Privacy policy.

1. What this covers

This policy explains what Groundgame, operated by Homefield Groundgame LLC, collects on its site and app, how we use and share it, how long we keep it, and your choices. Words defined in our terms of service, such as "Affiliates", mean the same here.

2. What we collect

• Account information: your name, email address, campaign or organization, and role.
• Campaign data you bring in: voter files, contact and donor lists, notes, budgets, calendars, documents and anything else you add.
• Usage information: sign-ins, the features you use, and technical details such as browser type and IP address.
• Support messages: what you send us when you ask for help.
• Billing: our payment processor handles payments, and we never store full card numbers.

3. Cookies and analytics

The site at https://candidate.gg counts page views with Cloudflare Web Analytics, which sets no cookies, stores nothing in your browser and collects no personal identifiers, so the site has no consent banner. The site sets no cookies of its own.

The app at https://app.candidate.gg sets three first-party cookies. Page scripts cannot read them, and none is used for advertising or tracking. homefield_session keeps you signed in for 12 hours or until you sign out; homefield_ws remembers which campaign you opened, for as long as you are signed in; homefield_demo_view is set only when you open the demo and lasts 4 hours. The app also saves a few screen settings in your browser, which are never sent to us.

4. How we use and share information

We use information to provide, support and secure the service, to run the compliance features you set up, to keep records of activity in your account, and to meet our legal obligations.

Homefield Groundgame LLC, a Florida limited liability company, is wholly owned by Homefield LLC, a Florida limited liability company, the holding company that owns the software, the Groundgame name and the domains and licenses them to Homefield Groundgame LLC. Homefield Groundgame LLC trades as Groundgame, a registered fictitious name.

We share and reuse the data you contribute. Under the licence in section 7 of the terms, we and our Affiliates may use, combine and analyse the data you contribute and everything derived from it, including to train and improve our services and models, to build and sell current and future products, and to help other customers' campaigns, including campaigns running against you. We may license or sell that data and data derived from it. This applies to every customer, and there is no opt-out.

Two limits apply and we do not waive them. No Affiliate receives more rights than Homefield Groundgame LLC holds. Voter registration data keeps the permitted-use rules set by the state or county that issued it, wherever it is held, and those rules bind us as well as you.

No other customer, and no Affiliate, can sign in to your account or browse your records through the service. We do not run third-party advertising in the service.

5. Voter files

We protect the people in voter files on every account. Exact dates of birth never leave our servers. Records exempt from public disclosure are left out of every contact list, export and other contact-shaped output, and every such output applies the suppression list for its channel. Getting your file lawfully and staying within its permitted use is your responsibility.

6. Service providers

These companies help us run the service, and each processes data in the United States:

• Cloudflare, Inc.: site hosting, DNS and the cookie-free analytics in section 3.
• Fly.io: app hosting.
• Supabase, Inc.: the database for accounts and campaigns.
• Google LLC (Google Workspace): our business email, including contact@candidate.gg.
• Resend: email the app sends, such as sign-in links and notifications.
• Stripe, Inc.: payments. You enter card details on Stripe's own page, and they never reach our servers.

We have no text-message provider yet. Each provider is bound by contract to protect your data and to use it only on our instructions. We add any new provider to this list before it handles customer data.

7. Retention and deletion

We keep the data you contribute, and everything derived from it, indefinitely. It does not expire and is not deleted on a schedule. You can export everything in your account while it is open, including after you cancel a paid plan, and on request for a reasonable period after it closes. Deleting your account ends your access and removes your account from the service, but it does not withdraw the licence in section 7 of the terms, and we do not delete contributed data or unwind models, scores or other work already derived from it. Backup copies of a deleted account are deleted within a reasonable period after the account is deleted. We keep billing records for as long as the law requires.

We keep your permitted-use certification (who certified, when, and the exact statement shown) as evidence of it, and you can see it in your account. We log every export (who made it, when, how many rows, which filters and which format), and exports containing voter data we supply carry markers that identify your account. We keep export logs for the life of your account plus 3 years, to investigate misuse and meet compliance obligations.

If a law that applies to you gives you a deletion right that a contract cannot waive, that law wins. Tell us which law, and we will carry out the deletion it requires and tell you plainly what we removed and what we could not.

8. Security

Data is encrypted in transit and at rest. Each account is isolated, so no other customer can reach it. Access is based on roles and is logged, imports and outreach sends are recorded, and we develop and test with made-up data, never customer voter files. If a breach affects your data, we will notify you as the law requires.

8A. Published public discourse

Some features analyse published news, government records and legislative records. People appear in that material, so:

• We analyse only public figures, organizations and news outlets, in what they said or did on the record, and leave out anyone we cannot identify as one.
• We produce no score or verdict about a person's credibility, truthfulness or authenticity. A figure produced with help from a model says so and states its method and measured accuracy.
• For news we keep a headline, the publisher's own summary, a link and a date, not the article itself. When we name a person, we name them as the author or subject of a public document we link to.
• If something we hold about a public figure is wrong, write to contact@candidate.gg. We record corrections and show them alongside the material.

9. Your choices and rights

You can see, export and correct your campaign's data in the service, and we will help at contact@candidate.gg. You can opt out of non-essential email from us with one click. You cannot opt out of the data licence in the terms or the retention in section 7.

Depending on where you are, you may have privacy rights that a contract cannot waive. Where one applies to you, it wins over this policy. Florida's Digital Bill of Rights does not apply to us today, because it covers only companies with over $1 billion in annual revenue. Before we offer the service outside Florida, we will check which privacy laws apply there and update this policy.

10. Age

The service is for people 18 and older and is not directed to children.

11. Changes and contact

If this policy changes materially, we will give notice before the change takes effect. The current version is always on this page. Write to us about privacy at contact@candidate.gg or 307 Bay Arbor Blvd, Oldsmar, FL 34677.