Privacy Policy

This Privacy Policy applies to all users of the Service, including campaign teams, political organizations, and individual users. The Service is not intended for use where stricter legal regimes require specialized compliance unless explicitly agreed in writing.

We may collect the following categories of information: 2.1 Account Information • Name, email address, and organization name • Login credentials and authentication data • Role or access permissions within an organization 2.2 Campaign Data (User-Provided Content) You may upload, submit, or store data such as: • Voter or supporter lists • Donor information (where applicable) • Campaign communications (email, SMS, web content) • Analytics and engagement data • Internal campaign strategy or notes You acknowledge that this data is provided voluntarily by you and is under your control. 2.3 Usage Data • Log data (IP address, browser type, access times) • Feature usage and interaction data • System performance and error logs

We use information to: • Provide, maintain, and improve the Service • Enable core platform functionality • Diagnose technical issues and improve reliability • Develop and test new features • Ensure security and prevent abuse • Communicate with users regarding updates or service issues We do not sell personal data.

You expressly acknowledge that: • Campaign data may include sensitive political, voter, or supporter-related information • The Service is not certified for electoral compliance or regulated data handling • You are solely responsible for ensuring lawful collection, use, and disclosure of campaign data • We do not verify the legality, accuracy, or appropriateness of uploaded data You assume full responsibility for compliance with applicable election, privacy, and communications laws.

We implement reasonable administrative and technical safeguards; however: • We do not guarantee absolute security • Data may be subject to loss, corruption, or unauthorized access • The Service is in beta, and data durability is not guaranteed • You are strongly advised to maintain independent backups

We may disclose information: • To service providers assisting in platform operation (hosting, analytics, infrastructure) • If required by law, regulation, subpoena, or governmental request • To protect the rights, safety, or security of the Company or users • In connection with a merger, acquisition, or asset sale We do not knowingly disclose campaign data except as required to operate the Service or comply with legal obligations.

We may retain data: • For as long as your account is active • As necessary to provide the Service • As required for legal, security, or operational purposes We may delete or modify data at any time without notice, particularly during the beta period.

Your data may be stored or processed outside your jurisdiction, including in the United States or other countries where our infrastructure providers operate. By using the Service, you consent to such cross-border transfers.

You are responsible for: • Ensuring you have lawful authority to upload or process any data • Obtaining necessary consents from individuals whose data you submit • Maintaining security of your credentials and accounts • Complying with all applicable laws and regulations

To the maximum extent permitted by law, we disclaim liability for: • Unauthorized access to data • Data loss or corruption • Privacy breaches caused by user misuse or third-party actions • Regulatory violations arising from user data practices

This section constitutes CampaignHQ's Data Processing Addendum and applies to the extent that CampaignHQ processes personal data on behalf of a user. 11.1 Roles of the Parties • The User is the Data Controller (or equivalent under applicable law) • CampaignHQ acts as a Data Processor only to the extent it processes personal data on behalf of the User • The User determines the purposes and means of processing campaign-related data 11.2 Nature of Processing CampaignHQ may process personal data to provide platform functionality, store and organize campaign-related data, facilitate communications and analytics features, improve system performance, and support debugging and maintenance. Processing is limited to what is necessary to operate the Service. 11.3 Types of Data Processing may include contact information (names, emails, phone numbers, addresses), political affiliation or campaign engagement data (as provided by the user), donor or supporter metadata, communication content, and usage and behavioral analytics. The Service is not designed for highly regulated data categories unless explicitly agreed in writing. 11.4 User Instructions CampaignHQ will process personal data only in accordance with this Agreement, as required to provide the Service, or as otherwise instructed by the User through platform functionality. If instructions conflict with applicable law, CampaignHQ may suspend processing. 11.5 Subprocessors User acknowledges that CampaignHQ may engage subprocessors for cloud hosting and storage, data analytics, monitoring and logging, and infrastructure and security services. Subprocessors may process data in jurisdictions outside Canada. 11.6 Security Measures CampaignHQ will implement commercially reasonable security measures, which may include encryption in transit, access controls, authentication systems, and monitoring and logging tools. However, no system is fully secure, and beta status increases inherent risk. 11.7 Data Breach Notification In the event of a confirmed security breach affecting personal data, CampaignHQ will take reasonable steps to investigate and mitigate the issue and notify the User where legally required and feasible. No guarantee is made regarding the timing or completeness of such notifications. 11.8 Data Subject Requests To the extent technically feasible, CampaignHQ will assist Users in responding to data subject requests (access, deletion, correction). The User remains solely responsible for handling such requests. CampaignHQ may not be able to fulfill requests in beta environments where data is incomplete or unstable. 11.9 Data Retention and Deletion Upon termination of the Service, data may be deleted, retained, or archived at CampaignHQ's discretion. No guarantee is made of data portability or recovery. Backup copies may persist temporarily in infrastructure systems. 11.10 Limitation of Liability (DPA) To the maximum extent permitted by law, CampaignHQ shall have no liability for any data protection breaches, compliance failures, or regulatory penalties arising from User instructions or data. The User assumes full responsibility for lawful processing and compliance obligations.

We may update this Privacy Policy at any time without prior notice. Continued use of the Service following any changes constitutes your acceptance of the updated policy. We recommend reviewing this page periodically.

For questions or concerns regarding this Privacy Policy or our data practices, please contact us at: CampaignHQ Email: info@campaignhq.ca Website: campaignhq.ca