Privacy Policy

If you're a student voter: full name, matric number, phone number, department, and level — supplied by your electoral committee when they register you as an eligible voter, not by you directly. Once you vote, only the fact that you voted is recorded against your name; which candidate you chose is stored completely separately with no link back to you (see our Trust page for exactly how).

If you're an electoral committee or organisation admin: a username and a bcrypt-hashed password (we never store your actual password). We also log the IP address and browser user-agent of your login sessions, for fraud and abuse prevention.

For everyone: IP addresses are recorded against login attempts and rate-limiting checks, and against entries in the audit log, so that suspicious activity can be investigated.

• Matric number and phone number are used to deliver your one-time voting token via WhatsApp or SMS, and to confirm you're voting as yourself.
• Department and level are used only for voter-list organisation and turnout reporting to the committee — never shown alongside how anyone voted.
• Login credentials and session data authenticate committee/admin accounts and keep each university's data isolated from every other university on the platform.
• IP addresses and audit logs exist to detect and investigate abuse (repeated failed logins, unusual activity patterns) — not to profile or track individual behaviour beyond that purpose.

Access is restricted by role, and enforced by the server on every request — not just hidden in the interface:

• Your electoral committee can see your name, matric number, phone number, department, level, and whether you've voted — but never which candidate you chose.
• Your university's organisation admin cannot see voter data, candidates, or results at all — their dashboard is limited to the university logo, department list, and a read-only list of registered committees.
• Electra's platform operators have database-level access for maintenance and support, but do not use it to view individual voting choices, and every administrative action taken through the platform's own tools is logged.

Electra is built on infrastructure providers who process data on our behalf, under their own security commitments:

• Supabase — hosts the database. All voter, election, and audit data lives here.
• Meta (WhatsApp Business API) — delivers voting tokens sent via WhatsApp.
• Termii — delivers voting tokens sent via SMS, where configured.
• Cloudinary — hosts uploaded images (university/election logos, candidate photos).

We do not sell voter data to anyone, for any purpose.

Voter records (name, matric number, phone, department, level, and voting status) are retained for the duration of the election and for 14 days after results are published, to support result verification and dispute resolution. After that window, the matric number, name, phone number, and voting token on each record are automatically anonymised — this happens without anyone needing to request it. Committees may also delete an individual voter's record earlier, on request. Audit log entries are retained indefinitely as an immutable historical record, consistent with the platform's integrity guarantees — see the Trust page.

If you are a student whose data was registered by your university's electoral committee, you can request access to, correction of, or deletion of your voter record by contacting your electoral committee directly — they control your registration data. If you are a committee or organisation admin, you can request deletion of your account and associated data through your university's registered channel with Electra.