Privacy Policy

[DRAFT — Pending Legal Review]

Overview

Get Votes (“we”, “us”) provides SMS and email messaging services for political campaigns. This policy describes how we collect, use, and protect data.

Data We Collect

Campaign Data (from our customers)

Account information: name, email, campaign name
Voter contact lists: names, phone numbers, email addresses, state/district
Message content and delivery records
Billing and payment information (processed by Stripe)

Voter Data (from campaign interactions)

Inbound SMS replies and their content
Link click events (which links were clicked, when)
Language preference (auto-detected from inbound messages)
Opt-out status and consent records

How We Use Data

To deliver SMS and email messages on behalf of campaigns
To facilitate two-way conversations via Slack
To translate messages between languages
To enforce TCPA compliance (opt-out processing, quiet hours)
To maintain consent records as required by law

Data Isolation

Each campaign’s data is strictly isolated. There is no cross-campaign data access, no shared voter lists, and no data commingling between campaigns.

Data Ownership

Campaigns own their data. Get Votes is a data processor, not a data owner. Campaigns may request data export or deletion at any time.

Third-Party Services

We use the following third-party services to provide our platform:

Twilio/Bandwidth — SMS delivery
Slack — Conversation management
Amazon SES — Email delivery
Azure Translator — Message translation
Link shortener — Trackable link generation and click tracking
Stripe — Payment processing

Data Retention

Consent records: Retained for 4+ years (TCPA compliance requirement)
Message content: Retained for the campaign lifecycle plus a reasonable retention period
Account data: Retained until account deletion is requested

Security

Encryption at rest and in transit
Per-campaign data isolation
SOC 2 certification planned (not yet achieved)

Contact

For privacy questions: privacy@get.vot.es