Effective October 2, 2026
Privacy policy
Civly tracks Congress, not you. This page says exactly what the service stores, where it goes, and how to remove it.
Using Civly without an account
You can read everything on Civly as a guest. In that case your reader profile (first name, ZIP code, role, interests, lean), your saved bills, your followed members, and your display settings are stored only in your browser's local storage on your own device. They never reach our servers.
One exception: when you enter a ZIP code, Civly sends that ZIP code to our database to look up the congressional districts it covers. The ZIP code is not stored with any identifier.
Using Civly with an account
If you create an account we store your email address, a hashed form of your password, an optional two-factor authentication secret, your reader profile, and your saved bills and followed members, so they follow you across devices. Accounts and data live in Supabase, hosted in the United States.
When you choose a password, Civly checks it against the Have I Been Pwned breached-password service using k-anonymity: only the first five characters of a one-way hash leave your device, never the password itself.
The only emails Civly sends are account emails: confirming your address, resetting your password, and confirming sensitive changes. There is no newsletter and no marketing email.
What we do not do
- No advertising, no ad networks, no tracking pixels.
- No analytics services and no third-party cookies.
- No selling, renting, or sharing of personal data with anyone.
- No payments: Civly is free, so no billing details are collected.
Technical records
Like any website, Civly's hosts receive your IP address and standard request logs when you load a page: Vercel serves the site and Supabase answers data requests. Those logs are kept by the providers for a limited time for security and reliability and are not used to profile you.
Where the information comes from
Bills, votes, members, committees, and hearings come from public records published by Congress.gov, the Federal Election Commission, and the GDELT Project. Plain-English summaries and the daily brief are written by an AI editor from those public records. Your personal data is never sent to the AI provider.
Deleting your data
As a guest, clearing this site's data in your browser removes everything Civly stored. With an account, open Saved, then Account, and choose Delete account: this removes your account, profile, watchlists, and sign-in records immediately and permanently. You can also write to us and we will do it for you.
Children
Civly is not directed to children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version is posted here with a new effective date. Material changes are announced in the app.
Contact
Questions about privacy, or a request to access or delete your data: carlos@rumoave.com.