Privacy Policy

Last updated: Feb 21, 2026

Our Commitment

CivixThread helps people follow legislation and engage with representatives. This policy explains what we collect, why, how we share it, and your choices. It's written in plain English, no gotchas.

What we collect & why

We collect only what's needed to power features and maintain authentic, civil discourse.

Account & Profile

Name, email, Firebase UID. Used for login, account integrity, and support.

Civic Data You Provide

Address/ZIP (to determine district), follows, comments, reactions. Used to personalize dashboards and connect you with the right representatives. Posts and comments are visible to other users.

Device & Usage

IP address, device type, operating system, and in-app usage events. Used for security, fraud prevention, and performance.

Social Sign-In

If you sign in with Google, Facebook, or Microsoft, we receive your name, email, and account identifier from the provider. We do not access your contacts, posts, or other data from those services.

Optional Analytics / Cookies

We may use privacy-respecting analytics to understand how features are used. The mobile app does not use cookies. You can opt out of analytics where applicable.

Camera and Photo Library

If you grant permission, the app accesses your camera to scan QR codes at events and capture photos for organization verification. Photo library access is used for profile pictures and post images. Photos you upload are stored securely in Google Cloud Storage.

Location

If you grant permission, the app uses your location to display nearby civic events and determine your congressional district and representatives. Location data is not stored on our servers beyond what is needed to calculate your district.

ID Verification (Stripe Identity)

To keep conversations real and reduce spam, some actions (like posting or voting) may require verified identity.

We use Stripe Identity to verify government-issued identification. Stripe processes ID images and biometric data on our behalf.

CivixThread may have limited access to verification information through Stripe's secure dashboard for review and support purposes, but we do not download or store ID images or biometric data in our own systems.

We keep the verification result and limited metadata for a period necessary to prevent abuse, support appeals, and comply with legal obligations.

How we use data
  • Provide and improve core features (dashboards, bill tracking, comments, alerts).

  • Personalize content based on your district and interests.

  • Protect community integrity with verified identities and anti-abuse measures.

  • Comply with law, enforce terms, and maintain security.

  • Analyze anonymized engagement trends to improve civic participation features and reporting.

Sharing & processors

We do not sell your personal data. We use service providers to operate our product under contracts that restrict their use to our instructions.

CivixThread may use and share anonymized or aggregated information that does not identify you personally—such as general usage trends or public sentiment on legislation—for purposes including improving our services, research, reporting, or supporting civic engagement initiatives.

We also rely on public sources for civic information, such as election and government datasets.

ProcessorPurposeTypes of dataPolicy
Stripe IdentityGovernment ID verificationID images/biometrics (processed by Stripe), verification result metadata to usView
Stripe (Payments)Payment processingPayment information is processed by Stripe. We may receive limited metadata such as payment status and the last four digits of a card when applicable.View
Firebase / Google CloudAuth, database, hosting, logsEmail, UID, IP addresses, usage logsView
SendGrid (Twilio)Transactional emails (contact form, support)Name, email, message contentView
OpenAIAI-generated bill analysis summariesBill text (public legislation, no personal data)View
OAuth Providers (Google, Facebook, Microsoft)Social sign-inName, email, profile identifier from the providerView
Retention & your rights
Retention

• Account data: kept while your account is active.
• Verification outcomes: kept for a limited period (e.g., 12 to 24 months) to prevent abuse and satisfy compliance.
• Logs/analytics: typically retained for up to 12 months.
• Payments: payment details are handled by Stripe. We do not store full card numbers.

Your rights

You can access, correct, or delete your data. You can also delete your account directly from the mobile app under Account Settings. Deletion removes your profile, posts, comments, and uploaded images. Email [email protected] for other requests. We verify requests and respond within required timeframes. Additional rights may apply in certain jurisdictions.

Security & children
Security

We use industry-standard safeguards, including encryption in transit/at rest, access controls, and monitoring. No method is 100% secure, but we work hard to protect your data.

Children

CivixThread is intended for users who are at least 18 years of age or older. We do not knowingly collect personal data from anyone under 18.

Changes & contact

We'll update this page for material changes and revise the "Last updated" date. For questions or feedback, reach us anytime.