PRIVACYPOLICY
How participant information is kept private, why it is collected, and the rights you have over your data.
Information We Collect
We collect only what is needed for vote methodology: identity verification data (ID details, mobile number), approximate location, and your candidate preferences. We follow strict data-minimization — we do not collect fields simply because they are detectable.
Why We Collect It
To verify that each participant is a real, unique Filipino; to prevent duplicate and fraudulent submissions; to measure participation by geography; and to produce aggregate public-opinion statistics for the 2028 national elections.
How We Keep It Private
Identity and vote preferences are stored in logically separated domains. There is no simple table linking a person's name to their candidate choice. Pseudonymous linkage exists only for controlled fraud investigation under strict authorization.
What Is Never Made Public
We never publish names, government ID numbers, phone numbers, photographs, exact addresses, precise coordinates, or candidate selections linked to identity. Public results show aggregate totals only.
Data Retention
Retention is configurable and separated by purpose: verification data, research data, and audit-integrity records. We do not retain sensitive information indefinitely. Deletion and anonymization workflows preserve legally necessary non-identifying integrity records.
Your Rights
You may request access to, correction of, or deletion of your personal information, subject to legal and integrity-record requirements. Identity-critical corrections may require reverification. Contact us to exercise these rights.
Security Safeguards
Defense in depth: TLS, encryption at rest, least-privilege access, role-based control, MFA for administrators, rate limiting, bot protection, anomaly monitoring, and a tamper-evident audit ledger. No single signal determines identity.
Legal Foundation
This architecture is designed with the Philippine Data Privacy Act and applicable regulations in mind, and is prepared for formal legal and privacy review before production deployment.
Privacy by Design. Bantay Oriental Mindoro is built so that participant privacy is protected by architecture, not by promise. Identity and choices are separated; sensitive data is minimized; integrity is preserved without exposure.
This is a summary. Full legal review is required before production deployment. Transparency Center · Help Center