Billboard Privacy Policy
Privacy Policy
Effective date: September 24, 2026
This Privacy Policy explains how Billboard collects, uses, and protects information when you use the Billboard mobile app and related services.
1. Information We Collect
Depending on how you use Billboard, we may collect:
- Account information, including your email address used for authentication (AWS Cognito).
- Optional profile and preference information, such as gender, birth year, political party, saved preferences, followed topics, and represented districts.
- District verification information you submit, including state/district selection and, if you choose address verification, address fields such as street, city, state, and ZIP code. We do not store the street address itself; we store the state and congressional district it resolves to. If a lookup fails, our operational logs record the state, ZIP code, and one-way hashed (irreversibly scrambled) forms of the other address fields for troubleshooting; those logs are kept for 30 days.
- Network information when you verify your district: the state your device's IP address appears to be in, and a one-way hash of that IP address. We do not store the IP address itself. This is used only to check whether your reported location is consistent with your network location.
- Device and notification information, including device identifier, push token, and notification settings.
- In-app activity records required to provide app features, including feedback submissions and preference updates.
2. How We Use Information
- Provide, maintain, and secure your account and app features.
- Personalize bill feeds, notifications, and related content.
- Process and store your feedback and preference settings.
- Verify district data when you request district verification.
- Detect abuse, prevent fraud, troubleshoot issues, and improve service reliability.
3. Sharing and Disclosure
We do not sell your personal information. We may share limited data with service providers who operate app infrastructure on our behalf (for example AWS services used for authentication, storage, messaging, and push delivery), and when required by law or valid legal process.
When you choose address verification, the address you enter is sent to the United States Census Bureau's public geocoding service to determine your congressional district. The Census Bureau's handling of that request is governed by its own policies. In some configurations we may also send your device's IP address (and nothing else) to a third-party IP geolocation provider to estimate the state it is located in; this lookup is currently disabled.
Bill summaries shown in the app are generated by an AI model hosted on AWS from public legislative text. No personal information is sent to that model.
4. Data Retention
We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary by data type and operational need.
We keep short-lived backups so we can recover from outages and mistakes. Our databases can be restored to any point in the previous 35 days. Each night we also back up the sign-in directory: your email address, account identifier, state, and district (not your political party, other profile details, or password). Each of those copies is deleted about two weeks after it is made. When you delete your account, your data is removed from the live service right away, and its copies in these backups are deleted as the backups expire, within about five weeks. If we ever restore from a backup, we do not restore accounts that were deleted after that backup was taken.
5. Security
We use reasonable technical and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security.
6. Your Choices and Rights
- You can update profile and preference information in the app.
- You can manage push permissions through your device settings.
- You can delete your account and its data from within the app (Profile → Delete Account And Data). Deletion removes your votes, preferences, device registrations, digests, and verification record.
- You may also request account or data assistance by contacting support.
7. Children’s Privacy
Billboard is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
8. Changes to This Policy
We may update this policy from time to time. If we make material changes, we will update the effective date and may provide additional notice in the app or service.
9. Contact
For privacy questions, account help, or data requests, contact: contact@billboard-project.com