Privacy Policy

1. Information We Collect

Organization Elections Online collects the following types of information:

Personal Information

• Name and contact information (email address, phone number)
• Organization affiliation and role
• Voting preferences and ballot selections
• Account credentials (encrypted passwords)

Technical Information

• IP addresses and device information
• Browser type and version
• Session tokens and authentication data
• System logs and audit trails

2. How We Use Your Information

We use your information to:

• Facilitate secure voting processes
• Verify voter eligibility and prevent fraud
• Maintain election integrity and audit trails
• Provide technical support and system maintenance
• Send important election notifications and updates

3. Voting System Security

Your voting data is protected by multiple security layers:

Encryption

• Password Encryption: All passwords are hashed using PHP's password_hash() with PASSWORD_DEFAULT (bcrypt with cost factor 10+)
• Data Transmission: All data transmission uses HTTPS/TLS 1.2+ encryption
• Database Security: Sensitive voting data is encrypted at rest

Voting Integrity

• Unique Tokens: Each voter receives a unique, time-limited voting token
• Double Voting Prevention: System prevents multiple votes from the same voter
• Audit Trails: Complete logging of all voting activities and system access
• Token Expiration: Voting tokens expire after election closing time

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in these circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To prevent fraud or ensure election integrity
• With authorized election officials for legitimate election purposes

5. Data Retention

We retain your information for the following periods:

• Voting Records: Retained for 7 years as required by election law
• Account Information: Retained while your account is active
• Audit Logs: Retained for 3 years for security and compliance
• Email Verification Tokens: Automatically deleted after 24 hours

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your account (subject to legal retention requirements)
• Opt out of non-essential communications
• Request a copy of your voting history

7. Contact Information

For privacy-related questions or requests, contact us at: