This Privacy Policy explains how WhistleStop.ai Inc. (“WhistleStop,” “we,” or “us”) collects, uses, shares, and protects information in connection with WhistleStop HQ (the “Service”), an AI-assisted campaign-management platform for political candidates, campaigns, and committees.
Information we collect
We collect the following categories of information:
- Account information. When you create an account we collect your name, email address, and authentication identifiers. Sign-in is handled by our authentication provider, WorkOS.
- Campaign information you provide. Details about your race, the office sought, district, and the strategy, messaging, and content you create or upload within the Service.
- Data you process through the Service. Depending on the features you use, you may provide voter, donor, or supporter information. We process that data on your behalf and on your instructions, as described under “Data processed on your behalf.”
- Usage and technical data. Log data, IP address, device and browser information, and records of actions taken in the Service, used for security, debugging, and improvement.
How we use information
We use information to:
- provide, operate, and secure the Service and its AI agents;
- authenticate users and protect against fraud and abuse;
- provide support and communicate with you about the Service;
- process billing for paid plans;
- comply with legal obligations and enforce our Terms.
AI processing
The Service uses artificial intelligence to generate drafts, analysis, and research. Content you provide may be processed by AI models, including models provided by Anthropic, to deliver these features. See our AI Disclosure for more detail.
Data processed on your behalf
Where you provide voter, donor, or supporter information, you are the controller of that information and WhistleStop acts as a processor or service provider. We process that information only to provide the Service and on your documented instructions. You are responsible for having the legal right to provide that information to us and for complying with applicable privacy and election laws.
Service providers
We share information with vendors that help us operate the Service, including Amazon Web Services (hosting and infrastructure), WorkOS (authentication), and Anthropic (AI processing). These providers are permitted to use information only to provide services to us.
How we share information
We do not sell personal information. We share information only with the service providers described above, when required by law or legal process, to protect the rights and safety of WhistleStop and others, or in connection with a merger, acquisition, or sale of assets.
Security
We protect information using encryption in transit and at rest, database-level tenant isolation between campaigns, access controls, and audit logging. No method of transmission or storage is completely secure, but we work to protect information consistent with its sensitivity.
Data retention
We retain information for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements.
Your choices and rights
You may access, correct, or request deletion of your account information by contacting us. Depending on your jurisdiction, you may have additional rights regarding your personal information.
Children
The Service is intended for adults operating political campaigns and is not directed to children.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the date above.
Contact
Questions about this Privacy Policy may be sent to info@whistlestop.ai.