicly Available Government Data

Civic Bubble aggregates publicly available government data, including election records, candidate qualifying information, elected official data, campaign finance filings, legislative records, ethics disclosures, and district boundary information. This data is obtained from public government sources and is displayed on the platform. In addition, CivicBubble Inc. independently creates and maintains proprietary data by mapping officials to offices, tracking historical records, and monitoring government websites and press releases for changes. We do not collect government data from individual users.

3. How We Use Information

We use the information we collect for the following purposes:

Providing the Services: Matching users with voting districts and elected officials, displaying civic data, operating portals and widgets, delivering campaign pages and data reports
Account Management: Registering and maintaining accounts, managing subscriptions and billing for business customers
Content Management: Enabling verified profile holders and campaign page customers to publish and manage content
Service Improvement: Analyzing usage patterns to improve features, fix issues, and develop new functionality
Communications: Sending service notifications, civic updates, and responding to support inquiries
Security: Detecting fraud, preventing unauthorized access, and ensuring compliance with our Terms of Service
Aggregated Analytics: Creating anonymized, aggregated data to understand platform usage and improve the Services
Platform support and customer success: Civic Bubble platform staff may review limited Command Center usage metadata (generic product areas visited and timestamps) to provide support, understand adoption, and identify users who may benefit from outreach. This information is available only to Civic Bubble platform administrators — not to other members of your organization — and is not used for advertising or sold to political campaigns, parties, or PACs.

Important: Personal data is not used for political targeting. Personal data is never sold to political campaigns, parties, or PACs.

4. How We Share Information

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

Service Providers: We share data with third-party service providers who help us operate the Services. Each receives only what it needs to perform its function, is contractually bound to use that data only for the purposes we specify, and may not sell it or use it for its own advertising. Those categories are:
- Cloud hosting and database providers — store the account, civic, and membership data described in Section 2.
- Authentication providers — create and secure your account. Receive your name, email address, and, if you use Sign in with Google or Apple, the identifier returned by that provider.
- Our AI provider, OpenAI — generates Civic Assistant replies. See Section 13.
- Product analytics providers — receive your account identifier, name, email address, and app usage events, including the city, county, and state associated with your account and searches you run in the app.
- Crash and error reporting providers — receive diagnostic data about failures, including app version, build, and device type.
- Mapping and address-lookup providers — receive addresses you enter or select and the coordinates displayed on a map.
- Push notification providers — receive a device push token.
- Email delivery providers and payment processors — used for transactional email and, where applicable, business customer billing.
Business Customer Data: When a business customer (such as a civic group or campaign) uses our portal to manage member communications or events, the business customer controls how that data is used within the portal. Civic Bubble processes this data on behalf of the business customer in accordance with our SaaS Agreement.
Public Content: Content published through managed profiles and campaign pages is intended to be publicly visible and may be displayed on the platform, in widgets, and in search results.
Widget Publishers: We provide civic data to third-party websites and applications through our widget program. Widget data is publicly available civic information and does not include personal data of individual users.
Legal Requirements: We may disclose information when required by law, court order, subpoena, or government request, or to protect the rights, safety, or property of CivicBubble Inc., our users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will notify affected users of any change in ownership or control.

5. Business Customer Data Processing

When business customers use our portals to manage member information, communications, and content, Civic Bubble acts as a data processor on behalf of the business customer (the data controller). In this capacity:

The business customer determines what data is collected from its members and how it is used within the portal.
Civic Bubble processes business customer data solely as necessary to provide the Services and as directed by the business customer.
Civic Bubble does not use business customer data for its own marketing purposes or share it with third parties except as necessary to provide the Services.
Business customer data is subject to the confidentiality and data handling provisions of the applicable SaaS Agreement and NDA.

Upon termination of a business customer relationship, customer data is handled in accordance with the SaaS Agreement, including a 30-day data export window followed by deletion. Business customers requiring a formal Data Processing Agreement (DPA) may request one by contacting info@civicbubble.com.

6. Widgets and Third-Party Sites

When Civic Bubble widgets are embedded on third-party websites, we collect limited technical and usage data to serve the widget content and monitor performance. We do not use this data to track individual users across websites or build advertising profiles.

Third-party websites that embed our widgets may have their own data collection practices governed by their own privacy policies. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policy of any website you visit.

7. Push Notifications

With your permission, we may send push notifications about elections, civic events, and important updates. You can disable push notifications at any time through your device settings.

8. Data Retention

Account and identity data: Retained while your account is active and for up to twelve (12) months thereafter
Feedback, support messages, and votes: Messages you send us — support requests, feature suggestions, bug reports, beta feedback, and votes on other people's suggestions — are kept as a record of that correspondence even after you delete your account. They are no longer linked to your account, but the name, email address, and phone number you submitted them with are retained so we can attribute the message and follow up on it. If you want a message you sent us removed as well, contact us at info@civicbubble.com.
Address data for district matching: Retained until you delete it or your account
Usage and technical data: Retained in aggregated or anonymized form
Command Center usage metadata: Detailed product-area activity records are retained for up to thirty (30) days. Daily usage summaries used for support and adoption reporting are retained for up to twelve (12) months. These records are deleted when the associated account is deleted, subject to the retention rules above.
Business customer data: Retained for the duration of the business relationship plus 30 days for data export, then deleted in accordance with the SaaS Agreement
Managed profile and campaign page content: Available while the account is active; campaign page content is removed upon termination or end of election cycle unless an archive period is specified
Widget usage data: Retained in aggregated form; individual session data is not retained beyond 90 days
Publicly available government data: Retained and updated as new data becomes available from government sources

9. Data Security

We maintain commercially reasonable administrative, physical, and technical safeguards to protect information from unauthorized access, destruction, use, modification, or disclosure, including encryption in transit and at rest, secure authentication, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

For business customers, we maintain data security practices consistent with industry standards for cloud-based software services, as described in the applicable SaaS Agreement.

10. Your Rights and Choices

You may:

Request a copy of the personal data we hold about you
Request corrections to inaccurate information
Request deletion of your personal data
Opt out of push notifications and non-essential communications
Delete your account through Menu → Account Settings → Delete Account, or via the Account Deletion page, or by emailing info@civicbubble.com

Account deletion through the app is processed instantly. Deletion requests via email are typically processed within 3 business days. We will respond to verifiable data rights requests within forty-five (45) days of receipt. Deletion of your account does not affect publicly available government data displayed on the platform.

Business customers may exercise data rights regarding their Customer Data in accordance with their SaaS Agreement, including data export and deletion upon termination.

11. Age Requirement

The Services are designed for users 18 years of age and older and primarily serve voters and civic participants. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected information from a minor, we will take steps to delete it promptly.

12. State Privacy Rights

Residents of certain states may have additional privacy rights under applicable state law. We do not sell personal information. To exercise any applicable privacy rights under your state's law, contact us at info@civicbubble.com.

13. The Civic Assistant

The app includes an AI-powered Civic Assistant that answers questions about Georgia elections, elected officials, districts, and legislation.

13.1 What is sent to OpenAI

When you send a message to the Civic Assistant, the text of that message and the recent conversation are sent to OpenAI, which generates the reply. We also include general location context — such as the districts associated with your saved address — so that answers are relevant to where you live.

We do not send your name, email address, or account identifier to OpenAI. Those stay within our own systems.

Please avoid typing sensitive personal information into the assistant. It is a civic lookup tool and does not need it.

13.2 Limited use

Your messages are used only to generate your answer. They are not sold, not used for advertising, and not used to train AI models.

13.3 What we keep

We store your questions and the assistant's replies in our own systems so that we can monitor answer quality, investigate problems, and enforce the assistant's content rules.

13.4 Content limits

The assistant answers civic and government questions only. Requests outside that scope are refused. This app is rated for all ages and the assistant does not produce mature, romantic, violent, or creative content of any kind.

13.5 Accuracy

Assistant answers may be incomplete or out of date. For anything that matters, verify against the official government source. A full list of our sources is published at civicbubble.com/sources-transparency.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected in the "Last updated" date above. Significant changes may receive additional notice within the app or via email. Continued use of the Services after changes are posted constitutes acceptance of the revised Privacy Policy.

15. Contact Us

CivicBubble Inc.
Email: info@civicbubble.com
Website: civicbubble.com