Privacy Policy

1. Information We Collect

We collect information you provide through forms, email, calls, meetings, contracts, campaign workflows, and Sapphire products. This may include contact information, campaign or organization details, billing details, supporter, donor, volunteer, voter, and engagement information, uploaded files, notes, requests, consent and suppression data, device information, log data, analytics, and operational records.

2. How We Use Information

Sapphire uses information to respond to requests, provide services, operate and secure systems, administer accounts, maintain audit records, process billing, perform campaign work, support integrations, detect fraud or abuse, improve data quality, comply with law, enforce agreements, and improve Sapphire products and services.

3. Data Sources and Restrictions

Information may come from customers, campaigns, committees, public records, voter-file providers, commercial vendors, contribution reports, advertising platforms, payment systems, communications providers, Data Central, Nexus, CallForge, GOCanvass, Sentinel, SapphireConnect, and other integrations. Source restrictions, FEC contributor-data restrictions, voter-file rules, vendor terms, opt-outs, suppressions, customer agreements, and applicable privacy rights control where they impose stricter limits.

4. Commercial Use and Data Sale Boundary

Sapphire may use aggregated, de-identified, statistical, benchmark, modeled, scored, quality, and other derived outputs to develop, improve, market, license, commercialize, or sell Sapphire products and services when those outputs are not reasonably linkable to a specific person, household, client-confidential list, or non-public identifiable customer dataset.

Sapphire does not sell, rent, license, or disclose identifiable customer data, identifiable voter or donor records, FEC-derived individual contributor information, SMS/email opt-outs, or client-confidential non-public lists through this Privacy Policy except at customer direction, to restricted service providers, for legal/compliance/security/billing/dispute purposes, in a corporate transaction, or under a separate signed data broker, licensing, resale, or data-sale agreement.

5. Sharing

We may share information with service providers, hosting providers, communications vendors, payment processors, analytics and security vendors, campaign-authorized users, professional advisors, government or legal authorities when required, and successors in a business transaction. We require service providers to use information only for authorized purposes.

6. Retention and Security

We retain information as needed for services, legal obligations, audit records, dispute handling, product security, and legitimate business needs. We use administrative, technical, and organizational safeguards, but no system can guarantee absolute security.

7. Choices and Requests

You may contact us to request access, correction, deletion, suppression, restriction, or opt-out handling for information associated with you or your organization. Where privacy law grants rights to know, access, correct, delete, opt out of sale or sharing, limit sensitive information, or appeal a decision, Sapphire will handle the request according to the law and data source that apply.

8. Contact

Privacy requests can be sent to privacy@sapphirestrategies.org.