How we handle your data.

Culper ("we", "us") operates the campaign operations platform at theculpernetwork.com. This document explains what we collect, why, and what your rights are as a user or voter.

What we collect

We collect three categories of data:

• Account data — the email address you use to sign up, your name, the campaign you're associated with, your role, and the standard authentication metadata required to maintain a session (IP address, user-agent, timestamps).
• Campaign-uploaded voter data — voter files imported by campaign users from vendors such as L2 or i360, plus any annotations created by your team (walker notes, survey and poll responses, receptiveness scores, outreach history). This data is owned by the campaign that uploads it. We process it on the campaign's behalf.
• Platform-held voter data — public records and licensed data that Culper obtains and maintains itself, rather than receiving from a campaign. This includes county master voter rolls, county appraisal district address and parcel records, and commercially licensed voter files. Where a campaign is given access to this data, the campaign is using data we hold. For this category we act as a controller, not merely as a processor, and requests about it can be made to us directly (see "Your rights").

How we use it

We use your data to operate the product: authenticate you, show you your campaign's voter records, send the SMS and email messages you schedule, coordinate volunteers, and generate reports. We do not sell your data. We do not use voter data for any purpose other than the service the campaign is running.

Mobile app data collection

Culper's native iOS and Android apps collect a small amount of additional data only with your explicit OS-level permission. We don't collect any of this in the background.

• Location — used during an active block walk to show the right house, log a heartbeat that lets the campaign manager verify the walk happened, and stamp survey submissions with where they were captured. Tracking starts when you tap "Start walk" and stops the moment you tap "End walk." We do not collect location at any other time and we do not request background-location permission.
• Camera and photo library — used by the photo-op feature so candidates and campaign managers can take a picture with a supporter and send it to them via SMS, recording the contact info against a voter record. Photos are stored in a private Supabase Storage bucket scoped to the campaign that captured them.
• Push notification token — registered with Apple's and Google's push services so your campaign can notify you about volunteer opportunities and walk assignments. We store an Expo push token plus a stable device identifier (generated locally and stored in your device's secure storage) so that sending a push to your account fans out to the right device(s).
• Calendar — used only when you choose to add a campaign event to your own calendar. We write the event you asked for; we do not read, upload, or store your calendar contents.

You can revoke any of these permissions at any time from your OS settings. The mobile app does not collect contacts, microphone audio, Bluetooth, or any device sensors beyond what's described above.

Cross-campaign isolation

Voter data uploaded by one campaign is not readable by any other campaign. Isolation is enforced at the database level using Postgres Row-Level Security, and at the application level in every server action. Internal staff access is audit-logged.

Subprocessors

We rely on the following vendors to operate the service. Each has their own privacy posture; we recommend reviewing theirs if you handle sensitive data:

• Supabase — hosted Postgres + authentication + object storage.
• Vercel — web application hosting.
• Stripe (Connect) — payment processing for campaigns that accept donations through Culper.
• Twilio — SMS delivery for political outreach.
• Resend — email delivery for political outreach.
• Anthropic — natural-language voter query translation, and assisted column mapping when a campaign imports a voter file. For queries, the prompt is sent and voter rows are not. For import column mapping, column headers and a small number of sample values are sent so the mapper can recognise what a column holds; those samples are redacted first — phone numbers, email addresses, dates of birth, names and other free text are replaced with shape-preserving placeholders, while short categorical codes (such as a party or status code) are sent as-is. Full voter rows are never sent.
• Mapbox — map rendering for walk territories and pins. Voter coordinates are sent to render a map.
• United States Census Bureau Geocoder — converting addresses to coordinates. Addresses are sent to this U.S. government service.
• Expo, Apple and Google — delivery of push notifications to the mobile app.
• Inngest — scheduling and running background jobs.
• Slack — internal notification of enquiries submitted through our public forms.

Consent and outreach

For SMS outreach, campaigns must document prior express written consent before sending. We log consent at the source. For both SMS and email, we maintain a campaign-agnostic suppression list: once a contact opts out on any channel, no campaign can reach them on that channel through Culper — ever.

We do not sell, rent, or share mobile phone numbers or SMS opt-in/consent data with third parties or affiliates for their own marketing purposes. Mobile numbers are disclosed only to the messaging providers listed under Subprocessors, and only for the purpose of delivering the messages a campaign has asked us to send on its behalf.

Where a campaign sends SMS through Culper: message frequency varies by campaign; message and data rates may apply; reply STOP to any message to opt out, and HELP for help. Opting out is honoured immediately and applies across every campaign on the platform.

Some campaigns run surveys and polls over SMS. Where you answer one, your responses are stored against the voter record the campaign holds for you, and are used for that campaign's research. Answering is voluntary and you may stop at any point; answers you have already given are retained.

Your rights

If you are a user of the platform, you can request access to, correction of, or deletion of your personal data by contacting privacy@theculpernetwork.com.

If you are a voter whose information appears in data a campaign uploaded, requests should be directed to that campaign; for that data Culper acts as a processor on the campaign's behalf, and we will assist the campaign in fulfilling verified requests. If your information appears in platform-held data (county rolls, appraisal district records, or licensed voter files that we maintain), you may contact us directly at the address above and we will handle the request ourselves. Public records that a government body is required to maintain may not be removable from the underlying public source.

Retention

We retain account data for the duration of your account, and for a limited period afterwards to satisfy legal retention requirements. Campaign-uploaded voter data is retained according to the terms the campaign chooses; campaigns can delete their data at any time.

Cookies, analytics, and advertising

Inside the Culper application (the campaign dashboard, the volunteer app, and voter-facing survey pages) we use only cookies that are strictly necessary to run the service — principally to keep you signed in and to protect against cross-site request forgery. We do not run analytics or advertising tags inside the application.

On our public marketing website (the home page and the guides, feature, comparison, and campaign pages) we use:

• A first-party visitor ID — a random identifier stored in a cookie for up to one year so we can recognize the same browser on a return visit. It is not tied to your name unless you later create an account or contact us.
• Analytics (PostHog) — which pages are viewed, how long each page stays open, how far it is scrolled, the referring site, and device, browser, and operating system. We do not record sessions (keystrokes or screen playback).
• Advertising tags (Meta Pixel, Google Ads) — which sections of the site a browser visited, so we can show ads for Culper to people who have visited the site and measure whether those ads work. These providers may treat that data as a "sale" or "share" under some state privacy laws.

You can turn all of this off for your browser with the control below or the "Your privacy choices" link in the footer of every page. We also honor the Global Privacy Control browser signal as an opt-out. Opting out does not affect anything strictly necessary to run the service.

International transfers

Our infrastructure is hosted in the United States. If you access Culper from outside the U.S., you acknowledge that your data will be transferred to the U.S.

Changes

We'll update the "Last updated" date above whenever this document changes materially. For substantive changes, we'll notify active customers by email.

Contact

Questions about privacy: privacy@theculpernetwork.com