Privacy Policy

This policy applies to three groups of people:

• Clients — political parties, candidates, and party officials who engage us for campaign services and use our admin dashboard.
• Field officers — ground workers, surveyors, callers, and managers employed or contracted by us, who use the Ballot Force mobile app.
• Survey respondents — voters whose households are visited by our field officers. Their data is captured during a survey only with informed consent from the household head.

From clients

• Name, email, phone, organisation, role.
• Authentication data (encrypted password, session tokens).
• Service-related communications and contracts.

From field officers

• Name, email, phone, role, assigned campaigns and wards.
• Authentication data (encrypted password, session tokens).
• Precise location at the moment a survey is submitted — used to verify field activity, compute distance covered, and map household coverage. Location is only captured while the app is open and a survey is being saved. We do not track movement in the background.
• Approximate hours worked per day, derived from first and last survey timestamps with a 30-minute auto-checkout window.
• Device information (model, OS version) for diagnostics and app reliability.

From survey respondents (voters)

• Voter roll data already published by the Election Commission of India: name, voter ID (EPIC), age, gender, household relation, address, photo (where the roll provides one).
• Survey answers given voluntarily during the visit: demographics (religion, caste, education), employment, NRI status, household economic profile, government scheme awareness and beneficiary status, satisfaction with public services, news consumption, political affiliation and party preference, and observations about local issues.
• An optional photograph of the voter (if the household consents).

From everyone visiting the website

• Standard web logs (IP address, browser type, pages visited, referrer) used for security and aggregate analytics.
• Cookies required for session login on the admin panel. The public site sets no advertising or third-party tracking cookies.

• Deliver our services — run political campaigns for our clients, including ground surveys, analytics, voter outreach, and reporting.
• Verify field operations — hours worked, surveys submitted, ward coverage, and attribution per officer.
• Improve the platform — diagnose crashes, fix bugs, refine UX based on aggregated, de-identified usage patterns.
• Communicate — send service-related notifications (login alerts, scheduled meetings, survey assignments) to clients and field officers.
• Comply with law — respond to lawful requests from competent Indian authorities.

We do not sell, rent, or trade personal data. We do not use personal data for advertising. We do not share voter survey data with anyone outside the campaign that commissioned it.

• The client campaign that commissioned the work. Aggregated and individual survey data is delivered to the candidate or political party that engaged us. They are independently responsible for how they use it under their own privacy obligations.
• Service providers we rely on to operate the platform — cloud hosting (private infrastructure inside India), encrypted backups, transactional email (where applicable). Each provider is bound by a written data-processing agreement.
• Authorities, only on valid legal request (e.g., Section 91 CrPC notice), and only the minimum data necessary.

We do not transfer personal data outside India.

• Survey data is retained for the duration of the campaign and for up to 24 months after the conclusion of the relevant election cycle, after which it is permanently deleted from our active systems.
• Field-officer hours and location pings are retained for 18 months for payroll and audit reasons, then deleted.
• Client account records are retained for the duration of the service agreement plus 7 years for accounting and statutory compliance.
• Encrypted backups are rotated and overwritten on a 90-day cycle.

• Data in transit is encrypted using TLS 1.2 or higher.
• Authentication uses bcrypt-hashed passwords and short-lived JSON Web Tokens. Mobile devices store credentials in the iOS Keychain or Android Keystore.
• The mobile app saves drafts locally in an encrypted SQLite database so an offline household survey is never lost.
• Access to the admin panel is role-based; field officers see only the data scoped to their assigned wards.
• Servers are hosted in private infrastructure inside India, behind firewalls, with audit logs of every read and write.

Under the Digital Personal Data Protection Act, 2023, you can:

• Ask us what data we hold about you (right to access).
• Ask us to correct inaccurate data (right to correction).
• Ask us to delete your data (right to erasure), unless we are required to keep it for a legal reason.
• Withdraw consent for survey participation at any time. A withdrawal request can be made to us directly or through the field officer.
• File a complaint with the Data Protection Board of India if you believe we have mishandled your data.

Send any of the above requests to [email protected]. We respond within 30 days.

Ballot Force is not intended for and does not knowingly collect data from anyone under 18. The mobile app is licensed only to adult field officers. If we learn we have inadvertently collected data from a minor, we delete it.

We may update this policy from time to time. Material changes will be highlighted on this page with a new “last updated” date. Continued use of the service after a change constitutes acceptance of the revised policy.

Privacy questions, data access requests, or grievances:

• Email: [email protected]
• Postal: Innovative Ballot Force LLP, Plot No 11–12, Sector 25-D, Chandigarh 160014, India.
• Phone: +91-80509-00006