Privacy Policy

This Privacy Policy explains what Obillerate ("we," "us," or "our") collects, how we use it, who can see it, and the choices you have. It applies to obillerate.com and related services (the "Service"), which are operated by Obillerate LLC, a Florida limited liability company.

When you create an account, you affirmatively accept this Policy and our Terms of Use by checking the agreement box at signup. If you do not agree, please do not use the Service. Obillerate is operated in the United States and is directed to users in the United States.

1. Information we collect

• Account information. Your email address, an optional display name (which may be a pseudonym — see Section 3), and a securely hashed password. We never store your password in plain text, and we do not verify identities.
• Activity on the Service.Bills you track, Billometer scores you vote on, People's Verdict votes you cast, petitions you sign, posts and replies you write, reactions you leave, and your email preferences.
• ZIP code — how it's used. A ZIP code you enter to find your state and representatives is stored only in your own browser (localStorage); it is not sent to our servers just for browsing. When you sign a petition, the ZIP you provide is transmitted to us and stored with your signature, used solely to estimate whether you are in-district for that bill. Your ZIP is always entered by you. We never derive your location from your IP address for representative-matching or petitions, and we never collect your street address or precise GPS location.
• Saved location (signed-in only).If you are signed in and use "Find my representatives," we save the resulting two-letter state and the names of your representatives to your account, so we can personalize your dashboard and any digest you opt into. We store the state and rep names — not your ZIP or street address.
• Usage, device, and log data.Standard diagnostic and usage data: pages viewed, general device and browser information, referring pages, and your IP address. IP addresses appear in our hosting providers' server logs and are used to secure the Service, prevent abuse, and derive approximate region for aggregate analytics.
• Payments. If you purchase a paid feature, billing is handled by Stripe. Stripe receives your payment details directly; we never receive or store your full card number.

2. How we use information

We use the information above to:

• Operate, secure, maintain, and improve the Service
• Authenticate you and remember your preferences
• Show you relevant bills and your representatives
• Record and display your votes, verdicts, and posts as described in Section 3
• Send you email you have opted into (newsletter or digest)
• Detect and prevent fraud, abuse, bots, and vote manipulation
• Comply with applicable law

We do not use your personal information for third-party advertising. We do not build, sell, or share profiles of your political views, and we do not use your votes, verdicts, or tracked bills for advertising, profiling, or targeting of any kind. Individual vote and verdict records are stored under access controls and used only to display aggregate totals and prevent duplicate voting.

3. What is public and what is private

Because Obillerate involves civic and political expression, we are explicit about visibility.

Visible to other users: your display name; posts, replies, and reactions you make in community areas; and aggregate vote totals (for example, how many people voted a given verdict on a bill). Your individual verdict or score vote is never publicly attributed to you.

Pseudonyms. We do not verify identities. You may use a pseudonym, initials, or any display name that does not impersonate a real person or organization. If you expect to want privacy later, choosing a pseudonymous display name from the start is the most protective option.

Petition signatures. Petition signatures are currently used only to display aggregate signature counts and an in-district estimate. They are not delivered to any legislator or third party, and no signer names are published. Your email address is never shown to other users or included in any petition count. If we ever introduce external petition delivery, we will update this Policy and show you exactly what would be shared, and obtain your consent, before any signature is delivered.

Never public and never shared with campaigns, parties, or lobbyists: your email address, your individual voting and verdict history, the list of bills you track, and your browsing activity.

4. Email and marketing

We email you only where you have opted in (for example, checking the newsletter box at signup or enabling a tracking digest), plus essential transactional messages such as your signup verification code and security notices. Every marketing email includes an unsubscribe link, and you can change your preferences at any time in your account or by contacting us. Our email provider (Resend) records standard delivery metrics used only to maintain deliverability. We do not sell or rent your email address.

5. Cookies, local storage, and analytics

We use only the following categories of cookies and storage:

Our analytics (Vercel Web Analytics) runs in a cookieless, anonymized mode: it does not set a cross-session identifier, does not record your session, and reports only aggregate usage. We do not run third-party advertising trackers or session-replay tools.

Bot protection. To keep bots from creating fake accounts and manipulating votes, signup is protected by Cloudflare Turnstile, which receives your IP address and standard browser signals to score whether a request is automated. Turnstile is a privacy-preserving challenge and is not used to track you across sites.

Sign in with Google.If you choose to sign in with Google, Google shares your name, email address, and profile picture with us so we can create or access your account. Google's handling of your data is governed by Google's privacy policy. We do not receive your Google password, and Google does not tell us your location.

Do Not Track and Global Privacy Control. Because we do not sell or share personal information as those terms are defined under applicable state privacy laws, there is no sale or sharing to opt out of. If our practices ever change, we will honor these signals as required by law and update this Policy first.

6. How we share information

We do not sell your personal information. We do not share it with political campaigns, parties, lobbyists, or data brokers. We share limited information only with service providers who help us run the Service, under confidentiality obligations and only as needed:

• Hosting, database, and analytics: Vercel, Convex
• Email delivery: Resend
• Payments: Stripe
• Bot protection: Cloudflare (Turnstile)
• Sign-in (optional): Google, only if you use it

We may also disclose information: (a) if required by law, subpoena, or valid legal process; (b) to protect the rights, safety, or property of Obillerate, our users, or the public; or (c) in connection with a merger, acquisition, or sale of assets, in which case this Policy will continue to apply and we will notify account holders. Where legally permitted, we will attempt to notify you before disclosing your information in response to legal process.

7. Data retention

• Account data: kept while your account is active; deleted within 30 days of a verified deletion request or account closure, except as required for legal compliance
• Petition signatures: the ZIP and in-district estimate are retained for the life of the petition; removed on account deletion except where needed to keep aggregate counts accurate
• Server and security logs (including IP addresses): retained up to 90 days, then deleted or anonymized
• Aggregated, de-identified analytics: may be retained indefinitely
• Backups: deleted content may persist in encrypted backups for a limited rotation window before being purged

8. Your choices and rights

You may, at any time:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and personal data
• Export your data in a portable format
• Opt out of marketing email

To exercise any of these, use the controls in your account or email us at the address in Section 13. We will verify your request (typically by confirming control of your account email) and respond within 30 days. We will never discriminate against you for exercising your rights. Residents of certain U.S. states may have additional rights under state privacy laws; we honor verified requests from all users regardless of location.

9. Security

We use reasonable technical and organizational measures to protect your information, including password hashing, encryption in transit, email verification at signup, bot protection, access controls, and abuse logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Breach notification. If a data breach affects your personal information, we will notify affected users and applicable regulators as required by law, without undue delay.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

11. International users

We operate in the United States, process information in the United States, and direct the Service to U.S. residents. If you access the Service from outside the U.S., your information will be processed in the U.S., where privacy laws may differ from those in your jurisdiction.

12. Changes to this Policy

We may update this Policy from time to time. For material changes — changes that expand what we collect, how we share it, or how long we keep it — we will notify account holders by email and/or a prominent notice on the Service at least 14 days before the change takes effect. For non-material changes, we will update the "last updated" date above. Continued use after the effective date constitutes acceptance. Prior versions are archived at /privacy/archive.

13. Contact

Privacy questions or requests: obillerate@yahoo.com.

Bill scores and analysis are editorial opinions, not legal advice. Always read the official text before acting. Data sources: LegiScan (CC BY 4.0), Congress.gov, OpenStates. © 2026 Obillerate LLC.