Privacy Policy
How we collect, use, and protect your information.
Effective Date: February 15, 2026
Last Revised: February 28, 2026
InfraSignal (“we,” “us,” or “our”) takes the private nature of your personal information seriously. This Privacy Policy describes how we collect, use, retain, share, and protect the personal information of users (“you” or “your”) of the InfraSignal platform (the “Service”), accessible at https://infrasignal.org/.
By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.
1. Information We Collect
1.1 Information You Provide Directly
- Account & Report Information: Name and email address when you create an account or submit a report.
- Report Content: Text descriptions of infrastructure problems, photographs you upload, and the geographic coordinates you select on the map.
- Report Updates: Follow-up information you post to an existing report.
- Contact Form Submissions: Messages submitted through the platform’s contact form.
1.2 Information Collected Automatically
- Device & Browser Data: Browser type, operating system, screen resolution, and referring URL.
- Session Data: A session cookie to maintain login state (see Section 6).
- Map Interaction Data: Geographic coordinates when you place a pin on the map. We do not track your real-time device location unless you explicitly use your browser’s geolocation feature.
1.3 Information from Third-Party Services
We use third-party services for mapping, geographic boundary lookups, automated image moderation, and email delivery. These providers process data only as necessary to perform their functions. Uploaded photos are transmitted to a third-party moderation service to detect inappropriate content; we do not receive or store personal information from that service beyond moderation results.
2. How We Use Your Information
What do we use your information for?
We use the information we collect to provide, operate, and improve the Service, including:
- Delivering your infrastructure report to the responsible local authority
- Sending confirmation emails, report status updates, and alert notifications
- Enabling local authorities to contact you regarding your report
- Moderating uploaded photos and text for inappropriate content
- Maintaining, securing, and improving the Service
- Preventing abuse, spam, and fraudulent activity
- Conducting research and analytics to improve public infrastructure outcomes
- Developing new products, features, and services
- Personalizing your experience with the Service
- Communicating about updates and information of interest (you may opt out)
- Aggregating and de-identifying data for public reporting and research
- Complying with applicable legal obligations
3. How We Share Your Information
3.1 With Local Authorities
When you submit a report, your name, email address, report description, photos, and the GPS coordinates of the problem are shared with the local government authority responsible for that location. This disclosure is necessary for the authority to investigate, respond to, and resolve the reported issue.
3.2 Public Display
Your report description, category, photos, location, and approximate pin placement are published on the InfraSignal website so that other residents can view reported problems and their status. You may choose to hide your name from the public report page; however, your name and email are always shared with the responsible authority.
3.3 Service Providers and Partners
We work with third-party service providers, partners, and other entities to help us operate, provide, improve, understand, customize, support, and market our Service. When we share information with these entities, we require them to use your information in accordance with our instructions and terms.
These third parties may include: hosting and infrastructure providers, content moderation services, analytics providers, email delivery services, mapping and geolocation services, customer support tools, and professional advisors.
3.4 Aggregated and De-identified Data
We may share aggregated, anonymized, or de-identified data — which cannot reasonably be used to identify you — with third parties for research, analytics, urban planning, public policy analysis, trend reporting, or any other lawful purpose, including commercial use.
3.5 Legal Requirements
We may disclose personal information if required by law, subpoena, court order, or other legal process, or if we reasonably believe that disclosure is necessary to:
- Comply with applicable law or legal process
- Protect the rights, property, or safety of InfraSignal, our users, or the public
- Enforce our Terms of Use
- Respond to law enforcement requests
3.6 Business Transfers
If InfraSignal is involved in a merger, acquisition, sale of assets, reorganization, dissolution, bankruptcy, or similar transaction, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
3.7 With Your Consent
We may share your information for purposes not described in this Privacy Policy when we have obtained your consent to do so.
4. Aggregated and Public Data
How is aggregated and public data handled?
Infrastructure reports submitted through InfraSignal are intended to be made available to the public and to government authorities by design. Report descriptions, categories, photos, locations, and status updates are publicly visible on the platform.
We may compile, aggregate, anonymize, or de-identify information collected through the Service for use in research, analytics, public policy studies, urban planning tools, trend reports, or any other lawful purpose. Aggregated and de-identified data is not subject to the restrictions in this Privacy Policy because it does not constitute personal information.
5. Data Retention
How long do we keep your data?
We retain your account information and reports for as long as your account is active or as needed to provide the Service. Infrastructure reports and associated data (descriptions, photos, location, status) are retained indefinitely to maintain a public record of civic issues and their resolution, unless you request deletion.
6. Cookies
What cookies does InfraSignal use?
InfraSignal uses a single essential cookie for session management:
- infrasignal_session — Maintains your authenticated login session and stores preferences. Duration: session (cleared when browser closes), or 4 weeks if “Keep me signed in” is selected.
We do not use advertising cookies, tracking pixels, social media widgets, or third-party analytics cookies.
7. Data Security
How do we protect your information?
We implement reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission, secure password storage, automated content moderation, and access controls limiting staff access to administrative functions.
No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Children’s Privacy
Do we collect data from children?
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13, consistent with the Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided personal information through the Service, please contact us immediately and we will delete it.
9. Your Rights
What are my privacy rights?
Depending on your state of residence, you may have rights under applicable data privacy laws (CCPA, VCDPA, and similar). These rights may include:
- Right to Know: Request disclosure of the personal information we have collected about you
- Right to Delete: Request deletion of your personal information, subject to certain exceptions
- Right to Correct: Request correction of inaccurate personal information
- Right to Non-Discrimination: Exercise your privacy rights without facing discriminatory treatment
To exercise any of these rights, please contact us. We will verify your identity and respond within the timeframe required by applicable law (typically 45 days).
Does InfraSignal sell personal information?
InfraSignal does not sell personal information in exchange for monetary consideration. However, certain data-sharing arrangements — such as sharing with service providers, partners, or analytics providers — may be broadly interpreted as a “sale” or “sharing” under some state privacy laws. To the extent applicable law provides you with the right to opt out, you may exercise that right by contacting us.
10. Changes to This Policy
How will we notify you of changes?
We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last Revised” date at the top of this page. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
Questions about your privacy?
If you have questions or concerns about this Privacy Policy, reach out to us.
Contact Us →