Privacy Statement
Last updated: 2026-01-27
We care about your privacy and want to keep this simple. This short statement gives you the highlights; the full Privacy Policy follows right after. In the event of an inconsistency between our Privacy Statement and Privacy Policy, the Privacy Policy governs.
Our purpose
We provide online tools to enable citizens to organize their communities for political action and advocacy. We also provide an opportunity for political organizations interested in better understanding the mindsets of their constituents to access anonymized data for this purpose.
The basics
- We collect only what we need to run the Service: account details you give us, usage data (cookies/analytics), and payment info handled by Stripe (we do not store full card numbers).
- We use your information to operate and secure the Service, support you, process payments, prevent fraud, and—only with consent—send updates or marketing (with double opt‑in for some features).
- We use AI and predictive analysis to offer recommendations. These are suggestions—you stay in control.
- We are a wholly apolitical Service, and do not endorse the beliefs or causes expressed by any individual or organization using our Services.
Your content vs. our derived data
- You own what you upload (User‑Generated Content).
- We may create transformed outputs or anonymized/aggregate metadata to operate and improve the Service—those derivatives belong to Civic Deeds Inc.
Anonymization & region tags
- Anonymized/aggregate data lives in separate tables and is not linked to your name, contact info, address, IP, or account ID.
- We only add an electoral region label to anonymized profiles (e.g., your neighborhood), not precise locations.
Cross‑border & security
- We are based in Canada, but trusted providers (such as AWS, Stripe, Google Analytics, Meta) may process data outside Canada. We use safeguards comparable to PIPA.
- We apply reasonable security controls: encryption in transit, access controls, monitoring, and staff confidentiality practices.
Your choices & rights
- Control cookies and marketing preferences; request access or corrections.
- If your account is cancelled or banned, you can download your content for 30 days. We keep personal info for at least 30 days for security, audit, and fraud prevention.
- You can request deletion of your personal information (your “right to be forgotten”) at any time, subject to legal/security exceptions. Fully anonymized/aggregate data may be kept indefinitely.
What not to upload
- Do not upload sensitive or personally identifiable information unless our app explicitly collects it with your consent and (where required) double opt‑in. We may remove such data and suspend accounts that violate this rule.
Privacy Policy
Last updated: 2026-01-27
1. Who we are
Civic Deeds Inc. (“we”, “us”, “our”) is a Service providing online tools to citizens which enable them to organize their communities for political action and advocacy. We also enable political organizations interested in better understanding the mindsets of their constituents to access anonymized data through license agreements. We operate in Canada and follow Alberta’s Personal Information Protection Act (“PIPA”) when handling personal information.
While our Service provides tools for citizens to organize and participate in political action and advocacy and provides a resource for political organizations to better understand the preferences and views of their constituents, we are a wholly apolitical Service. We do not endorse the beliefs or causes expressed by any member or organization using our Service.
2. What this policy covers
This policy explains what we collect, why we collect it, how we use and share it, how we protect it, how our AI‑powered recommendations work, and the choices and rights available to you. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meaning as in our Terms of Service.
3. What we collect
We have several types of users, and what we collect may depend on your user type. The five types of users of our Service are:
- Community Members: Community Members agree to participate in some sort of political action, such as a petition, peaceful march, or a protest, and share their basic contact information (Name, E-mail and/or Phone, Residential Address) which they can withdraw at any time. They may be requested to share that basic contact information with a Community Organizer. Community Members are otherwise view-only to system data.
- Community Organizers: Community Organizers are users who decide to organize Community Members toward some political action or purpose. They are required to share the same information as a Community Member, but with additional contact information such as social media accounts. They are also required to enter payment information for the Service, which is stored in a secure third-party solution.
- Organizational Members: Organizational Members are members of political organizations who wish to access data about users. They can access data reporting information on anonymous profiles, but are not able to access personal contact information for any Community Member or Community Organizer. Organizational Members need to provide and create account information including name, e-mail, address, organization name, and phone number. They also have the option of uploading a photograph.
- Organizational Communicators: Organizational Communicators are members of political organizations wishing to communicate with Community Members and Community Organizers. Organizational Communicators have the ability to reach out to Members and Organizers, and request permission to communicate with Members and Organizers. If they are granted permission to contact a user, they will have access to contact information, which will be merged with the user’s anonymous profile data, but only for the specific Organizational Communicator who has been granted permission. Organizational Communicators upload the same information as Organizational Members, but also upload profile information about their organization, including but not limited to images, documents, organizational background, and mission statements.
- Organizational Administrator: Organizational Administrators are members of political organizations who oversee Organizational Members and Communicators. They upload the same information as Organizational Members and Communicators, but also enter payment information, which is stored in a secure third-party solution.
While we may collect different information depending on user type, you can generally expect that we will collect the following information for all users of our Service (where applicable):
a. Information you provide
- Account details (name, email, password, phone number)
- Optional profile information (e.g., profile photo, bio)
- Support requests and messages
- User‑Generated Content you upload (see Section 7)
b. Information we collect automatically
- Device and log data (IP address, browser, OS)
- Usage and event data (including cookies/SDKs)
c. Payments (Stripe)
We use Stripe to process payments. Stripe collects billing information directly. We do not store full card numbers.
d. Analytics (Google Analytics & Meta Pixel)
We use Google Analytics and the Meta Pixel to understand usage and measure advertising effectiveness. These tools may collect device data, events, and IP addresses.
4. Why we use your information
We use your information to:
- Provide and operate the Service
- Set up and manage accounts
- Process payments
- Secure the Service and prevent fraud
- Improve features, performance, and user experience
- Provide support and communicate with you
- Send updates or marketing with your consent (including double opt‑in where applicable)
- Meet legal and regulatory requirements
We only use information for purposes a reasonable person would consider appropriate in the circumstances.
5. AI & predictive recommendations
We use AI and predictive analysis to provide recommendations and insights (for example, suggested content, settings, or actions). These are recommendations only—you remain responsible for decisions you make.
6. Cookies & tracking
We use cookies, pixels, and similar technologies to remember preferences, keep you signed in, analyze usage, improve performance, personalize content, and measure advertising.
Your choices:
- Manage cookies in your browser or device settings
- Use Google and Meta controls to manage analytics/ads
- Withdraw marketing consent at any time (some features may be affected)
- Request deletion of your personal information (your “right to be forgotten”) at any time, subject to legal/security exceptions. Fully anonymized/aggregate data may be retained indefinitely.
7. User‑Generated Content (UGC)
Ownership of UGC
Your uploads remain your property. We do not claim ownership of your original documents.
License to operate the Service
You grant us a non‑exclusive, worldwide license to host, process, display, and transmit your UGC solely to provide the Service, maintain security, and comply with the law.
Transformations & metadata
Any transformed outputs, processed versions, summaries, extracted features, or aggregate/anonymized metadata created by the Service become the property of Civic Deeds Inc.
8. Data separation, anonymization & region tags
We store transformed/aggregate data in separate data tables and do not associate it with your name, contact info, address, IP, or account identifiers, except for where stated elsewhere in or Privacy Policy or Terms of Service. We only apply electoral region tags (e.g., your neighborhood) to anonymized profiles—not precise locations; however, if you choose to participate in a cause or political action, your name may become associated with the fact that you have participated in that cause or political action for the purposes of disclosure to third parties. This disclosure does not include other Personally Identifiable Information (“PII”), such as address, birthdate etc.).
9. Sharing your information
Service providers
We share information with trusted vendors that help us operate the Service, including but not limited to: Amazon Web Services (hosting), Stripe (payments), Google Analytics and Meta (analytics/advertising). They may only use information to support our Service and must protect it.
Business transactions
If we undergo a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to appropriate safeguards.
Legal reasons
We may share information to comply with the law, a legal process, or to prevent harm or fraud.
10. Cross‑border transfers (Canada‑based)
We operate in Canada, but some providers process or store data outside Alberta or Canada (for example, in the United States). We use contractual, administrative, and technical safeguards designed to ensure protection comparable PIPA.
11. Security
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information (e.g., encryption in transit, access controls, monitoring, staff confidentiality). No system is perfectly secure, but we work to prevent unauthorized access, use, or disclosure.
12. Retention, cancellations/bans & deletion requests
We keep information only as long as needed to provide the Service and for legitimate business, legal, or audit purposes. When no longer needed, we securely delete or anonymize it.
If your account is cancelled or banned, you can download your user‑submitted content for 30 days from the effective date of ban or cancellation, unless prohibited by law or to prevent harm. We retain personally identifiable information for a minimum of 30 days after cancellation/ban for security, fraud‑prevention, audit, and recordkeeping.
You may request immediate deletion of your personally identifiable information. We will act without undue delay, subject to limited exceptions (e.g., legal obligations, dispute resolution, security/audit logs retained for a defined period, and disaster‑recovery backups that expire on a rolling schedule and are not accessible to production systems). We may retain fully anonymized/aggregate metadata indefinitely for legitimate purposes such as analytics, safety, and improving the Service.
13. What not to upload (sensitive/PII)
Except for data our Service collects with your consent and (where applicable) a double opt‑in, please do not upload sensitive or personally identifiable information as content. If such information is uploaded contrary to our Terms, we may remove or redact it where feasible.
14. Your rights (Alberta)
You may request access to your personal information, request corrections, ask how we use or share it, withdraw consent where applicable, and make a complaint. We respond within a reasonable time.
15. Children
Our services are not intended for use by anyone under the age of 18, and users will be asked to verify that they are at least 18 years of age to use the Service. If a child provides information without appropriate consent, we will delete it.
16. Marketing communications (CASL)
We follow Canada’s Anti‑Spam rules. We send marketing only with valid consent and use a double opt‑in for marketing and certain optional features. You can unsubscribe at any time.
17. Changes & contact
If we make significant changes, we will notify you by email or in‑app. The “Last updated” date reflects the current version. Any invalid, illegal or inoperative clause of this agreement will not affect the valid reading and application of all other clauses of this agreement.
Our Privacy Officer can be contacted at: privacy@civicdeeds.com
If we cannot resolve your concern, you may contact the Office of the Information and Privacy Commissioner of Alberta (1‑888‑878‑4044 | https://oipc.ab.ca/).