Legal
Privacy Policy
Effective date: [DATE] · Covers campaignlogix.com, the campaign dashboard, our mobile apps, and hosted campaign websites.
1. Information we collect
Account information. When you create an account we collect your name, email address, mobile number, residential address (used to match you to your race), and password. Volunteers invited to a campaign provide name and contact details.
Campaign data you enter. Campaigns record information in the normal course of campaigning: donor names and donation details, expense records, volunteer rosters, event attendees, notes about voter conversations, and content for an optional campaign website. This data belongs to the campaign that entered it.
Voter file data. We license registered-voter data from a commercial voter-file provider that compiles official, public-record voter registration information from state election authorities. This includes name, address, age, party registration where recorded by the state, and election participation history (whether someone voted in a given election — never how they voted). We refresh this data periodically from the provider.
Payment information. Payments are processed by Stripe. Your card number is entered directly into Stripe’s secure fields and never touches our servers. We retain the payment record (amount, date, last four digits, billing name and address) that Stripe returns.
Communications data. When campaigns send email or text messages through the platform, we process recipient lists, message content, and delivery/engagement metadata through our email and SMS providers. SMS opt-outs (STOP replies) are honored and recorded.
Usage data and cookies. We collect log data, device information, and product-usage analytics to operate and improve the service, and we use cookies for sign-in sessions and preferences. Our marketing forms use Google reCAPTCHA for spam protection. [Add cookie table / consent mechanism per counsel.]
Newsletter and contact forms. If you subscribe to our newsletter or submit our contact form, we collect the information you provide to respond and to send you updates. You can unsubscribe at any time.
2. How we use information
- Provide, operate, and secure the platform (account management, race matching, voter-file delivery, canvassing sync, communications sending)
- Process payments and maintain required financial records
- Respond to support requests and missing-race requests
- Send transactional notices (receipts, election-date reminders, security alerts) and, with consent, marketing updates
- Monitor for errors, abuse, and fraud; maintain audit logs of sensitive actions
- Improve the product through aggregate analytics
We do not sell personal information, and we do not share one campaign’s data with any other campaign or any political party or committee.
3. Voter data — special notes
Voter file data originates from public records maintained by state election authorities and is licensed to each campaign for campaign use only. Campaign-added annotations about voters (sentiment, notes, ratings) are visible only within that campaign. If you are a voter and have questions about data that appears in the platform, contact us at [privacy@campaignlogix.com]; note that corrections to voter-registration records themselves must be made with your state or county election authority.
4. How we share information
We share information only with service providers who process it on our behalf under contract:
| Provider | Purpose |
|---|---|
| Stripe | Payment processing |
| Supabase | Authentication, database, and file hosting |
| [Voter data provider] | Licensed voter file data |
| Resend | Email delivery |
| Twilio | SMS delivery and opt-out management |
| Mapbox | Geocoding and maps |
| Cloudflare Turnstile | Form spam protection |
| Google Analytics | Website analytics |
| Sentry | Error monitoring |
| PostHog | Product analytics |
| AWS Amplify | Application hosting |
We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (with notice).
5. Data retention
- Financial records (donations, expenses, payments): retained at least 7 years to meet campaign-finance and tax obligations.
- Audit logs: retained 3 years.
- Account deletion: deleting a campaign permanently deletes the campaign and its records; financial records are anonymized (amounts and types retained, personal identifiers removed) and kept as required by law.
- Canceled campaigns: data is exportable for 90 days after cancellation, then permanently deleted.
- Voter file data: refreshed on the provider’s cycle; superseded records are overwritten.
6. Security
We protect data with encryption in transit, per-campaign database isolation with row-level security, role-based access controls (volunteers cannot access donor or financial data), login throttling, optional two-factor authentication (required for our own administrative staff), and audit logging of sensitive access. No system is perfectly secure; report concerns to [security@campaignlogix.com].
7. Your rights and choices
Depending on your state, you may have rights to access, correct, delete, or export personal information, and to opt out of certain processing. To exercise a right, contact [privacy@campaignlogix.com]. We will verify your request and respond within the time required by applicable law. You can unsubscribe from marketing email via the link in any message and stop SMS by replying STOP. [Counsel: add state-specific disclosures — CA/VA/CO/CT/TX etc. — as applicable.]
8. Children
CampaignLogix is not directed to children and we do not knowingly collect personal information from anyone under 16. Candidate accounts require users to be at least 18.
9. Changes to this policy
We will post any changes here and update the effective date; material changes will be announced by email or in-product notice.
10. Contact
[Kairos Software AI — legal entity name]
[Mailing address]
[privacy@campaignlogix.com] · [phone]