Privacy Policy

We collect the following types of information:

• Account information: Email address and authentication credentials when you register or sign in. We use Supabase Auth for secure identity management.
• Public social media content: Posts, comments, and engagement data from official government social media accounts that you authorize us to monitor. This is publicly available content.
• Usage data: Basic analytics about how the service is used (e.g., export events, login timestamps) to maintain service quality and security.

We use collected information solely for:

• Providing the archiving and public-records compliance service
• Authenticating authorized agency personnel
• Generating chain-of-custody documentation and export packets
• Sentiment analysis of public comments on official posts
• Maintaining service security and troubleshooting

We implement appropriate technical and organizational measures to protect data:

• SHA-256 cryptographic hashing for archive integrity verification
• Row-level security (RLS) on all database tables
• Role-based access controls for records custodians and command staff
• TLS encryption for all data in transit
• Access limited to authenticated, authorized personnel only

We do not sell, rent, or share personal information with third parties for marketing purposes. We use the following service providers to operate the platform:

• Supabase — database hosting and authentication
• YouTube Data API, Facebook Graph API, X API — for fetching public social media content
• Anthropic Claude — for sentiment analysis of public comments

Account data is retained for as long as your agency maintains an active subscription or pilot. After account closure, personal data is retained for 60 days to allow for records request fulfillment, then deleted. Archived social media content is retained according to your agency's public records retention schedule (typically Florida GS1-SL standards).

You have the right to access, correct, or delete your personal information. To exercise these rights, contact us at privacy@civicark.com. We will respond within 30 days.

To request deletion of your account or archived data, visit our Data Deletion Instructions page or email privacy@civicark.com.