1. Introduction
Rally to Win ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, website, and services (collectively, the "Services").
Rally to Win is a Florida limited liability company. This policy applies to all users of our political and civic engagement platform.
2. Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide, including:
- Account Information: Name, email address, phone number, password, and user role (organizer or community member)
- Profile Information: Location data (state, county, ZIP code), organization name and description (for organizers)
- Event Information: Event details, descriptions, locations, dates, images, and RSVP data
- Communications: Messages, emails, and other communications sent through our platform
- Payment Information: Billing details processed securely through Stripe (we do not store complete payment card information)
- Contact Lists: Contact information you upload for event management and communications
2.2 Information Automatically Collected
We automatically collect certain information, including:
- Technical Information: IP address, browser type, device information, operating system
- Usage Information: Pages visited, time spent on pages, click patterns, feature usage
- Log Information: Server logs, error reports, and security events
- Cookies and Tracking: Session cookies, authentication tokens, and preference settings
2.3 Information from Third Parties
We may receive information from third-party services we integrate with, including Stripe for payment processing, Mailgun for email delivery, and Supabase for data storage and authentication.
3. How We Use Your Information
We use your information for the following purposes:
3.1 Service Provision
- Creating and managing your account
- Facilitating event creation, management, and attendance
- Processing RSVPs and managing attendee lists
- Sending event notifications, reminders, and confirmations
- Enabling communication between organizers and attendees
- Processing payments and managing subscriptions
3.2 Platform Improvement
- Analyzing usage patterns to improve our Services
- Developing new features and functionality
- Conducting research and analytics
- Troubleshooting technical issues
3.3 Security and Compliance
- Detecting and preventing fraud, abuse, and security threats
- Enforcing our Terms of Service
- Complying with legal obligations
- Protecting our rights and the rights of others
3.4 Communication
- Sending service-related communications
- Responding to support requests
- Providing platform updates and announcements
- Marketing communications (with your consent)
4. Information Sharing and Disclosure
We may share your information in the following circumstances:
4.1 With Your Consent
We share information when you explicitly consent, such as when you RSVP to events (your name and contact information may be shared with event organizers).
4.2 Service Providers
We share information with trusted service providers who help us operate our Services:
- Supabase: Database hosting, authentication, and file storage
- Stripe: Payment processing and subscription management
- Mailgun: Email delivery services
- Hosting providers: Website and application hosting
4.3 Legal Requirements
We may disclose information when required by law, court order, legal process, or to protect our rights, property, or safety, or that of others.
4.4 Business Transfers
In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the successor entity.
5. Data Storage and Security
5.1 Data Storage
Your information is stored on secure servers provided by Supabase and other service providers. Data may be stored in the United States and other countries where our service providers operate.
5.2 Security Measures
We implement industry-standard security measures including:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security audits and monitoring
- Input validation and sanitization
- Rate limiting and abuse prevention
5.3 Data Retention
We retain your information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time.
6. Your Rights and Choices
6.1 Account Management
- Access and update your account information
- Modify your notification preferences
- Delete your account and associated data
- Export your data in a portable format
6.2 Communication Preferences
- Opt out of marketing communications
- Manage event notification settings
- Unsubscribe from email lists
6.3 Data Subject Rights (Where Applicable)
Depending on your location, you may have additional rights including:
- Right to access your personal information
- Right to rectify inaccurate information
- Right to erase your personal information
- Right to restrict processing
- Right to data portability
- Right to object to processing
7. Email Communications and Marketing
7.1 Types of Email Communications
We send various types of email communications through our platform:
- Transactional Emails: Account confirmations, password resets, event notifications, and service-related communications
- Event Communications: RSVP confirmations, event reminders, updates, and organizer messages to attendees
- Platform Updates: Important service announcements and policy changes
- Marketing Communications: Platform features, tips, and promotional content (with your consent)
7.2 Email Service Providers
We use Mailgun and other third-party email service providers to deliver our communications. These providers process your email address and message content solely for the purpose of delivering emails on our behalf and are bound by strict data processing agreements.
7.3 Consent and Opt-Out
By using our Services, you consent to receiving necessary service communications. For marketing emails:
- We only send marketing emails with your explicit consent
- You can unsubscribe from marketing emails at any time using the unsubscribe link in each email
- You can manage your email preferences in your account settings
- Unsubscribing from marketing emails will not affect essential service communications
7.4 Email Content and Monitoring
We may monitor email delivery rates, open rates, and click-through rates to improve our services and ensure compliance with anti-spam regulations. We do not read the content of private messages between users unless required for security, legal compliance, or technical support purposes.
7.5 Anti-Spam Compliance
We are committed to complying with all applicable anti-spam laws, including the CAN-SPAM Act, GDPR, and CCPA. Our email practices include:
- Clear and accurate sender identification in all emails
- Truthful and non-misleading subject lines
- Clear indication when emails contain advertising or promotional content
- Easy-to-find unsubscribe mechanisms in every marketing email
- Prompt processing of unsubscribe requests (within 10 business days)
- Physical business address included in all commercial emails
- This privacy policy link included in all email communications as required
8. Cookies and Tracking
We use cookies and similar technologies to enhance your experience, maintain security, and analyze usage. You can control cookie settings through your browser preferences.
Types of Cookies We Use:
- Essential Cookies: Required for basic functionality and security
- Functional Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand how you use our Services
- Authentication Cookies: Keep you logged in to your account
9. Third-Party Links and Services
Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
10. Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information during such transfers.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of our Services after such changes constitutes acceptance of the updated policy.
13. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
14. State-Specific Privacy Rights
California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected and how it is used
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
Other State Rights
Residents of other states may have additional privacy rights under applicable state laws. Please contact us for information about your specific rights.