Your data
Privacy notice
This notice explains the data used by Ekō’s member petition platform. It should be reviewed alongside Ekō’s organisation-wide privacy policy before public launch.
What we collect
For petition creators, we process an email address, name, petition drafts and submissions, selected or uploaded images, moderation records, login sessions, and limited AI-assistant usage records. For signers, we process a name, email address, optional postcode, consent choices, public-name preference, and signing time.
AI-assisted drafting
When a signed-in member asks for drafting help, their prompt, optional pasted source material, and relevant wizard fields are sent to OpenAI to generate editable petition copy. Do not enter private personal data, confidential information, or material you do not have permission to share. AI output may be inaccurate and must be checked by the creator and Ekō moderators.
Images
Image-search terms are sent to Unsplash. Selecting an Unsplash image triggers the download-tracking request required by its API. Images uploaded from a computer are re-encoded to remove embedded metadata and stored with the petition; abandoned uploads older than 48 hours are deleted automatically.
Why we use the data
We use this data to authenticate members, provide drafting tools, host and moderate petitions, validate signatures, prevent abuse, communicate about the action, and meet legal and safeguarding obligations. Optional campaigning communications require a separate opt-in.
Retention and your rights
Magic links expire after 15 minutes and member sessions after 60 days. AI usage counters are retained for up to 90 days. Petition and signature records are automatically removed after their two-year retention date; unreferenced uploaded images are also cleaned up. You can request access, correction, or deletion by emailing privacy@eko.org.
Optional Google and Facebook sign-in
If you choose an available social sign-in option, we use the provider’s account identifier and email address to create or connect your member account. We store that connection so you can sign in again. We do not request access to your contacts or permission to publish on your behalf. Email sign-in remains available. To request removal of a connection, contact privacy@eko.org.