The founder is the pre-incorporation controller. WorkingPolicy, Inc. becomes the intended successor only after formation and an announced transition. This notice takes effect when the dynamic beta accepts accounts.
A public verification label is derived from a restricted case. Precise addresses, raw identity or locality documents, device-risk signals, moderator notes, and private government drafts are never public.
Ordinary signup uses account, authentication, adult/residency attestation, accepted policy version, session, and security records. Role claims are separate, and raw verification evidence stays with the provider wherever possible.
The AI gateway classifies and redacts data before dispatch, controls provider retention and region policy, blocks restricted classes by default, and records the provider/model/prompt used.
Access, correction, export, deletion, appeal, and portability use proportionate reauthentication and target completion within 30 days or sooner where required.
Private account data is deleted within 30 days absent a narrow hold. Raw security IP data lasts 30 days, analytics 90 days, minimized security audit data two years, finance records seven years, and public policy records remain.
Labels describe the state of the record. They do not confer legal authority, certification, or government endorsement.
Published proposals, sources, decisions, and outcome reports after review.
Private drafts, membership, invitations, and unpublished reviews.
Identity/locality evidence, security investigations, and other high-impact records.
Exports, deletion, consent history, legal-demand minimization, and restored-backup deletion replay remain auditable workflows.
