Privacy Policy

1) Scope

This Privacy Policy applies to the internal campaign portal located at campaign.niladevanath.com (the “Portal”). The Portal is intended for authorized staff, volunteers, and contractors of the campaign for Dr. Nila Devanath (“we,” “us,” “our,” or the “Campaign”). It does not govern public-facing campaign sites (e.g., niladevanath.com); those properties have their own policies.

2) Data We Collect

• Account & Profile: name, email, phone (optional), role/permissions, team affiliation, authentication logs (sign-in time, IP, user agent), and profile settings.
• Operational Content: campaign files and records you upload or edit (e.g., voter lists, volunteer rosters, pledges/donations metadata, events, tasks, notes).
• Financial/Compliance (if you process donations or pledges): contribution intents, amounts, and legally required fields such as employer/occupation. Payment card data is handled by integrated processors and not stored on this Portal.
• Integrations: limited data from connected services you authorize (e.g., calendar events metadata, email headers), consistent with the permissions granted.
• Device & Usage: IP address, approximate location, browser and device info, referring/exit pages, clickstream, and feature usage for security, audit, and product improvement.
• Communications: messages sent via the Portal (support requests, internal comments, invites) and your responses to in-portal prompts.

3) How We Use Data

• To provide, secure, audit, and improve the Portal’s features and performance.
• To administer roles, access controls, invitations, and incident response.
• To facilitate campaign operations (field, events, compliance workflows, volunteer management).
• To meet legal and regulatory obligations, including FEC reporting where applicable (e.g., donor name, address, occupation, and employer for contributions over $200 in an election cycle).
• To communicate with you regarding account notices, security alerts, task updates, and operational announcements.
• To prevent fraud, abuse, and unauthorized access; to investigate and remediate security events.

4) Sharing & Disclosures

• No sale of personal data. We do not sell or rent personal information.
• Service Providers & Contractors: We share data with trusted vendors (e.g., hosting, email, calendar, analytics, payment processors) under confidentiality and data-protection obligations and only as needed to perform services.
• Compliance & Legal: We may disclose information to comply with law, regulations (including FEC), subpoenas, lawful requests, or to protect rights, safety, and the integrity of the Portal.
• Internal Access (Least Privilege): Access to personal and operational data is limited to authorized personnel who require it for their role.

5) Cookies & Tracking

The Portal uses strictly necessary cookies for authentication and session continuity. We may also use functional and performance analytics to improve reliability and usability. You can adjust browser settings to manage cookies; disabling essential cookies may prevent you from signing in or using core features.

6) Security

We implement administrative, technical, and physical safeguards designed to protect your information, including encrypted transport (HTTPS), role-based access controls, CSRF protections, audit logging, and least-privilege principles. No system is 100% secure, and we cannot guarantee absolute security. Promptly report suspected incidents to the contact below.

7) Data Retention

We retain information for as long as necessary to operate the Portal, support campaign needs, and comply with legal and FEC obligations. When data is no longer needed, we will delete or de-identify it in a reasonable timeframe, subject to retention requirements.

8) Your Choices & Rights

• Access & Correction: You may request access to or correction of your profile information. Certain records (e.g., audit logs, compliance data) may be restricted by law.
• Deletion: You may request deletion of your account. Some data may be retained as required for legal, security, or reporting purposes.
• Communications: Operational emails and security notices are necessary for Portal use. Marketing communications (if any) will include opt-out options.

9) Children’s Privacy

The Portal is for adults in authorized roles. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us so we can delete it.

10) Third-Party Links & Services

The Portal may link to or integrate with third-party services (e.g., calendar or email providers, fundraising platforms). Their practices are governed by their own policies. Review those policies before using the integrations.

11) Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here with an updated “Last Updated” date. Material changes may also be communicated through in-Portal notices or email.

12) Contact Us