Privacy policy

What we collect

You can browse Know Your Vote Kentucky without an account. If you create one, we collect:

• Email address (used as your login and to send digest emails you opted in to).
• Display name, if you set one.
• The bills and topics you follow, and your notification preferences.
• Email delivery events from our mail provider (Resend) — for each digest we receive callbacks like “delivered,” “bounced,” and “complained.” We use these to suppress mail to addresses that hard-bounce or mark us as spam, which protects deliverability for everyone.
• Standard server logs (request times, IP, user-agent) retained for short periods for security and abuse prevention.

We do not embed tracking pixels in our emails, run third-party advertising trackers, or sell data.

Why we collect it

• To authenticate you (email + password via Supabase Auth).
• To send the digest emails you asked for, only when bills you follow change status.
• To keep our mail reputation healthy so emails reach inboxes (bounce/complaint handling).

Who we share it with

• Supabase — managed Postgres + auth provider that stores your account and follows.
• Resend — sends our emails and reports back delivery / bounce events. Resend uses Amazon SES under the hood.
• Vercel — hosts the site and serves the cron job that builds digests.
• Sentry — error monitoring on server failures (no personal content from emails is sent to Sentry).

We do not sell or share your data with anyone outside this list, and we don’t use it for advertising. If law enforcement compels disclosure we will comply with a valid order and notify you when permitted.

How long we keep it

Account data is kept until you delete your account. The mail-event log (ky_notifications_log) is kept for one year for deliverability auditing, then trimmed. Server logs roll over within 30 days.

Your controls

• Edit your follows and notification preferences anytime at your profile.
• Click Unsubscribe from digests at the bottom of any digest email — turns digests off immediately, no login needed.
• Delete your account from your profile; we remove your profile, follows, preferences, and mail log.
• Email hello@kyvky.com for a copy of your data or any other request.

Children

The site is intended for an adult audience following Kentucky public policy. We don’t knowingly collect data from anyone under 13.

Changes

If we make material changes (e.g., new categories of data, new processors), we’ll update this page and bump the “Last updated” date. Trivial wording fixes don’t bump the date.