Privacy Policy
Last updated: April 2026
DistrictDesk ("we," "our," or "us") operates the districtdesk.org website and the DistrictDesk commission portal. This policy explains what information we collect, how we use it, and your rights regarding your data.
1. Information We Collect
From the marketing website: When you submit the contact form, we collect your name, commission name, and email address for the purpose of responding to your inquiry.
From the commission portal: When your commission uses DistrictDesk, we store the data you and your commission members enter, including: commission member names and login credentials, property inventory records, COA application submissions, meeting motion records and vote counts, meeting transcripts, generated minutes drafts, and violation records.
Automatically collected: We collect standard server logs including IP addresses, browser type, and pages visited. We do not use third-party analytics or advertising trackers.
2. How We Use Your Information
We use the information collected solely to:
— Respond to demo requests and support inquiries
— Operate and improve the DistrictDesk portal for your commission
— Send service-related communications to commission administrators
We do not sell your information. We do not share your information with third parties except as necessary to operate the service:
Anthropic processes documents submitted for AI review. Anthropic does not retain submitted documents for model training. See anthropic.com/privacy.
Resend delivers transactional email notifications. See resend.com/privacy.
Railway hosts the portal infrastructure in the United States. See railway.app/legal.
Cloudflare serves the marketing website and stores uploaded files. See cloudflare.com/privacypolicy.
3. Data Retention
Contact form submissions are retained for 12 months.
Commission portal data is retained for the duration of your active subscription. If your subscription ends, your data is retained for 90 days to allow for export, after which it is permanently deleted.
You may request export or deletion of your data at any time by contacting info@districtdesk.org.
4. Cookies
The marketing website (districtdesk.org) uses no tracking cookies.
The commission portal uses a single session cookie for authentication purposes. This cookie is essential for the portal to function and is deleted when you log out or close your browser.
5. Security
We implement reasonable technical and organizational measures to protect your information, including encrypted transmission (HTTPS), bcrypt password hashing, and role-based access controls. See our Security page for details.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing info@districtdesk.org. We will respond within 10 business days.
7. Children
DistrictDesk is not directed at children under 13. We do not knowingly collect personal information from children.
8. Changes to This Policy
We will notify commission administrators by email at least 14 days before any material changes to this policy take effect.
9. Contact
Privacy questions: info@districtdesk.org