Privacy Policy

Informed is operated by Skybridge Labs, LLC (“Informed”, “we”, “us”). This policy explains what personal data we collect when you use getinformed.app and how we handle it.

You can browse bills, members, votes, and hearings on Informed without creating an account. When you visit the site, our servers and infrastructure providers automatically log standard request metadata (IP address, user agent, requested URL, timestamp) for the purposes of operating the service, preventing abuse, and diagnosing issues. These logs are retained for a limited period and are not used to build advertising profiles.

To create an account, we ask for your email address and a password. You may optionally provide a display name. Passwords are stored as a salted, hashed value — we never see or store your plaintext password.

When you are signed in, we store:

• The bills and members you follow, and the documents you save.
• Your notification preferences and the last time we notified you about each followed item.
• A record of documents you have viewed, used for the “Popular” and “Trending” rankings. View records are tied to your account but are not sold or shared.
• Your AI assistant usage counts, for enforcing plan limits.
• If you subscribe to a paid plan, billing metadata (but not your payment card details — see “Third-party services” below).

If you submit feedback via the in-app feedback button, we store the message text along with the page URL you were on when you submitted it and a timestamp. We use this solely to triage bugs and product requests.

We use a small number of third-party providers. Each receives only the data strictly necessary for their function:

• Resend — sends transactional and notification emails (account verification and followed-bill updates).
• Stripe — processes payments for paid plans. Stripe handles your card details directly; we receive only a subscription identifier and billing status.
• Cloudflare Turnstile — used during signup to distinguish humans from bots.
• Google AdSense — displays advertising on some pages. Google may set cookies and collect data per Google's own privacy policy. For visitors in the European Economic Area, the United Kingdom, and Switzerland, we use Google's certified consent management message to obtain consent before any advertising cookies are set or personalized ads are shown. You can manage ad personalization at myadcenter.google.com, or change your consent choices anytime via the “Privacy & cookie choices” link in the site footer.
• Google Gemini — powers the AI assistant. When you ask a question, your query and the relevant document text are sent to Google's Gemini API to generate an answer. Queries are not tied to your identity when sent to Google.

Informed itself does not set tracking cookies. We use browser local storage to keep you signed in (JWT session token) and to remember your theme and accessibility preferences. Google AdSense may set its own cookies on pages where ads are shown. If you are in the European Economic Area, the United Kingdom, or Switzerland, Google presents a consent message before any advertising cookies are set or personalized ads are shown, and you can change or withdraw your choices at any time using the “Privacy & cookie choices” link in the site footer.

A note on session storage: because the session token is in browser local storage, any browser extension you install — and any same-origin script loaded by the page — can read it. We mitigate this by sanitizing third-party content, applying a strict content security policy, and reviewing the dependencies in our frontend bundle, but no defense is perfect. Sign out before lending your browser to anyone, and avoid installing untrusted extensions while signed in.

Account data is retained for as long as your account is active. Request logs and rate-limit counters are retained briefly (typically under 30 days) and then discarded. If you delete your account, associated data is removed from our active systems within 30 days. We retain a limited set of records longer when required by law: Stripe billing records (transaction history, invoices, the customer identifier that links a payment to a deleted account) are retained for tax and accounting compliance, typically seven years. These records do not contain your card details — Stripe holds those.

You can view and update your account details at any time from the Preferences page. You can delete your account from the same page. Deletion permanently removes your profile, follows, saved items, view history, chat history, and stored AI provider keys from our systems, and immediately cancels any active paid subscription so you are not billed again. If you need access to or correction of data beyond what the app exposes, email [email protected].

We do not currently offer a self-service password reset. If you forget your password, the only recovery path is to delete your account (which cancels any active subscription) and create a new one. We are evaluating a recovery flow for a future release.

Informed is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has provided us data, contact us and we will delete it.

Informed is operated from the United States. If you use the service from outside the U.S., your data will be transferred to and processed in the U.S.

We may update this policy from time to time. Material changes will be noted at the top of this page with a new “Last updated” date.

Questions about this policy can be sent to [email protected].