Privacy Policy

PRA Center (“PRA Center,” “we,” “us”) provides software that helps teams file, track, and escalate public records requests. This policy explains what information we collect when you create an account and use the service, how we use it, and the choices available to you.

This document is a draft placeholder and has not yet been reviewed by counsel. It will be replaced with final, counsel-approved language before public launch.

• Account information. Your name, email address, and the organization you belong to, supplied when you sign up or are invited to a workspace.
• Request data. The contents of the public records requests, agencies, deadlines, correspondence, and documents you enter or upload while using the service.
• Usage and log data. Standard technical information such as IP address, browser type, pages visited, and timestamps, collected to operate and secure the service.
• Authentication cookies. Cookies and similar technologies used to keep you signed in and to maintain your session.

• Provide, maintain, and improve the service, including tracking statutory deadlines, follow-ups, and escalations.
• Authenticate users and secure accounts and workspaces.
• Communicate with you about your account, requests, and service updates.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell your personal information. We share information only as described here:

• Service providers. Vendors who host our infrastructure, store data, and send transactional email on our behalf, under contractual confidentiality and security obligations.
• At your direction. Content you choose to send to a government agency as part of a records request is transmitted to that agency by you, using the service.
• Legal and safety. When required by law, legal process, or to protect the rights, safety, and security of PRA Center, our users, or the public.

We retain account and request data for as long as your account is active or as needed to provide the service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods will be confirmed by counsel.

We use administrative, technical, and organizational safeguards designed to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can review and update your account information from within the service, and you may request deletion of your account by contacting us. Where applicable law grants additional rights over your personal information, we will honor them. The full list of rights and how to exercise them will be finalized with counsel.

PRA Center is intended for use by organizations and is not directed to children. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice.

Questions about this policy can be directed to privacy@pracenter.org.