Privacy Policy

politics.rootz.global  ·  Rootz Corp  ·  Effective 24 July 2026

politics.rootz.global publishes an AI-readable database of US elected officials and candidates, operated by Rootz Corp (Delaware, USA). This policy explains exactly what we collect, what we deliberately do not, and how to have your data removed.

The short version.

Reading our data is anonymous — no account, no API key, no cookies, no trackers. We only hold personal data if you deliberately create a Citizen Bridge workspace. We have never sold data and do not run advertising or analytics trackers on this service.

1. Reading the public data

The public API, MCP server, and website can be used without an account, API key, or login. When you read data we do not set cookies, do not fingerprint your browser, and do not embed any third-party analytics or advertising tracker.

Our web server keeps standard request logs — IP address, timestamp, requested path, user agent, and response status. These exist for security, abuse prevention, and capacity planning. We aggregate them into anonymous traffic counts and do not use them to build profiles of individuals.

2. The Citizen Bridge (the only place we hold personal data)

A Citizen Bridge is an optional workspace you create at /c/create to track your representatives and draft correspondence. Creating one is a deliberate act. If you never create one, we hold no personal data about you.

A Bridge workspace may contain:

DataWhy it existsRequired?
ZIP / state / districtMatch you to your representativesZIP only
Street addressPrecise district matching where ZIP is ambiguousOptional
Email / display nameReturn to your workspace; optional identity levelOptional
Tracked officials & notesYour saved list and private annotationsOptional
Drafted letters & messagesSubject, body, and delivery status of correspondence you composeOptional
PreferencesTopics of interest, filtersOptional
Sensitive by nature.

Correspondence with elected officials can reveal political opinions — a special category of data under GDPR Article 9. We treat Bridge contents accordingly: they are never sold, never used for advertising, never used to train models, and never shared with the officials you track unless you send the message.

Workspace addresses are unguessable, not secret

Each Bridge lives at a URL containing a random hash. Anyone holding that URL can open the workspace. Treat the link like a password: don't post it publicly, and use the optional passcode or email identity level if the contents are sensitive.

3. AI agents and the MCP server

Our MCP server at https://politics.rootz.global/mcp exposes the same public data as the REST API. When an AI assistant queries it on your behalf, we receive the query — not your identity, and not your conversation with that assistant.

If an AI agent acts inside a Bridge workspace you created, its messages are stored in that workspace alongside yours, and are visible to anyone holding the workspace URL.

4. What we never do

5. Where the political data comes from

Records about officials and candidates are compiled from public and official sources — government registries, election authorities, legislative records, and campaign filings. This is public-record information about people acting in a public capacity, not data collected from our users.

Every record carries origin provenance: a cryptographic proof of where it came from and when it was captured. If you are an official or candidate and believe a record about you is wrong, see /claim to claim and correct your record, or contact us below.

6. Retention

7. Your rights

Wherever you live, you may ask us to give you a copy of the data in your Bridge, correct it, or delete it outright. If you are in the EU/UK you additionally hold rights of access, rectification, erasure, restriction, portability, and objection under the GDPR; if you are in California you hold the rights described by the CCPA/CPRA — including the right not to be discriminated against for exercising them. We do not sell personal information, so there is nothing to opt out of.

To exercise any of these, email privacy@rootz.global with your Bridge URL. We respond within 30 days. We may ask you to confirm control of the workspace before we delete it.

8. Security

Traffic is encrypted in transit with TLS. Write access to our MCP endpoints requires OAuth 2.1. Bridge workspaces are isolated by unguessable hash. No system is perfect: if you believe you have found a vulnerability, please report it to security@rootz.global rather than disclosing it publicly, and we will work with you.

9. Children

This service is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created a Bridge, contact us and we will delete it.

10. International transfers

Our servers are located in the United States. If you access the service from outside the US, your data is processed in the US.

11. Changes to this policy

If we change this policy materially, we will update the effective date above and post the change on this page. Because the policy is served from a versioned repository, prior versions remain auditable.

12. Contact

Rootz Corp — Delaware, USA
Privacy: privacy@rootz.global
Security: security@rootz.global
Support: support@rootz.global