Voteify ← Home

Privacy Policy

Last updated: June 20, 2026

This Privacy Policy explains how Voteify, operated by Apex Medical Enterprises (“we,” “us”), handles personal information when an organization (the “Organizer”) uses Voteify to run an election and when people vote. We designed Voteify so that ballots are secret — read the “How ballot secrecy works” section below.

Roles: who controls voter data

When an Organizer runs an election, the Organizer decides who is eligible and uploads its roster. For that voter personal data, the Organizer is the data controller and Voteify is a processor acting on the Organizer’s instructions. If you are a voter with questions about why you were included in an election, contact the Organizer that invited you. For our own account holders, we are the controller of their account data.

What we collect

CategoryExamples
Organizer accountEmail, name, a securely hashed password, login timestamps.
Organization & electionOrganization name, election titles and descriptions, contests, candidates, voter categories.
Voter rosterVoter email, optional name, and an optional category (e.g. “Resident”), provided by the Organizer.
BallotsThe ranked choices, stored encrypted and unlinked to any voter (see below).
Operational recordsThat a voter voted in a contest (kept separate from how they voted), a tamper-evident audit log, and receipt codes.
Technical dataIP address and request metadata used for rate-limiting and security; basic logs.
PaymentIf you buy a paid plan, billing details are handled by our payment processor; we do not store full card numbers.

How ballot secrecy works

We separate identity from content. When you cast a ballot, Voteify records that you voted (to enforce one-person-one-vote and support an audit) in one place, and stores how you voted in a separate place that contains no link back to you. The ranked choices are encrypted at rest with a key that is not stored in the database. As a result, neither an Organizer nor a Voteify administrator can tie a particular ballot to a particular person. Your receipt code lets you confirm your ballot was counted without revealing your choices.

How we use information

We do not sell personal data, and we do not use voter data for advertising.

How voting-link emails are sent

Voting invitations and reminders are sent from an Apex Medical Enterprises email address on the Organizer’s behalf, with replies directed to the Organizer. The email shows the Organizer’s name so recipients know who is asking them to vote.

Who we share with

We do not share voter data with third parties for their own marketing.

Retention

We keep election data while the election is active and for a reasonable period afterward so results remain auditable and exportable. Organizers can export their rosters and results at any time and can request deletion of an organization and its elections; voters should direct deletion or access requests to the Organizer that invited them, and we will assist the Organizer in fulfilling them. Account data is kept while the account is active.

Security

We use encryption of ballots at rest, password hashing, identity/content separation, a tamper-evident audit log, access controls, and rate-limiting. No system is perfectly secure; consistent with our Terms, we cannot guarantee that any online system is free of error or attack.

Cookies

We use a strictly-necessary session cookie to keep Organizers signed in, and — only for optional “public link” polls — a cookie that helps limit a browser to one vote. We do not use advertising or cross-site tracking cookies.

Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. Organizers can exercise these for their account data by contacting us; voters should contact the Organizer that invited them, since the Organizer controls the roster. We will support Organizers in honoring valid requests.

Children

Voteify is intended for organizations and their adult members and is not directed to children. We do not knowingly collect personal data from children.

International

The Service is operated from the United States and runs on a global content-delivery network; data may be processed in the United States and other locations where our providers operate.

Changes

We may update this Policy; material changes will be posted here with a new date and, where appropriate, notified to account holders.

Contact

Questions or requests: notifications@apexmedicalenterprises.com.