Ballot AI Privacy Policy

1. Overview and Operator

This Privacy Policy explains how Ballot AI ("Ballot," the "Service") collects, uses, discloses and safeguards information in connection with the limited beta operated at ballotpost.com. Ballot is developed and operated by Eagle Africa Trading and Distribution Corporation ("Company," "we," "us," or "our"), located at 7120 North Mills Rd, Charlotte, NC 28216, USA.

Ballot is presently offered as a limited beta. The Service currently supports brand kit configuration, authorized connection of a Facebook Page and its linked Instagram professional account, and manual creation, revision and human review of content drafts. General live publishing, scheduling, AI-assisted content generation and billing are not currently enabled for general use. References elsewhere on this site to AI generation, scheduling or publishing describe planned or implemented-but-paused functionality, not features available to users today.

2. Information We Collect

We collect the following categories of information in connection with the Service:

Account and authentication data. Email address and authentication records used to sign in to Ballot.

Brand kit data. Logos, color palettes, tone-of-voice descriptions, example content and stated brand preferences that you upload or configure to govern how content is prepared.

Draft and content data. Captions, images, briefs, and the revision history created as you prepare, edit and review content drafts.

Meta connection data. Identifiers and names associated with the Facebook Page and linked Instagram professional account you authorize, together with encrypted authorization tokens issued by Meta that allow the Service to check connection status and (where separately authorized) interact with those accounts.

Usage and activity records. Logs of approvals, delivery attempts, notices and AI-generation usage (where applicable), retained to support safety, accountability and troubleshooting.

We do not knowingly collect payment card numbers, government identification numbers, or special categories of sensitive personal data, and the Service does not currently ask you to provide them.

3. How We Use Information

We use the information above only for purposes tied to the category collected:

Account and authentication data: to authenticate sign-in and secure your account. Brand kit data: to apply your stated brand identity to drafts prepared in the workspace. Draft and content data: to create, store, revise and present content for your review and approval. Meta connection data: to establish and verify your authorized connection to a Facebook Page and its linked Instagram professional account, and to display accurate connection status. Usage and activity records: to maintain a record of approvals and account activity, investigate misuse, enforce these policies, and respond to support, security or legal inquiries.

We do not use your brand kit, draft content or Meta connection data to train general-purpose machine learning models, and we do not sell personal information.

4. Meta Platform Data (Facebook and Instagram)

Where you authorize Ballot to connect to a Facebook Page you manage and its linked Instagram professional account, the Service receives limited identifiers, names and an authorization token from Meta Platforms, Inc. ("Meta") sufficient to display the connected destination and its current connection status. This authorization is obtained and managed separately from your Ballot sign-in credentials.

Platform Data obtained through Meta's APIs is used only to operate the features described in this Policy and in Ballot's product documentation, consistent with Meta's Platform Terms and Developer Policies. We do not use Meta Platform Data for advertising, and we do not share it with third parties except as described under "Service Providers and Sub-processors" below or as required by law.

You may revoke Ballot's access to your Meta accounts at any time through Meta's own connected-apps settings. Revocation through Meta and deletion of your Ballot account are separate actions; see our Data Deletion Policy.

5. AI-Assisted Content Processing

Ballot has implemented, but has currently paused, integrations with Anthropic's Claude (for caption generation) and FAL (for image generation). These features are not active for general use.

If and when these features are enabled following a separate authorization step, bounded brand examples and content briefs would be transmitted to Claude to generate caption text, and image instructions together with a brand logo reference would be transmitted to FAL to generate images. Processing would be limited to what is reasonably necessary to generate the requested output. We make no representation that any AI provider operates on a zero-data-retention basis, and we will update this Policy with specific retention and training-use terms for each provider before AI generation is enabled for general use.

6. Service Providers and Sub-processors

We use the following service providers to operate Ballot:

Supabase, which provides authentication, database, private file storage and serverless (Edge Function) infrastructure underlying the Service. Lovable, which hosts the Service's frontend application. Meta Platforms, Inc., which processes account authorization, connection verification and, where separately authorized, publication to connected Facebook and Instagram accounts. Anthropic and FAL, prospective AI providers described in Section 5, for caption and image generation if and when enabled.

Processing by these providers, and any support activity we or they perform, may occur outside the geographic region in which the underlying database is hosted. A complete list of processors, together with applicable data processing terms and international transfer safeguards, is under review and will be finalized before the Service exits limited beta.

7. Data Retention

We retain information for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. Specific retention schedules for account records, brand kit data, draft content, Meta connection tokens, activity logs and backups have not yet been finalized for the beta and are under active review by the Company and its counsel.

No automatic deletion schedule is currently in effect, and we do not guarantee immediate erasure of information from backups upon request. Section 9 (Your Rights and Choices) and our separate Data Deletion Policy describe how to request review or deletion of your information.

8. Security Measures

We apply technical and organizational safeguards appropriate to a limited beta service, including: server-side encryption of Meta authorization tokens; owner-scoped access controls restricting application records to the account that created them; and private media storage controls limiting access to uploaded brand and draft assets.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your information, we will notify you and take appropriate remedial steps consistent with applicable law.

9. Your Rights and Choices

Depending on your location, you may have rights to request access to, correction of, or deletion of your personal information, to object to or restrict certain processing, or to receive a copy of your information in a portable format. To exercise any of these rights, contact support@ballotpost.com; see our Data Deletion Policy for the deletion process specifically.

We will verify your identity and the scope of your request before acting on it. Because the current beta and a separate legacy demo system use separate backends, please identify which system your request concerns. A request directed to Ballot does not, by itself, delete content already published to your Facebook Page or Instagram account, or revoke Meta's own records of an authorization you granted; those require action through your Meta account settings.

Residents of California and other jurisdictions with statutory privacy rights (including rights to know, delete, correct and opt out of sale or sharing of personal information) may exercise those rights using the contact method above. We do not sell or share personal information as those terms are defined under applicable law.

10. Children's Privacy

Ballot is intended for business users administering social media accounts on behalf of a brand or organization and is not directed to children. We do not knowingly collect personal information from individuals under 13 years of age (or the applicable minimum age in your jurisdiction). If we learn that we have inadvertently collected such information, we will take steps to delete it.

11. International Data Transfers

The Service and its providers may process and store information in the United States and other countries in which we or our service providers maintain infrastructure, including locations outside the region in which your information was originally collected. Where required by applicable law, we will implement appropriate safeguards for cross-border transfers of personal information. Finalized transfer mechanisms and jurisdictional disclosures are under review.

12. Government and Legal Requests

We maintain a government and legal request procedure, approved by the Company's owner and legal adviser on October 20, 2026, under which Sobowale Tunde is accountable for intake and response. Requests should be directed to support@ballotpost.com.

Before responding to any government or third-party legal request for user information, we verify the requesting authority, conduct legal review, assert appropriate legal challenges where warranted, apply data minimization to any disclosure, and record the request and our response in a restricted decision register. Retention obligations and legal holds triggered by such requests are assessed on a case-by-case basis. This procedure is reviewed annually.

We may also disclose information where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the rights, property or safety of the Company, our users or the public, or investigate fraud or security issues.

13. Changes to This Policy

We may update this Policy as the Service develops, including as features described as paused or under review are implemented or finalized. We will post the revised Policy with an updated effective date and, where changes are material, provide additional notice. Continued use of the Service after an update constitutes acceptance of the revised Policy to the extent permitted by applicable law.

14. Contact Us

Questions about this Policy or your information should be directed to:

Eagle Africa Trading and Distribution Corporation 7120 North Mills Rd, Charlotte, NC 28216, USA support@ballotpost.com