Privacy Policy

1. Scope and U.S. Elections Only

This Privacy Policy explains how A&E Insights LLC collects, uses, and shares information through SONAR and related services, including PULSE where enabled. SONAR/PULSE is offered only for U.S. elections and only to U.S.-based campaigns, committees, political organizations, candidates, and authorized U.S.-based users. Non-U.S. customers are not permitted to use the service.

2. Information We Collect

• Account and profile information such as name, email address, phone number, authentication details, organization details, role, preferences, and support communications.
• Campaign and committee information such as committee names, jurisdictions, team members, settings, integrations, logos, billing status, and administrative records.
• Donor, contact, and contribution data such as names, contact information, employer and occupation fields, notes, relationship data, contribution and pledge information, import records, tags, and other customer-provided data.
• Communications data such as call, SMS, email, template, opt-out, consent, suppression-list, delivery, and engagement records.
• Billing and payment metadata such as Stripe customer IDs, invoice/payment status, payment method type, brand, last four digits, billing consent records, and related transaction metadata. Full card and bank account details are handled by Stripe.
• Device, usage, and log data such as IP address, browser and device information, feature usage, diagnostics, audit logs, security events, cookies, and similar technologies.

3. How We Use Information

• To operate, maintain, secure, troubleshoot, and improve SONAR/PULSE.
• To provide CRM, call-time, SMS, email, reporting, billing, integrations, and administrative features.
• To process invoices, payment authorizations, refunds or credits, support requests, and account notices.
• To detect abuse, investigate security events, preserve audit logs, and enforce our Terms.
• To support customer compliance workflows while final campaign, communications, and election-law compliance remains the customer's responsibility.
• To create aggregated or de-identified analytics, benchmarks, and product insights.

4. Customer Data and Data Roles

Customers retain ownership of donor, contact, campaign, committee, and communications data they provide. We process Customer Data to provide the service, follow customer instructions, operate integrations, secure the platform, support export or deletion where appropriate, and comply with law. For account, billing, security, legal, and product operations, A&E Insights LLC may act as an independent business or controller as permitted by applicable law.

5. SMS, Phone, and Outreach Data

We do not sell, rent, or share SMS opt-in data, phone numbers, consent records, or messaging recipient information with third parties for their own marketing. Service providers may process this information only to provide messaging, calling, compliance, delivery, security, support, or platform services for SONAR/PULSE and our customers.

6. How We Share Information

• With service providers that provide hosting, database, authentication, payment processing, calling/SMS, email, analytics, error monitoring, security, support, and professional services. Current core providers include Supabase (database, authentication, and storage), Vercel (hosting and web analytics), Stripe (payments), Twilio (voice and SMS), Resend (email), PostHog (product analytics), and Sentry (error monitoring and session diagnostics).
• With integrations a customer connects or directs us to use for that customer's account. Customer-directed integrations can include NGP VAN and ActBlue.
• When required by law, subpoena, court order, lawful request, or to protect rights, security, or safety.
• In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

7. Sale, Sharing, Cookies, and Analytics

We do not sell Customer Data for money or trade proprietary campaign data to third parties for their own marketing. We use cookies, logs, and analytics tools to understand product usage, improve reliability, and secure the service. Product analytics are used for internal operations and are not used for targeted advertising. Some state privacy laws define certain analytics disclosures as "sharing"; where those laws apply, you may contact us to exercise available opt-out rights.

8. U.S. Privacy Rights

Depending on your state of residence and our legal obligations, you may have rights to request access, correction, deletion, portability, opt-out of sale/sharing or targeted advertising, limit certain sensitive information uses, or appeal a denied request. Privacy requests may be sent to the contact below and may require identity and authorization verification.

9. Data Security

We use reasonable technical and organizational safeguards designed to protect information, including encryption in transit, access controls, audit logging, and provider security controls. No internet service can be guaranteed completely secure.

10. Data Retention

We retain information for as long as needed to provide the service, maintain account and billing records, comply with legal and campaign recordkeeping obligations, resolve disputes, enforce agreements, maintain backups, and protect security. When a supported media upload is replaced or removed, we delete the superseded object from active storage. Residual backup copies age out under provider backup schedules. Other deletion or export requests are subject to legal, operational, backup, and business retention requirements.

11. Children

The service is intended for campaign and organizational use by adults and authorized personnel. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted to this page and may require renewed acceptance or notice within the service.

13. Contact Us

Questions or privacy requests can be sent to contact@aeinsights.org.