Government Publisher Privacy Notice

This notice supplements the Mast Privacy Policy. The general policy still applies to ordinary site use, browser storage, analytics, advertising, service providers, and security. This notice controls if it describes Government Publisher data more specifically.

A Government access request may include your name, official email address and domain, government level and jurisdiction, agency or office, job title, official website, office phone, intended portal or API use, and an optional explanation.

Mast uses this information to verify mailbox control, assess identity and authority, review unusual domains, contact you or your office, prevent duplicate or abusive requests, create an approved account, and document the access decision.

Approved accounts may store your name, email, agency or office, job title, office phone, jurisdiction, profile image, account status, access approvals, sign-in timestamps, and related administrative notes.

Your display name and profile image may appear to other authorized Government team members and in attributable activity views. Your email may be available to authorized Mast administrators and may be revealed in limited account or activity details, but it is not intended for public order cards.

Mast may store password-derived authentication data, session records, email verification and activation tokens, 2FA configuration, recovery state, passkey public credential information, security timestamps, and records of security changes. Passkey private keys remain on your device.

Mast uses this information to authenticate you, enforce publishing requirements, detect misuse, investigate compromise, revoke access, and notify you about account-security events.

Mast stores Government order drafts and submitted content, including titles, summaries, dates, times, authority, source links, geographic or facility scope, notes, attachments or media metadata when supported, AI-assistance indicators, and validation results.

Mast may retain revisions, review status, requested-change messages, retractions, approvals, publications, conflicts, updates, and withdrawals. Those records may be associated with your account and shown to authorized Mast administrators or Government team members for coordination and accountability. Published order content and identified issuing authority or source are public.

Mast may store API credential identifiers, names, scopes, expiration and revocation state, and protected hashes of issued secrets. A new secret is displayed once; Mast does not need to retain the plaintext secret.

Portal and API logs may include the acting account or credential, time, action, order identifier, route, method, request ID, response status, validation or rejection reason, IP address, user agent, and relevant before-and-after metadata. Mast uses these logs for attribution, support, security, rate limiting, conflict review, and service reliability.

Mast may send access verification, invitation, password, security, review, approval, requested-change, publication, withdrawal, and policy-update messages. It may also notify Mast administrators about access requests, submitted orders, direct publications, API activity, or security concerns. Configured email and push providers process the limited information needed to deliver those messages.

Mast may retain rejected access requests, account records, publishing history, security events, and API activity as reasonably needed for verification, accountability, dispute resolution, abuse prevention, legal obligations, and the integrity of the public order record. Suspension, withdrawal, or departure from government service does not automatically erase that history.

Activity conducted for an agency may also be subject to that agency's records schedules, public-record laws, disclosure duties, or litigation holds. Mast does not determine those obligations for an agency. Government users should consult their records officer or counsel and should not treat Mast as the agency's official records repository.

You can update supported profile fields and security settings in the Government portal. Contact support@mast.today to request correction of account information, report a role or authorization change, ask a privacy question, or request account review. Some publishing and security history may be retained even when profile information is corrected or access ends.

Mast may update this notice as Government Publisher features, providers, or data practices change. Material changes may require renewed acceptance before continued portal or API access.