Legal
Privacy Policy
Last updated: 28 May 2026 · Version 2.0 (Draft - pending legal review)
1. Who we are
Election Edge is operated by Zeus Athena LLC, a Delaware limited liability company with its principal mailing address at 2120 Hutton Drive, Suite 300, DW6920, Carrollton, TX 75006, USA (“Zeus Athena”, “we”, “us”). We are the data controller for the personal data described in this policy.
We operate a global election-integrity platform whose first launch market is Kenya. Where you reside in a jurisdiction with specific data protection law (including but not limited to the EU/UK GDPR, the California Consumer Privacy Act, and the Kenya Data Protection Act 2019), this policy is intended to comply with that law in addition to applicable US federal and state requirements.
2. What data we collect
| Data type | Purpose |
|---|---|
| Name, phone, email | Account creation and communication |
| Quiz responses | Candidate matching (processed locally where possible) |
| Device & IP data | Security, fraud prevention, rate limiting |
| Cookie preferences | Remembering your consent choices |
| Agent GPS coordinates | Field agent submission verification (agents only) |
3. Legal basis for processing
We process personal data on one or more of the following bases, depending on your jurisdiction and the activity in question:
- Consent - quiz responses, analytics, optional communications
- Legitimate interest - security monitoring, fraud prevention, platform integrity
- Public interest - election transparency and citizen reporting
- Legal obligation - evidence preservation for election petitions or as required by applicable law
- Contract - delivering services to campaign customers under their workspace agreement
4. How we protect your data
- TLS 1.3 encryption for all data in transit
- AES-256 encryption at rest (via Supabase infrastructure)
- Multi-factor authentication required for privileged access
- Tamper-evident audit trail with hash chain verification
- Row-level security isolating campaign data
- Regular security audits and penetration testing
5. Data retention
| Data | Retention |
|---|---|
| Evidence records | 7 years (election petition statute of limitations or local equivalent) |
| Audit logs | 3 years (regulatory compliance) |
| Quiz responses | Election date + 90 days |
| User accounts | Until deletion or 2 years inactive |
| Session tokens | 24 hours |
6. Your rights
Subject to your local data protection law, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (subject to legal-obligation exemptions)
- Export your data in a machine-readable format
- Object to processing carried out on legitimate-interest grounds
- Restrict processing while a complaint or correction is being resolved
- Withdraw consent at any time where processing is consent-based
California residents have additional rights under the CCPA, including the right to know what personal information is sold or shared (we do not sell personal data) and the right to non-discrimination for exercising any privacy right. EU and UK residents have the right to lodge a complaint with their national supervisory authority. Kenyan residents may complain to the Office of the Data Protection Commissioner.
We respond to all verified rights requests within 30 days. Evidence data may be exempt from erasure where retention is required by a legal obligation.
7. Third-party sharing
We do not sell personal data. We share data only with:
- Supabase - database hosting, under a data processing agreement
- Election bodies and courts - evidence data when legally required for election petitions (including but not limited to the Independent Electoral and Boundaries Commission in Kenya)
- Data protection supervisory authorities - breach notifications as required by applicable law
8. International data transfers
We operate from the United States and process data on infrastructure provided by Supabase in regions selected to match the operational locality of each launch market. Where personal data is transferred out of the EU, UK, or Kenya for processing, we rely on standard contractual clauses or equivalent legal mechanisms recognised under the applicable data protection regime.
9. Cookies
We use minimal cookies. See our Cookie Policy for full details. You can change your preferences at any time.
10. Data breach notification
In the event of a personal data breach, we will notify the relevant supervisory authority within the period required by applicable law (within 72 hours where required under the EU/UK GDPR or the Kenya Data Protection Act) and inform affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms.
11. Contact
For privacy inquiries or to exercise your rights, contact our Data Protection point of contact:
Email: privacy@election-edge.com
Mailing address: Zeus Athena LLC, 2120 Hutton Drive, Suite 300, DW6920, Carrollton, TX 75006, USA
Depending on where you reside, you also have the right to lodge a complaint with your national or state data protection authority.