Privacy Policy
Last updated: July 25, 2026
Electify.AI (“Electify”, “we”) provides software that political campaigns use to manage supporters, fundraising, volunteers, and communications. This policy explains what we collect, why, and who we share it with.
Two different relationships matter here, and they carry different rights:
- Campaign staff who hold an Electify account. We are the controller of that account data.
- Supporters, donors, volunteers, and voters whose information a campaign stores in Electify. For that data the campaign is the controller and we are its processor — we handle it on the campaign's instructions. Requests about it should go to the campaign; we will help them respond.
What we collect
Account data
Name, email address, and authentication credentials for people who sign in, plus the campaign details they enter (committee name, office sought, jurisdiction).
Data campaigns store in the platform
- Contacts — names, postal addresses, email addresses, phone numbers, and notes a campaign records about its supporters.
- Contributions and disbursements — amounts, dates, and the contributor details campaigns are legally required to report.
- Messaging activity — emails and text messages sent through the platform, delivery status, replies, and opt-in/opt-out state.
- Public records — voter registration files and campaign finance disclosure data obtained from state and federal agencies, used for analysis and targeting.
Automatically collected
Standard server logs and a session cookie required to keep you signed in. We do not use advertising or cross-site tracking cookies.
Public disclosure data
Campaign finance records published by the FEC and state agencies are used for research and analysis only — never to build contact lists for solicitation. Federal regulation (11 CFR 104.15) and comparable state rules prohibit using contributor information from disclosure reports to solicit contributions, and the platform is built to keep that separation. Contact details used for outreach come from the campaign's own records or separately licensed sources.
Text messaging
Campaigns send text messages through Electify to people who have given them consent. We do not sell phone numbers, and mobile opt-in data is never shared with third parties for marketing.
- Reply STOP to any message to opt out. The opt-out is applied to every record sharing that phone number, not just the one that was messaged — a household number on two records would otherwise keep receiving messages.
- Reply START to opt back in, which clears a previous opt-out.
- Reply HELP for help.
- Message and data rates may apply. Message frequency varies.
Who we share it with
We do not sell personal information. We use these subprocessors to run the service:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage |
| Vercel | Application hosting and custom domains |
| Stripe | Payment processing for contributions and billing |
| Twilio | Text messaging and voice calling |
| Resend | Transactional and campaign email delivery |
| Anthropic | AI features (drafting, brand design, strategy) |
| Apollo | Optional contact phone-number enrichment |
| United States Postal Service | Address standardization |
| Optional calendar and contacts integration |
We also disclose information where required by law, and campaigns themselves file contributor information with election authorities as their jurisdiction requires.
AI features
Some features send campaign content to Anthropic's API to draft copy, design brand assets, or answer strategy questions. That content is not used to train models.
Security
Data is encrypted in transit and at rest. Each campaign's data is isolated at the database level with row-level security, so one campaign's account cannot read another's. Third-party integration tokens are stored encrypted and are never readable by user-facing clients.
Retention
We keep campaign data for as long as the account is active. Contribution records are retained as long as the campaign's recordkeeping obligations require, which typically outlast the campaign itself. On request we will delete or export a campaign's data subject to those obligations.
Your choices
If you are a campaign customer, contact us to access, correct, export, or delete your account data. If a campaign contacted you and you want your information corrected or removed, contact that campaign directly — they control it. You can stop text messages at any time by replying STOP, and stop emails using the unsubscribe link in any message.
State privacy rights
Residents of California, Colorado, Connecticut, Virginia, Texas, and the other states with comprehensive privacy laws have rights to know what we hold about them, to correct or delete it, to get a portable copy, and to appeal a refusal. Exercise any of them through the privacy request form. We will not treat you differently for asking.
We do not sell personal information and we do not share it for cross-context behavioral advertising — so there is no “Do Not Sell or Share” option to offer, because there is nothing to opt out of. We do not use personal information for automated decisions with legal effects, and we run no advertising or cross-site tracking cookies.
One boundary matters more here than in most products: for the supporter, donor, and voter records a campaign stores in Electify, the campaignis the controller and we are its processor. If a campaign contacted you, send your request to that campaign — they decide, and we help them carry it out. Tell us anyway if you can't reach them and we will route it.
Electify is operated from the United States and intended for U.S. campaigns; data is processed here.
Children
Electify is not directed to children under 13 and we do not knowingly collect their information.
Changes
We will update the date at the top when this policy changes and notify account holders of material changes.
Contact
Questions about this policy, or a request to access, correct, or delete your data: send us a privacy request. Submissions go straight to our team; we do not publish an inbox address, which keeps the form the one place a request can't get lost.