Voter Privacy Guarantee

Privacy Policy & Voter Data Protection

Last Updated: October 2026 | Effective for all citizens and electoral constituencies.

Zero Public Exposure Principle

Citizens Voice is architected from the ground up on the principle of strict separation of identity and telemetry. Your full name, mobile number, and Voter ID (EPIC) are used strictly for authentication and grievance resolution by authorized election officials. They are never accessible in public API responses or published on any website dashboard.

1. Information We Collect

When you file a grievance, we collect only the minimum necessary non-identifiable data to track area-wise statistics:

Citizen Full Name: Not collected. We maintain complete anonymity to protect user privacy.
10-Digit Mobile Number (Optional): Collected only if provided voluntarily for receiving tracking updates or SMS alerts. It is kept strictly confidential.
Voter ID (EPIC Number): Not collected or stored. We do not process sensitive electoral identification numbers.
Constituency and Polling Booth: Used exclusively to compute area-wise aggregated public metrics and statistics.
Grievance Description: Details regarding the nature of the electoral impediment faced by the community.

2. How Public Statistics Are Aggregated

Our database querying system relies strictly on server-side MongoDB aggregation pipelines (e.g., $group, $count).

// Public API Projection Guarantee: // Only counts and categorical summaries are returned. { constituency: "Uttam Nagar", totalComplaints: 120, resolvedComplaints: 88, resolutionRate: 73.3% } // Personal fields ($name, $mobile, $voterId) are excluded at the database driver level.

3. Tracking ID Protection & Masking

Each grievance generates a unique tracking receipt (e.g. VTR-2026-XXXXXX). Even if an unauthorized party learns your tracking code, our API masks all personal identification markers:

Name MaskingR**** S*****
Mobile Masking******3210
Voter ID MaskingAB*****67

4. Data Retention & Third-Party Non-Disclosure

We do not sell, rent, monetize, or share voter data with commercial advertising entities, political campaign organizations, or third-party marketing networks. Data is retained strictly within the lifecycle of the active election cycle and archived under statutory guidelines.