Privacy Policy

Last updated: July 3, 2026

This Privacy Policy explains how Izivote (“Izivote”, “we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you use the Izivote website, dashboard, public and embedded voting pages, APIs, and related services (together, the “Services”). Please read it together with our Terms of Service.

Who we are and who this policy covers

Izivote is a platform that lets Organisers create, share, and run digital polls, contests, and voting experiences, including free voting, identity-restricted voting, and Paid Voting (where Voters pay a fee per vote). This policy applies to Organisers and their team members, Voters who take part in a public or embedded voting page, visitors to our website, and anyone who contacts us.

We are the data controller for how we run our own platform, such as your account, billing, payouts, and our website. When an Organiser collects personal data through a voting page (for example, voter records, nominees, or nomination-form responses), the Organiser is the data controller for that data and we act as their processor. In that case the Organiser is responsible for having a lawful basis to collect the data, giving Voters and nominees the right notices, and handling requests about it. We do not resolve disputes about who owns content, but we may restrict, hide, or remove content that breaks the law, infringes someone’s rights, or violates our terms.

Information we collect

When you use the Services, you give us information such as your name, email address, and password, and, if you subscribe to a paid plan, billing information. Your payment details are handled by our payment processor, so we never receive your full card number or security code. Organisers who use Paid Voting also give us the details we need to send their payouts. We keep the content you create, such as voting pages, nominees, and voter lists, and the messages you send us.

We also collect some information automatically, including your IP address and approximate location, your device and browser type, the pages you view, and the votes you cast, along with the dates and times. For each vote we keep a record of the option chosen, a voter identifier, the time, and, for paid votes, a payment reference, so we can count votes accurately and prevent duplicates. Where an Organiser uses identity-restricted or social login, we receive limited identifying information (usually an email address and a user identifier) from the provider they or the Voter chooses, and our payment providers send us the status and basic details of each transaction.

How we use your information

We use personal data to provide and maintain the Services; to secure accounts and detect fraud and vote manipulation (our automated checks flag activity for a person to review, but a person makes any decision); to process subscriptions, paid votes, and payouts; to count and display results and handle disputes; to send you service messages such as receipts and account notices; to send marketing messages if you have not opted out; to answer your questions; to understand and improve how the Services are used, using aggregated or de-identified data where we can; and to comply with the law and enforce our terms. We do not sell your personal data, and we do not share it for others’ advertising or profiling.

Where the law (such as the GDPR or the UK GDPR) requires a legal basis to process your data, we rely on performing our contract with you, our legitimate interests (such as keeping the Services secure and improving our product), your consent (for optional cookies and marketing, which you can withdraw at any time), and our legal obligations (such as keeping tax records).

Cookies

We use cookies and similar technologies that are necessary to sign you in, keep your session secure, run our embeddable widgets, and recognise Voters so we can prevent duplicate voting (on an embedded voting page, that recognition cookie can be read by the site hosting the widget). With your consent, we also use Google Analytics to understand how the Services are used; until you accept analytics cookies through our banner, it runs in a mode that measures activity anonymously and does not identify you. You can manage non-essential cookies through the banner or your browser settings, though blocking some cookies may stop parts of the Services from working.

We share personal data only as needed to run the Services. This includes our payment and payout providers (to take payments and send payouts), the identity providers Organisers choose (to sign Voters in), and the service providers that host our infrastructure, store data, and deliver email on our behalf. We use Google Analytics for aggregate usage measurement on our website and voting pages. We may also share data with our professional advisers, with authorities where the law requires it or to investigate fraud or protect people’s safety, and with a buyer if we are ever involved in a merger or sale of the business.

Where your information is stored and transferred

Izivote is based in Canada, and we store and process personal data in Canada and the United States. This means your data may be handled in a country other than your own, whose rules may differ. Canada is recognised by the European Union and the United Kingdom as providing an adequate level of data protection, and we take reasonable steps to protect your data wherever it is handled.

How long we keep your information

We keep personal data only for as long as we need it. We keep account data while your account is open and for a reasonable period afterwards to handle disputes and legal claims; vote and payment records for as long as tax and accounting rules require, typically up to 5 years; and security logs for up to 60 days. Content in a voting page is deleted when the Organiser asks us to, or when their account is closed.

How we keep your information safe

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords, access controls, and careful handling of credentials. We review our security and work to strengthen it over time. No system is completely secure, so we cannot guarantee absolute security.

Your rights and how to use them

Depending on where you live, you may have rights over your personal data under laws such as the GDPR, the UK GDPR, or Canada’s PIPEDA. These can include the right to access, correct, delete, or receive a copy of your data, to restrict or object to certain processing (including marketing), and to withdraw consent. You can also complain to your local data-protection authority, such as your national regulator in the EEA or UK, or the Office of the Privacy Commissioner of Canada.

You can manage most of your data from your dashboard, including your account settings and account deletion. For anything else, email [email protected] from the address on your account; we may need to verify your identity, and we aim to respond within 30 days. For data inside a voting page that an Organiser controls, please contact that Organiser, and we can help pass on your request if you cannot reach them.

Age requirements

You must be at least 16 to create an account or use the Services as an Organiser. Younger people may take part as Voters on a voting page where the Organiser has obtained any parental or guardian consent required in their country, and the Organiser is responsible for obtaining that consent. If you believe we hold personal data collected from someone under 16 without the appropriate consent, please contact [email protected] and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the date above and, where practical, let Organisers know. Continuing to use the Services after a change takes effect means you accept the updated policy.

Contact us

If you have any questions about this policy or want to exercise your rights, contact us at [email protected].