Privacy Policy

Last updated March 26, 2026

OpaVote is a service owned and operated by Cohere LLC, a California limited liability company ("OpaVote," "we," "us," or "our").

What We Collect and Why

In providing online election services, OpaVote receives information about the election including but not limited to the manager's name and email address, the names of candidates, and the email addresses of voters. During the voting process, OpaVote may record, for each voter, whether the voter has voted, whether the voter has opted out of receiving election emails or reported the election email as spam, the IP address used by the voter, and other information provided in the HTTP headers (to deter fraudulent votes). Collectively, this information is "Election Information."

OpaVote will not share the Election Information with any third party, except that OpaVote may:

Cookies and Tracking

OpaVote uses essential cookies. We do not use tracking, analytics, or advertising cookies.

Our servers automatically record standard log information, including IP addresses, browser type, and pages visited. We use server logs to maintain security, diagnose technical issues, and deter fraudulent voting. Server logs are not used for profiling or advertising.

Data Retention

Election data is kept for as long as the election exists on OpaVote. When an election manager deletes an election, all email addresses, votes, and election results are permanently removed. Email addresses of voters who have opted out of receiving OpaVote emails or marked an OpaVote email as spam are retained solely to prevent OpaVote from sending any further messages to those addresses.

Account data is kept while your account is active. You can delete your OpaVote account and all data associated with it from the OpaVote management console.

International Data Transfers

OpaVote processes and stores data on servers in the United States. If you are located in the EU, UK, or Switzerland, this means your personal data is transferred to a country outside your jurisdiction. We rely on the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as the lawful mechanism for these transfers. For more details, see the Data Privacy Framework section below.

Third-Party Service Providers

OpaVote uses the following third-party providers, which may record information in connection with providing their services:

Voter Opt Out Policy

Voters in an election will receive an email informing them of their ability to vote in an election. OpaVote will not use the voters' email addresses for any other purpose. All emails to voters will include an opt out link to allow a voter to opt out of receiving emails for the election or to opt out of emails from all OpaVote elections. OpaVote may retain a voter's email address for the purpose of preventing further emails to the voter.

Children's Privacy

OpaVote is not directed at children under 16 and we do not knowingly collect personal data from children under 16. Election managers are responsible for ensuring they have a lawful basis for providing and processing voter data relating to individuals under 16.

Governing Law

This Privacy Policy is governed by the laws of the State of California, United States, without regard to conflict of law principles.

Comments and Questions

For comments or questions about OpaVote's Privacy Policy, please send an email to privacy@opavote.com.

The following sections apply specifically to users in the EU, UK, and Switzerland.

Legal Basis for Processing

We process personal data on the following legal bases under the GDPR:

Your Rights

Under the GDPR and other applicable data protection laws, you have the right to:

To exercise any of these rights, email us at privacy@opavote.com. You also have the right to lodge a complaint with your local data protection supervisory authority.

For customers subject to the GDPR, please see OpaVote's Data Processing Agreement.

Data Privacy Framework

Cohere LLC (doing business as OpaVote) participates in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), as set forth by the U.S. Department of Commerce. We have self-certified our compliance with the applicable DPF Principles for personal data we receive from the EU, UK, and Switzerland. Where this policy conflicts with those Principles, the Principles govern. To learn more or view our certification, visit https://www.dataprivacyframework.gov/.

What data and why

The DPF applies to the Election Information described above — names, email addresses, IP addresses, and related technical data — which we use only to provide OpaVote's election and voting services.

Your choices

We don't sell personal data or share it with third-party service providers for unrelated purposes. If we ever want to use your data for a new purpose or share it with a new third-party service provider, we'll give you a clear opportunity to opt out first. For sensitive personal data, we'll ask for your explicit consent. Voters can opt out of election emails at any time using the unsubscribe link in any email we send.

Third-party service providers

We share data only with our service providers listed in the Third-Party Service Providers section above, under contracts requiring them to protect it at least as well as we do under the DPF Principles. We remain responsible for their handling of personal data under those Principles.

Your right to access and correct your data

You have the right to access personal data we hold about you, correct inaccuracies, or request deletion of data processed in violation of the DPF Principles. Email us at privacy@opavote.com to make a request. We may limit access where doing so would be disproportionately burdensome or would affect others' privacy.

Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

Enforcement and how to complain

OpaVote's compliance with the DPF is subject to enforcement by the U.S. Federal Trade Commission (FTC).

If you have a DPF-related complaint, please contact us first at privacy@opavote.com.

Independent recourse mechanism

If we don't resolve your complaint to your satisfaction, you can raise it — at no cost to you — with the appropriate data protection authority acting as our independent recourse mechanism:

We will cooperate with the relevant authority to resolve the matter.

Binding arbitration

In some circumstances you may be able to invoke binding arbitration under the DPF for unresolved complaints. See Annex I of the DPF Principles at https://www.dataprivacyframework.gov/ for details.

Required disclosures

We may be required to disclose personal data to public authorities when compelled by law.