Security
Private campaign operations, protected by design.
Ehlect is built for campaign information that should not be visible to the public or to another campaign.
Campaign separation
Each campaign is a separate workspace. Protected operations re-check authenticated identity, multi-factor authentication, live campaign membership, fixed role permissions, and campaign scope. Volunteers receive only the limited information needed for their current assignments.
Account and billing protection
Supabase authentication supports email confirmation and multi-factor authentication. Stripe handles subscription Checkout, payment details, invoices, and the billing portal; Ehlect does not collect card numbers through its own forms.
Providers and data location
Vercel hosts the application, and Supabase provides database and authentication services. Supabase Custom SMTP is disabled, so general-recipient Auth email delivery is unavailable. Twilio Email separately delivers application-generated transactional email and campaign marketing email from authenticated campaign-owned domains, while Stripe provides subscription billing. Ehlect does not claim that campaign information stays exclusively in Canada.
Read the full policies
For retention, public forms, campaign responsibilities, service limitations, and privacy requests, read the Privacy information and Terms of Service.