Privacy Policy

When you create or join a workspace we collect your name, work email, and a profile image (if your identity provider returns one). We collect operational telemetry — pages viewed, features used, errors encountered — to improve the platform.

Respondents are sampled from a voter file or from a list you provide. Their phone numbers and email addresses are used once to deliver a survey, then immediately hashed (SHA-256). The plaintext is discarded.

Survey responses are stored alongside the hashed identifier plus demographic fields from the source file (age band, gender, party, geography). No free-text response is linked to a re-identifiable identifier.

We use information to deliver surveys, compute weighted toplines, detect fraudulent responses, send service announcements, and (workspace data only) improve the platform.

We do not sell personal information. We do not let third parties use your workspace data to train their models.

Mobile phone numbers collected through our SMS opt-in form, by replying START to one of our short codes, or sourced from the public voter file for an outbound polling campaign are used for one purpose only: delivering the civic survey the user consented to receive.

We do not share, sell, rent, or otherwise disclose mobile phone numbers to third parties, and we do not use them for marketing purposes. Phone numbers are not shared with affiliates for their own marketing either. Aggregated, de-identified survey responses (with no phone number attached) may be shared with the campaign or research sponsor who commissioned the poll.

Phone numbers are hashed (SHA-256) immediately after a survey conversation completes, and the plaintext is discarded. The hash is retained only to honor STOP / do-not-contact requests across future campaigns.

Workspace user accounts persist as long as your workspace is active. Operational logs are retained for 90 days. Anonymized survey responses are retained for 18 months by default; you can shorten this in workspace settings.

We use a short list of third-party providers to operate the Service — including Amazon Web Services (export storage), Railway (database and cache), Twilio and Vapi (SMS and voice delivery), Stripe (billing), and others. The full, current list with each provider's purpose lives at centpoll.com/legal/subprocessors.

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal information. Workspace users can exercise these from Settings → Profile; respondents can submit a request via the opt-out form.

If you are a resident of California or another US state with a consumer privacy law, you have the right to know what personal information we collect, to access or delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising — so there is nothing for you to opt out of today. We use cookies only for strictly-necessary functions and aggregate analytics, never for advertising. If this ever changes, we will post a "Do Not Sell or Share My Personal Information" control here and honor Global Privacy Control (GPC) browser signals.

To exercise any of these rights, email pvaldes@centpoll.com or use the opt-out form. We will not discriminate against you for exercising your rights.

We encrypt data in transit (TLS 1.2+) and at rest (AES-256). We maintain SOC 2 Type II controls and run quarterly penetration tests.

The Service is not intended for anyone under 18. We do not knowingly collect information from minors.

CENTPOLL LLC (Florida). Privacy questions: pvaldes@centpoll.com.