Privacy Policy

1. Introduction

Elective Labs LLC, a Wyoming limited liability company ("Elective Labs," "we," "our," or "us"), operates the electivelabs.org platform ("Platform") to provide AI-powered campaign operations infrastructure for political candidates and campaigns ("you" or "Client"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, campaign name, position/title, jurisdiction, and billing information.
• Campaign Data: Donor lists, volunteer information, event details, communications content, compliance records, and other campaign-related data you input into the Platform.
• Integration Data: Credentials and data from third-party services you connect (Gmail, Google Sheets, CRM systems, social media platforms, etc.).
• Communications: Messages sent through our chatbot, support tickets, and other communications with our team.

2.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, pages visited, time spent on pages, and interaction patterns.
• Cookies: We use a minimal set of essential cookies (sign-in state, payment fraud prevention) and cookieless analytics — see Section 8 and our Cookie Policy.
• AI Interaction Logs: Records of interactions with our AI agents for quality improvement and compliance purposes.

2.3 Political Data

We may process political data including donor contribution records, voter contact information, volunteer engagement data, and other information related to political campaign activities. All political data is processed in accordance with applicable federal, state, and local campaign finance and data protection laws.

3. How We Use Your Information

We use collected information for the following purposes:

• Service Provision: To operate the Platform, provide AI-powered campaign operations, and fulfill our contractual obligations.
• Campaign Management: To execute automated workflows, manage donor relationships, coordinate volunteers, track compliance, and generate reports.
• AI Training: To improve our AI agents' performance and accuracy (your data is never shared with third parties for AI training).
• Communications: To send service updates, compliance reminders, billing notices, and respond to inquiries.
• Security: To detect fraud, prevent abuse, and maintain platform security.
• Legal Compliance: To comply with FEC, state campaign finance boards, and other applicable regulations.
• Analytics: To understand usage patterns and improve platform features.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information or campaign data to third parties for marketing purposes.

4.2 Service Providers

We share information with trusted service providers who assist in platform operations (cloud hosting, AI processing, email and SMS delivery, payments, and analytics). The single authoritative, always-current list of these providers — including what each one does and where it processes data — is published at electivelabs.org/legal/subprocessors.

All service providers are bound by confidentiality agreements and may only use your data to perform services on our behalf.

4.3 Legal Requirements

We may disclose information when required by law, including:

• Compliance with subpoenas, court orders, or legal processes
• Enforcement of our Terms of Service
• Protection of our rights, property, or safety
• Investigation of fraud or security issues
• Campaign finance reporting requirements (FEC and applicable state agencies)

4.4 Business Transfers

If Elective Labs is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit (TLS) and at rest via our cloud provider's server-side encryption (AES-256). Integration credentials receive additional application-layer encryption.
• Access Controls: Role-based access with multi-factor authentication required for all accounts.
• Audit Logs: Comprehensive logging of all data access and modifications.
• Regular Audits: Periodic security assessments and penetration testing.
• Data Isolation: Each campaign's data is logically separated and protected.
• Backup & Recovery: Automated daily backups with 30-day retention.

While we strive to protect your information, no method of transmission or storage is 100% secure. You acknowledge that you provide information at your own risk.

6. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Active Campaigns: Data retained for duration of contract plus 3 years (to meet campaign finance record retention requirements).
• Closed Accounts: Data archived for 3 years, then securely deleted unless required by law.
• Compliance Records: Campaign finance and compliance data retained for 7 years to meet FEC and state-level requirements.
• Audit Logs: System logs retained for 1 year for security purposes.

You may request early deletion of your data by contacting us at support@electivelabs.org, subject to our legal retention obligations.

7. Your Rights and Choices

You have the following rights regarding your information:

• Access: Request a copy of your personal information.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your data (subject to legal retention requirements).
• Export: Receive your data in a portable, machine-readable format.
• Opt-Out: Unsubscribe from marketing communications (service notifications will continue).
• Restrict Processing: Limit how we use your data in certain circumstances.

To exercise these rights, contact us at support@electivelabs.org. We will respond within 30 days.

8. Cookies and Tracking Technologies

Our use of cookies is minimal:

• Essential: Sign-in/session state, and fraud-prevention cookies set by our payment processor (Stripe) on payment pages.
• Analytics: We use Plausible, a cookieless analytics tool — no cookies, no persistent identifiers, no cross-site tracking.
• We do not use advertising cookies, social media pixels, or session-recording tools.

You can control cookies through your browser settings, but disabling essential cookies may limit platform functionality. Full details: Cookie Policy.

9. Third-Party Integrations

Our Platform integrates with third-party services (Gmail, Google Sheets, social media platforms, etc.). When you connect these services:

• We access only the data necessary to provide our services (e.g., read/send emails, read/write spreadsheet data).
• Your use of third-party services is governed by their respective privacy policies.
• You can revoke our access at any time through the third-party service's settings.
• We do not store third-party credentials; we use secure OAuth tokens with minimal scopes.

10. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we discover that we have collected information from a child, we will delete it immediately. If you believe we have collected information from a child, contact us at support@electivelabs.org.

11. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using our Platform, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending email notification to your registered email address
• Displaying a prominent notice on the Platform dashboard

Your continued use of the Platform after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

14. State-Specific Rights

14.1 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

14.2 State-Specific Campaign Finance Compliance

As a platform serving political campaigns nationwide, we comply with applicable state campaign finance and data protection laws. Campaign data is processed in accordance with the relevant state election board and campaign finance agency requirements for each client's jurisdiction.