Privacy

Boothboard stores the name, mobile, email, suburb and availability a volunteer gives a campaign, plus the shifts and scrutineer assignments that campaign rosters. The campaign's account owner is responsible for that information. Boothboard is the processor for the tenant.

A volunteer's mobile and email are visible to the account owner, to admins of the electorates that volunteer is connected to, and to the booth captain of a booth where that volunteer is rostered. Other volunteers do not see them. A platform operator can open a read-only support view and cannot change the roster.

You can download your details from Settings and ask for them to be deleted. Deletion clears volunteer fields and withdraws the point of keeping the login, unless you are also an account owner or admin. Campaign mail that is not a shift confirmation includes an unsubscribe link. Shift confirmations still go out. Hard bounces and complaints stop all mail to that address.

We do not sell volunteer lists. Payment details are handled by Stripe. Authentication emails can be sent by Supabase or by Resend if you set it as the custom SMTP provider. See SECURITY.md for the threat model and the Australian Privacy Principles notes.