Privacy Policy
Last updated: June 2025
1. What we collect
When you register: your name, email address, and password (stored as a secure hash). When you sign a petition: your name, state, and optionally your email. When you sign a verified petition: your phone number, which is used only to confirm your identity via OTP and is never shared publicly. When you create a verified petition: payment is processed by Paystack and we store only the transaction reference and amount.
2. How we use your data
We use your data to operate JoinMouth, to authenticate you, process petition signatures, display signature counts, and deliver petitions to institutions. We do not sell your data to third parties. We do not use your data for advertising.
3. Phone numbers
Phone numbers collected during verified petition signing are used exclusively for OTP verification. They are stored securely in our database and are never displayed publicly or shared with petition creators or institutions. Phone numbers are used only to prevent duplicate signatures on the same petition.
4. Public information
If you choose to display your name publicly when signing a petition, your name and state will be visible on the petition page and in the delivered petition PDF. If you choose not to display your name, it will not appear publicly but will still be counted in the signature total.
5. Data storage
Your data is stored securely on servers in the European Union. We use industry-standard encryption for data in transit and at rest.
6. Third-party services
We use the following third-party services: Paystack for payment processing, Termii for SMS OTP delivery, Cloudinary for image storage, and Resend for email delivery. Each of these services has their own privacy policy.
7. Data retention
Account data is retained for as long as your account is active. Signature data is retained for as long as the petition exists on the platform. You may request deletion of your account and associated data by contacting us.
8. Your rights
You have the right to access the personal data we hold about you, to request corrections, and to request deletion. To exercise these rights, contact us through the contact form on our homepage.
9. Changes to this policy
We may update this privacy policy from time to time. We will notify registered users of significant changes by email.