← Back to After Vote
Privacy & Security

What we collect, and what we don't.

After Vote asks for one thing — your email address — and uses it for one thing: sending you the weekly digest. This page covers our privacy policy, how to report a security issue, and how to have your data deleted.

Privacy Policy Responsible Disclosure Unsubscribe & Deletion
Document 1

Privacy Policy

Effective August 3, 2026

Who we are

After Vote is a free civic engagement tool operated by Charm City Impact Lab (CCIL), a nonpartisan organization based in Baltimore, Maryland. We send a weekly email digest of upcoming public hearings at Baltimore City's Board of Municipal and Zoning Appeals (BMZA), Liquor Board, Planning Commission, Commission for Historical and Architectural Preservation (CHAP), and Board of Estimates. This policy explains what we collect, why we collect it, and what your choices are. It applies to After Vote at charmcityimpactlab.org.

What we collect

One thing: your email address, which you give us when you sign up. We do not collect your name, street address, location, or demographic information. After Vote does not use cookies, tracking pixels, or behavioral analytics. We do not track what you do on our site or anywhere else.

Why we collect it

To send you the weekly digest. That is the only purpose.

Where your email lives

Your address is stored with Resend, the third-party service we use to deliver email. That contact record is the only place your address exists in our systems. The After Vote website runs on Netlify using serverless functions and keeps no database of its own. We retain your address for as long as you are subscribed.

What we will never do

We do not sell, rent, or trade your email address. We do not share it with anyone except Resend, and only so Resend can deliver the digest. We do not use it to profile you, score you, or make automated decisions about you, and we do not use AI for any of those purposes either. After Vote has no affiliation with any political party, candidate, or campaign, and your address will never be given to one.

Your choices and rights

Unsubscribe: every email includes an unsubscribe link. Click it and the emails stop immediately.

Access or correct: write to us and we will tell you what we have on file (your email address) or fix it if it is wrong.

Delete: write to us and we will permanently delete your contact record from Resend within 10 business days, then confirm it is done. Details are in the Unsubscribe and Data Deletion Policy below.

We respond to privacy questions within 5 business days, and we never confirm to anyone other than you whether a given address is subscribed.

Security

Our main safeguard is collecting almost nothing. Beyond that, access to our Resend account is limited to a small number of CCIL staff and protected with two-factor authentication. No system is perfectly secure, and we will not pretend otherwise. If your data is ever exposed, we will tell you plainly what happened.

Children

After Vote is not directed at children under 13, and we do not knowingly collect their information. If a child has subscribed, contact us and we will delete the record.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change is significant, we will also say so in the digest.

Governing law

After Vote operates under Maryland law, including the Maryland Consumer Protection Act and the Maryland Personal Information Protection Act.

Questions about this policy

info@charmcityimpactlab.org
Document 3

Responsible Disclosure

If you find a security vulnerability in After Vote, we want to hear about it.

What to include

A description of the issue, the URL or endpoint affected, steps to reproduce it, what you believe an attacker could do with it, and a way to reach you with follow-up questions.

What we will do

We will acknowledge your report within 72 hours, investigate it, keep you informed while we work on a fix, and let you know when it is resolved. If you want public credit, we will give it. If you prefer anonymity, we will honor that.

Our commitment

Charm City Impact Lab will not pursue legal action against anyone who reports a vulnerability in good faith. Good faith means you do not access, alter, or delete subscriber data beyond what is needed to demonstrate the issue, you do not disrupt the service, and you give us reasonable time to fix the problem before disclosing it publicly. Do that, and you have nothing to fear from us.

Report a vulnerability

info@charmcityimpactlab.org
Document 4

Unsubscribe & Data Deletion

Unsubscribing

Click the unsubscribe link in any After Vote email. It takes effect immediately and you will receive no further digests. Your contact record in Resend is marked unsubscribed and kept as a suppression record, which is what prevents you from ever being emailed again by accident. No reason or explanation needed.

Full deletion

If you want your address removed from our records entirely, email us from the address you want deleted, with a subject line like "Delete my data." Within 10 business days we will permanently delete your contact record from Resend, which is the only system where your address is stored, and send you a confirmation. That confirmation will be the last email you receive from us.

After Vote keeps no database of its own and no separate copies of the subscriber list, so deleting the Resend record is complete deletion on our end. Resend's routine system backups may hold residual copies briefly before they cycle out.

We act only on deletion requests sent from the address itself, so no one else can delete your subscription for you.

Request deletion

info@charmcityimpactlab.org