Legal

Privacy Policy

Last updated: July 2026.

This policy describes what Coalition Desk (“we,” “us”) collects when you use the Service, why, and who it’s shared with. It describes what the product actually does today, not aspirational commitments.

1. Information we collect

• Organizer account: your name, work email, hashed password, and the organization/workspace name you provide at signup.
• Letters and workspace content: the letters you draft, their version history, attachments, and internal workspace settings.
• Invitee and participant information: names, emails, and organization details that organizers enter when inviting a participant, and the decisions, notes, and conversation messages participants submit in response.
• Feedback: anything you submit through the in-app feedback form, plus an optional contact email if you choose to provide one.
• Limited product-usage events: a small set of named events (for example, that a letter was created or a decision was submitted), tied to your workspace but never including names, emails, or letter text. See Section 3.

2. How we use it

We use this information to operate the Service: to authenticate accounts, send transactional emails (invitations, reminders, password resets, email confirmation), route incoming requests, and generate the artifacts you request (PDFs, signatory lists, exports). We use aggregated, non-identifying usage events to understand which parts of the product are working. We do not sell your data, and we do not use your letters or participant responses to train third-party AI models.

3. Analytics and tracking

If enabled, Coalition Desk uses Google Analytics and Microsoft Clarity for aggregate product analytics, and only after you accept the optional analytics prompt. These tools never load on participant review links or published-letter pages, and events never include names, emails, organization names, or letter content — only which screen was used and what generic action occurred. You can decline analytics at any time from the consent prompt.

4. Who we share information with

We share information with a small number of service providers strictly to operate the Service:

• Resend — delivers transactional email on our behalf (invitations, reminders, account emails).
• Google Analytics and Microsoft Clarity — optional, consent-gated product analytics (see Section 3).
• Google Cloud — hosts the application and database.

We do not sell personal information, and we do not share coalition participation, endorsement, or decline data for advertising or political-targeting purposes.

5. Data retention and deletion

We retain your information for as long as your account is active, since institutional approval history is part of the product’s value. There is currently no automated self-service deletion or export tool. To request deletion of your account or data, or an export of your workspace’s content, contact us at bednermb3420@gmail.com and we’ll process the request manually.

6. Security

Passwords are hashed (never stored in plain text), and session tokens are hashed and stored as revocable, HTTP-only cookies. Traffic to the Service is encrypted in transit. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

7. Children

Coalition Desk is intended for use by adults acting on behalf of organizations. It is not directed at, and we do not knowingly collect information from, anyone under 18.

8. International use

Coalition Desk is operated from the United States. If you use the Service from outside the United States, your information will be processed there.

9. Changes to this policy

We may update this policy as the Service develops. We’ll post the updated date above, and for material changes we’ll make a reasonable effort to notify active accounts.

10. Contact

Questions about this policy, or requests to access or delete your data: bednermb3420@gmail.com.