Privacy Policy

1. Introduction

evotegh (“we”, “us”) respects your privacy and is committed to protecting personal data. This Privacy Policy applies to organizers who create accounts on the Platform and to individuals who participate in elections hosted on the Platform.

By registering or using our services, you acknowledge this policy. If you do not agree, please do not use the Platform.

2. Information We Collect

We collect information in the following categories:

• Organizer account data: Name, email address, phone number (when required), profile photo (if provided via Google sign-in), and authentication identifiers.
• Voter data uploaded by organizers: Names, email addresses, phone numbers, and any custom fields configured for an election.
• Voting activity: Timestamps showing that a voter participated, without linking their identity to ballot choices when ballot secrecy is enabled.
• Payment data: Transaction references and amounts processed through Paystack. We do not store full card or mobile-money credentials on our servers.
• Technical data: IP address, browser type, device information, and logs used for security, debugging, and abuse prevention.

3. How We Use Information

We use collected information to:

• Provide, operate, and improve the Platform
• Authenticate users and enforce account security
• Send election invitations, verification codes, and service notifications
• Process credit purchases and maintain billing records
• Generate aggregated analytics and election results for authorized organizers
• Detect fraud, abuse, and technical issues
• Comply with legal obligations

4. Data Security

We implement administrative, technical, and organizational measures to protect personal data, including:

• Encrypted connections (HTTPS) for data in transit
• Access controls limiting staff access to production systems
• Secure password hashing and optional multi-factor authentication
• Audit logging for sensitive organizer actions where enabled
• Regular review of security practices as the Platform evolves

No method of transmission or storage is 100% secure. We encourage you to use strong passwords and enable two-factor authentication when available.

5. Voter Privacy in Elections

Protecting ballot integrity and voter anonymity is central to our design:

• Ballot secrecy: Votes are stored so organizers can see participation but not how a specific voter voted, when configured for secret ballots.
• Participation tracking: Organizers may see whether a voter has cast a ballot without viewing the ballot contents.
• Vote receipts: When enabled, voters may receive an encrypted receipt as proof of participation without revealing their choice.
• Exports: Result exports are designed to avoid linking voter identity to vote content in raw data exports.

Organizers are responsible for configuring elections appropriately and informing voters about data collection in their own notices.

6. Authentication & Two-Factor Authentication

We may use Firebase Authentication and Google sign-in to help you access your account securely. When phone-based login or SMS two-factor authentication is enabled, we process your phone number to send verification codes.

You can manage some account details from your profile settings. Phone numbers required for security cannot be removed while SMS two-factor authentication remains active.

7. Communications

We send emails and SMS messages related to account security, election administration, voter invitations, and platform updates. You may receive transactional messages even if you opt out of marketing communications.

Organizers are responsible for obtaining appropriate consent before uploading voter contact details for outreach related to their elections.

8. Third-Party Services

We rely on trusted providers to deliver parts of the service, including:

• Paystack — payment processing for credit purchases
• Firebase / Google — authentication services when enabled
• Email and SMS providers — delivery of notifications and verification codes

These providers process data according to their own privacy policies. We recommend reviewing their terms when you use features that depend on them.

9. Data Retention

We retain personal data for as long as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Election data may be retained according to organizer settings and applicable record-keeping requirements.

You may request account deletion by contacting us. Some data may be retained where required by law or for legitimate security purposes.

10. Your Rights

Depending on your location, you may have rights to:

• Access personal data we hold about you
• Request correction of inaccurate information
• Request deletion of your data, subject to legal exceptions
• Object to or restrict certain processing activities
• Withdraw consent where processing is consent-based

To exercise these rights, contact privacy@evotegh.com. We will respond within a reasonable timeframe.

11. Policy Changes

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Material changes may also be communicated through the Platform or by email where appropriate.

12. Contact Us

For privacy questions or requests, contact us at privacy@evotegh.com.

For general support, email support@evotegh.com.