Legal
Privacy policy
How we handle personal data, whistleblower submissions, retention, and your rights — draft for counsel review.
Controller. Campaign Finance Watch Tool (sample entity name) — contact: privacy@cfwt.org.
Collection. We minimise fields on reports; optional contact details for follow-up only when you allow it. Server logs may include IP and user-agent for security (90-day retention sample).
Evidence files. Stored in private buckets with signed access for authorised reviewers; virus scan and MIME validation on upload.
Retention. Audit logs for status changes; configurable deletion windows per policy class (e.g. vault payloads 24 months unless legal hold).
Your rights. Access, rectification, erasure where applicable — requests logged in the support desk (sample process).