Privacy Policy

State is operated by Collective Thinking Ltd, a company registered in England and Wales. We are the data controller for the personal information described in this policy. Our registered address and ICO registration number are available on request.

If anything here is unclear, email hello@state.com.

• Account information, including your name, email address, and password. Passwords are stored hashed, never in plain text.
• Postcode and constituency, to verify which UK parliamentary constituency you live in and route your contributions to the right elected representatives.
• Profile information you choose to add, including username, profile picture, and anything you write in your profile.
• Your contributions, including statements, reactions to motions, reasons for or against motions, and any motions you create.
• Your conversations with the Oracle, including the questions you ask and the responses we provide, so you can return to them in "Recent Chats".
• Technical information, including your IP address, device type, browser, and approximate location derived from IP, collected for security and debugging.
• Usage information, including which pages you visit, which motions you react to, and how long you spend on the platform, so we can improve the product.

We do not deliberately collect special category data such as health, religion, or sexual orientation. If you choose to disclose this kind of information in a statement or reason, you are doing so voluntarily, and we treat what you write as content you have consented to share.

• We do not buy data about you from third parties.
• We do not track you across other websites.
• We do not use cookies for advertising.
• We do not sell your data to advertisers, ever.

Under UK GDPR, every piece of data we collect needs a legal basis. Ours are:

• Contract, to provide the service you signed up for, including your account, statements, reactions, and Oracle conversations.
• Legitimate interests, to keep the platform secure, prevent abuse, and improve the product.
• Consent, for any optional analytics or communications you opt into.

You can withdraw consent at any time in Settings.

Public to other users on State:

• The reasons you submit in support of, or against, other people's motions.
• The motions you create.
• The text of any motions and reasons you publish.
• Your reactions appear as part of aggregate counts on a motion; individual reactions are not attributed to you by name.

Visible to elected representatives in their dashboard:

• Aggregated counts of how their constituents are engaging with motions.
• The text of motions and reasons relevant to their constituency.
• Verification that contributors are real, verified constituents, but not your real name, email, or postcode.

Never shown to anyone:

• Your real name.
• Your email address.
• Your full postcode. Only the constituency it resolves to is used.
• Your password.
• Your IP address or device information.
• Your private chat history with the Oracle.

• Account data is kept for as long as your account is active. If you delete your account, we delete your account data within 30 days.
• Motions and reasons you have published stay live by default while your account is active. If you delete a motion, the text is removed. Aggregated reaction counts may persist anonymously.
• Oracle chat history is kept while your account is active. It is deleted when you delete your account, and you can clear individual chats yourself.
• Deleted data may persist in encrypted backups for up to 90 days before being purged.

We share data only with companies that help us run the service, under strict contracts that prevent them from using it for their own purposes.

• Cloud hosting: Amazon Web Services in the London region hosts our database and infrastructure.
• AI providers: Anthropic and/or OpenAI process your Oracle conversations to classify and respond to them. Conversations are not used to train their models.
• Email: Postmark sends transactional emails, including sign-up confirmations and notifications you have opted into.
• Analytics: we use privacy-respecting analytics that do not identify you individually.

We do not share data with advertisers or data brokers.

Your data is stored in the UK and EU. AI processing of Oracle conversations may happen in the United States under standard contractual clauses for international transfers, as required by UK GDPR.

You have the right to:

• Access the personal data we hold about you.
• Correct anything that's wrong.
• Delete your account and the data attached to it.
• Object to processing or restrict it in certain circumstances.
• Port your data. We will give you a machine-readable export of your contributions.
• Withdraw consent for anything you previously consented to.
• Complain to the Information Commissioner's Office if you think we have handled your data badly.

Most of these you can do directly in Settings. For anything else, email hello@state.com and we will respond within 30 days.

State is not intended for under-13s. We do not knowingly collect data from children under 13. If you are a parent or guardian and you think a child under 13 has signed up, email us and we will delete the account.

If we change anything material in this policy, we will let you know by email and put a notice on the platform. The last updated date at the top will always reflect the most recent change.

Data protection: hello@state.com. We will route it to the right person.

Information Commissioner's Office: ico.org.uk / 0303 123 1113.