What we collect, why, and how to delete it.

CivicTab is a public record of every interaction with a public servant — written by the people they serve. We take privacy seriously because the whole point of this platform is to let people tell the truth about authority without becoming a target themselves.

Here's exactly what we do with your information, in plain English.

What we collect

• If you don't sign in: nothing personal. Your browser stores a temporary anonymous ID so we don't show you the same story twice. No email, no name, no IP-based tracking.
• If you sign in (email or Google): your email address and the name your authentication provider sends us. That's it. No phone, no address, no contacts.
• Stories you submit: the text you wrote, the public servant's name and agency you reviewed, the rating you gave, any tags, and the date.
• Reactions and replies: linked to your account so we can show you what you've already reacted to.
• Basic technical stuff: which browser you used, errors that happened, and rough country-level location from your IP (for spam prevention only).

What we don't collect

• We don't ask for your real name or address.
• We don't sell data to advertisers. We don't have advertisers.
• We don't track you across other sites. There's no Facebook pixel, no Google Analytics, no ad networks.
• We don't read or share private information you don't post publicly.

Where your data lives

CivicTab uses Supabase (a Postgres database hosted in the U.S.) and Vercel (a U.S. CDN). Both are SOC 2 Type II audited. We don't have our own servers. Backups are encrypted at rest.

Anonymous posting

By default, every story you publish appears under an Anonymous-XXXX handle. Your email is never shown on a story. Admins can technically see which account submitted a story, but the public can't. If you want to use your real name, you can change your handle in settings — your call, always.

Deleting your data

You have three options:

• Delete one story: open it, tap the menu, request removal. Auto-removed within 24 hours if you wrote it.
• Delete your account: email hello@civictab.app from the email tied to your account. We delete the account and unlink your stories within 7 days. The stories themselves remain on the record under an anonymous handle (because the public record exists for the public — but no one can trace them to you).
• Delete everything: same email, ask for full erasure. We delete account + stories + reactions + replies within 30 days. Backups overwrite within 90 days.

Officials and public servants

Kids and minors

CivicTab is for users 13+. If you're under 18, you need parental permission to sign up. We don't knowingly collect information from anyone under 13. If we discover we did, we delete it immediately.

Cookies

We use one cookie: an anonymous session ID so the site remembers you between page loads. No tracking cookies. No third-party cookies. You can block it and the site still works.

Changes to this policy

If we materially change anything, we'll notify signed-in users by email at least 14 days before it takes effect.

Contact

Real human answers within 48 hours: hello@civictab.app