Privacy Policy

This Privacy Policy explains how Votero, powered by Royal Bengal AI ("Votero", "we", "us"), collects, uses, and protects information when you use our election platform at votero.royalbengal.ai and related services. By using Votero you agree to the practices described here.

Who this applies to

Votero serves three kinds of people. Commissioners run elections for an organisation. Committee members review elections before they go ahead. Voters cast ballots. A single person can hold more than one of these roles. This policy covers all of them.

Information we collect

Account and roll data. When a commissioner sets up an organisation we collect a name, an email address, and an optional phone number. When a commissioner builds a voter roll, they provide the names and email addresses of the people they invite, and may add an optional phone number. Each voter is assigned a voter number.

Sign-in data. Voters sign in without a password using a one-time code sent to their email. Commissioners use a password, which we store only as a secure hash, never in plain text. We keep short-lived codes to confirm sign-in and email ownership.

Payment data. Payments are handled by Stripe. We do not see or store full card numbers. We keep a record of each transaction, its amount, status, and a Stripe reference, so we can show your billing history and process refunds.

Location data for semi-auto elections. Some elections are set to semi-auto, where a voter must be inside a voting area to cast a ballot. For those elections only, your device shares its location at the moment you vote so we can check whether you are inside the area. We use the coordinates for that single check and then discard them. We do not store your location.

Identity verification (face and liveness). A commissioner may turn on face verification for an election. Where it is on, before you vote you complete a face and liveness check run by our verification provider, Didit, to confirm a real, present person and that it is really you. We ask for your agreement before the check begins. Votero does not store your face image; the biometric processing is done by Didit, and Votero keeps only the yes or no result, the time of the check, and, where a match is found, a link between accounts that belong to the same person so one person cannot vote more than once. A check is required close to the moment you vote and is not a permanent pass. This feature is optional and controlled by the commissioner.

Usage and device data. Like most online services, our hosting and infrastructure providers process basic technical data such as IP address and browser type to keep the service running and secure.

How ballots stay anonymous

When you cast a vote, the choice is recorded without a link back to you. The system tracks that a given voter has voted, so no one can vote twice, but it stores the ballot separately from any voter identity. This means we cannot tell how any individual voted, and neither can the commissioner.

How we use information

We use the information above to create and run accounts, deliver invitations and sign-in codes, verify identity where a commissioner requires it, take payment and issue refunds, check the voting area for semi-auto elections, show results and turnout, send election updates and a receipt after a vote (a receipt never names your choice), keep the service secure, and meet legal obligations.

Who we share information with

We do not sell personal information. We share it only with the service providers that make Votero work, and only to the extent each needs to do its job. These include our hosting and database providers, Stripe for payments, and, where enabled, Didit for identity verification. We may also disclose information if required by law or to protect the rights and safety of people using the service.

Within an organisation, a commissioner can see the people on their roll and election activity, but not how anyone voted and not a voter's face verification status, which is visible only to the platform administrator.

Data retention

We keep account, roll, election, and transaction records for as long as your account is active and as needed to provide the service and meet legal and accounting requirements. Votero does not delete people from the system. Instead, accounts and voters can be suspended, which is reversible and preserves records. Location coordinates used for semi-auto voting are never retained.

Security

We protect information with measures such as encrypted connections, hashed passwords, signed sessions, and access controls. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to limit who can access it.

Your choices and rights

Depending on where you live, you may have rights to access, correct, or limit the use of your personal information. United States privacy rights vary by state, and some states, such as California, provide specific rights. To make a request, contact us at support@royalbengal.ai and we will respond as required by the law that applies to you.

Children

Votero is intended for use by adults running and taking part in elections. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can address it.

Changes to this policy

We may update this policy as the service changes. When we do, we will revise the effective date above. Continued use of Votero after a change means you accept the updated policy.

Contact

For any question about this policy or your information, contact us at support@royalbengal.ai.

This policy is provided for transparency and is not legal advice.