Privacy Policy

This policy explains how Asterixify Innovations (“Asterixify, ” “we,” “us”) handles personal data when an organisation uses TiaTia to run an election, and when a member of that organisation is invited to vote. For quick answers to common questions, see our FAQ.

Who this applies to

An organisation (the “committee” or “electoral committee”) sets up and controls its own election on TiaTia. The committee decides what member data is uploaded, who is invited, and how the election is configured. Asterixify processes that data on the organisation’s behalf to operate the platform.

Data we process

• Register data the organisation provides: member name, phone number and/or email address, member ID, and any eligibility or weighting information the committee chooses to add.
• Authentication data: one-time verification codes and sign-in activity, used to confirm a member is who they say they are before a ballot opens.
• Ballot data: the choices a member submits. In an anonymous election, choices are stored separately from anything that identifies the member. In a transparent election, the committee has configured voting to be recorded against the member’s name.
• Technical data: basic request and audit logs (timestamps, actions taken) used for security and to give the committee an audit trail of the election.

How we use it

• To send voting invitations and verification codes by SMS or email.
• To confirm eligibility and prevent duplicate voting.
• To run the ballot, tally results, and produce the certified outcome the committee publishes.
• To maintain an audit log the committee can use to answer questions about the election afterwards.
• To keep the platform secure and investigate misuse.

Anonymous elections

When a committee configures an election as anonymous, TiaTia keeps ballot choices separate from voter identity in the application and database design, and results are reported without names attached. This is a strong operational separation, not an end-to-end cryptographic guarantee — it does not protect against someone with direct administrative access to the underlying infrastructure. We are transparent about this limitation rather than overstating it.

Who we share data with

We use third-party providers to deliver the service: an SMS provider and an email provider to send invitations and codes, and a cloud database and storage provider to host the platform. These providers process data only as needed to deliver that specific function, under their own security commitments. We do not sell member data, and we do not share it with anyone outside the organisation running the election except as described here or as required by law.

How long we keep it

We retain election data for as long as the organisation’s account is active and as needed to support the organisation’s records and any applicable legal or regulatory requirement. An organisation can request deletion of its data, subject to obligations that may require certain election records to be retained for a period afterwards.

Security

We use one-time verification codes for sign-in, encrypted connections (HTTPS) between your device and TiaTia, and restrict access to production data to authorised personnel. No system is completely immune to compromise, and we do not claim TiaTia provides government-election-grade certification or absolute secrecy against a determined administrator of the underlying infrastructure.

Your rights

If you are a member invited to vote and want to know what data an organisation holds about you on TiaTia, correct it, or request its deletion, start with your organisation’s electoral committee — they control the register. You can also contact us directly at hello@asterixify.com and we will help direct your request.

Data Protection Commission registration

Asterixify Innovations is registered as a data controller with the Data Protection Commission of Ghana, in accordance with the Data Protection Act, 2012 (Act 843).

Changes to this policy

We may update this policy as TiaTia evolves. We’ll update the date at the top of this page when we do.

Contact

Questions about this policy: hello@asterixify.com.