1. Introduction

Rezonance Inc. ("we," "us," or "our") operates the Rezonance platform ("the Platform"), a civic engagement service that helps citizens track legislation, access AI-powered analysis, and participate in public discourse. This Privacy Policy describes how we collect, use, disclose, and protect your personal information.

We are committed to transparency, especially given the civic nature of our Platform. We understand that political views and civic engagement data are sensitive, and we treat them accordingly.

2. Information We Collect

2.1 Information You Provide

• Account information: email address, username, first and last name, and password (for native registration) or authentication tokens (for third-party sign-in via Google or X/Twitter)
• Profile information: biography, profile photo, state, city, and political affiliation (all optional)
• Citizenship verification: verification status for features restricted to verified citizens
• User-generated content: posts, comments, discussion contributions, and reactions in the Town Square and on bill pages
• Engagement data: bills you follow or vote on, legislators you track, and users you follow

2.2 Information Collected Automatically

• Device and browser information: browser type, operating system, and device identifiers, collected via Sentry for error monitoring and platform stability
• Usage data: pages visited, features used, and interaction patterns used to improve the Platform
• Error and performance data: application errors and performance metrics collected through Sentry to maintain platform reliability

2.3 Information from Third Parties

• Auth0: when you sign in via Google or X/Twitter, we receive your name, email address, and profile photo from the identity provider through Auth0
• Congress.gov: public legislative data, voting records, and legislator information sourced from government APIs

3. How We Use Your Information

We use collected information to:

• Operate, maintain, and improve the Platform and its features
• Authenticate your identity and manage your account
• Display your public profile and contributions to other users
• Provide AI-generated bill summaries and analyses tailored to your queries
• Deliver notifications about bills, discussions, and platform activity
• Enforce our Terms of Service and moderate content
• Monitor and resolve technical issues, errors, and security threats
• Generate aggregate civic insights, polls, trend reports, and data products from user engagement
• Analyze usage trends to improve the Platform and develop new features

4. How We Share Your Information

We share data in the following circumstances:

• Public profile and content: your username, profile photo, bio, and User Content (posts, comments) are visible to other users unless you enable private profile or anonymous mode
• Service providers: we share data with third-party providers that help us operate the Platform, including Auth0 (authentication), Sentry (error monitoring), and cloud hosting providers. These providers are contractually obligated to protect your data
• AI processing: your queries to the AI assistant are sent to third-party AI model providers (Anthropic) for processing. These queries may include bill context but do not include your personal profile information
• Legal requirements: we may disclose information if required by law, subpoena, or government request, or to protect the rights, safety, or property of Rezonance, our users, or the public
• Civic Insights: aggregated and analyzed engagement data, poll results, civic sentiment, and trend data may be shared with or sold to third parties as described in Section 5
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

5. Civic Engagement Data

By using the Platform, you acknowledge that your activity — including poll responses, bill engagement, voting activity, discussion participation, and civic sentiment — may be collected, aggregated, analyzed, and used to generate insights, reports, trends, and data products ("Civic Insights").

Civic Insights may be shared with or sold to third parties, including but not limited to media organizations, research institutions, advocacy groups, policy analysts, and commercial partners. We may also display aggregate civic data publicly on the Platform.

While Civic Insights are generally derived from aggregate and de-identified data, we reserve the right to use your data in any manner consistent with this Privacy Policy and applicable law. Political affiliation is optional and is only displayed on your profile if you choose to provide it.

You may use anonymous mode or set your profile to private to limit the public visibility of your activity to other users, but this does not exclude your data from aggregate analysis or Civic Insights.

6. Data Storage and Security

Your data is stored on secure servers hosted by our cloud infrastructure provider. We implement industry-standard security measures including encryption in transit (TLS), secure authentication via Auth0, and access controls on our backend systems.

Authentication tokens are stored locally on your device to maintain your session. We use JWT (JSON Web Tokens) with automatic refresh to balance security and convenience.

While we take reasonable measures to protect your data, no system is completely secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain your account information and User Content for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or necessary to resolve disputes.

De-identified, aggregate data may be retained indefinitely for analytics and Platform improvement.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information via your profile settings
• Delete your account and associated personal data
• Export your data in a portable format
• Opt out of non-essential data collection
• Restrict processing of your data in certain circumstances

To exercise these rights, contact us at privacy@rezonance.us. We will respond to requests within 30 days.

9. Cookies and Local Storage

The Platform uses cookies and browser local storage for the following purposes:

• Essential cookies: Auth0 session cookies required for authentication
• Local storage: authentication tokens and user preferences stored on your device for session management
• Error monitoring: Sentry may set cookies to track error sessions for debugging purposes

We do not use advertising cookies or third-party tracking cookies. We do not participate in ad networks or cross-site tracking.

10. Children's Privacy

The Platform is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. To exercise your right to opt out, contact us at privacy@rezonance.us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or sending a notification to your account. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Rezonance Inc.
Email: privacy@rezonance.us