Data Policy

FDAPP separates public campaign content, organiser administration data, voter verification data, payment transaction records, audit logs, and CMS content. Access should be limited by role and business purpose. Voting and payment records may be retained where needed for campaign integrity, financial reconciliation, fraud review, dispute resolution, analytics, and statutory obligations. Data should be protected using appropriate access controls, encryption in transit, audit logging, least-privilege administration, and secure third-party processors. Where demonstration content is used, it should not be treated as live campaign results or official public voting data.