Privacy Policy

Last updated on September 6, 2026.

Board Advocate is built on a simple rule: we collect the minimum information needed to run the service, nothing more. We do not run advertising trackers or behavioral analytics, and we do not sell or rent your information to anyone.

Who we are

Board Advocate (BoardAdvocate.org) is a non-partisan tool that helps school board members and advocates track state legislation and manage their own board goals.

Information we collect

  • Account information: your name, email address, and password (stored as a salted hash, never in plain text).
  • Board/team information: the name of any board or team you create or join, and your membership and role within it.
  • Legislative activity: the bills, legislators, and committees you or your team follow, and any auto-follow rules you configure.
  • Security and audit logs: a record of significant account actions (such as sign-ins and role changes) kept to protect your account and your board's.
  • Support communications: anything you send us when you contact us for help.

Information we do not collect

  • We do not use advertising cookies, ad pixels, or third-party marketing trackers.
  • We do not run behavioral analytics that profile you across sessions or sites.
  • We do not collect or store your payment card details — see "Payments" below.
  • We are not directed at children, and we do not knowingly collect information from anyone under 13.

Payments

Subscriptions are processed by Paddle.com Market Ltd, our payment processor and merchant of record. Paddle collects and stores your billing details (such as card number and billing address) directly — we never see or store your full payment card details. Paddle's own privacy policy governs that information.

Legislative data

Bill, legislator, and committee data comes from public sources, including LegiScan, and is not personal information about you. Your follows and rules — which of that public data you've chosen to track — are treated as your account data under this policy.

AI-generated insights

Some features use an AI provider to summarize or generate insights about legislation. Only the data needed to produce that specific insight is sent to the provider; it is not used to build an advertising profile of you, and we do not permit it to be used to train the provider's models.

Cookies

We use only the essential cookies needed to keep you signed in and to remember basic preferences (such as light or dark mode). We do not use cookies for advertising or cross-site tracking.

How we use your information

We use the information above solely to operate the service: authenticating you, running your follows and alerts, billing your subscription, providing support, and keeping the service secure.

Data retention

We keep account and follow data for as long as your account is active. If you delete your account, we remove your personal information within a reasonable period, except where we're required to retain limited records (such as billing history) for legal or accounting purposes.

Your rights

You can access, correct, export, or delete your account information at any time from your account settings, or by emailing us. If you're in a jurisdiction with additional data rights (such as the GDPR or CCPA), we'll honor those rights on request.

Security

We use industry-standard measures — encrypted connections, hashed passwords, and access controls — to protect your information. No system is perfectly secure, but we design for the least data exposure possible.

Changes to this policy

If we make material changes to this policy, we'll post the update here and adjust the date above. Continued use of the service after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Email us at [email protected].