Privacy Policy

This Privacy Policy explains how Mandate (“Mandate,” “we,” “us”) collects, uses, and protects information across two surfaces: our public marketing website at mandate.vote (the “Site”) and the Mandate campaign platform at app.mandate.vote(the “Platform”). Where a campaign, consultant, or government uses the Platform under a separate written agreement, that agreement and any data-processing terms control how we handle that organization's data; this policy describes our practices generally.

The Site (mandate.vote)

Information you give us

• Demo / early-access requests:your name, email, and optionally your phone, the office or role you're running for, your city or jurisdiction, election date, the tools you use today, and any message you send.
• Newsletter: the email address you submit to subscribe to The Mandate Brief.
• Contact: anything you include when you email us.

Information collected automatically

• Usage analytics: we use privacy-friendly, cookieless analytics (Vercel Analytics and Speed Insights) to understand aggregate traffic and performance. These do not use advertising cookies or build cross-site profiles of you.
• Server logs: standard technical data such as IP address, browser type, and pages requested, used to operate and secure the Site.

The Mandate platform (app.mandate.vote)

The Platform is the authenticated application that campaign teams, consultants, and governments use to run a campaign. Access is by invitation and account only.

Account & sign-in

When an account is created for you or you sign in, we collect the information needed to authenticate you and operate your account, your name, email address, the campaign(s) and role assigned to you, and authentication metadata such as session and sign-in timestamps. We use Supabase for authentication and data storage.

Sign in with Google. If you choose to sign in with Google, Google shares your basic profile with us, your name, email address, and profile picture, solely to create and secure your Mandate account and sign you in. We do not use this information for advertising, we do notsell it, and we request only the minimum sign-in scopes. Mandate's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect Mandate from your Google account at any time in your Google account settings.

Campaign data we process on your behalf

To run a campaign, the Platform stores and processes data that your team enters or imports, which can include voter records, contact and canvassing history, volunteer and staff details, and contribution and donor records. This data belongs to and is controlled by the campaign or organization that licenses the Platform; Mandate processes it on their behalfas a service provider, under that organization's written agreement. We treat all of it as sensitive. We do not sell it, do not use it for our own purposes, and do not share it across campaigns. Voter and donor data is handled only inside the Platform, never through this marketing Site.

How we use information

• To respond to demo requests and prepare a tailored walkthrough of your race.
• To send The Mandate Brief and the resources you ask for (you can unsubscribe anytime).
• To create, authenticate, secure, and operate Platform accounts.
• To provide, maintain, secure, and improve the Site and the Platform.
• To comply with law and enforce our Terms.

How we share information

We do not sell your information, and we do not share it across campaigns. We share it only with service providers who help us operate the Site and Platform and communicate with you, under confidentiality obligations, for example Supabase (authentication and database), Vercel (hosting and analytics), Google (only if you use Sign in with Google), and Resend (email, including Site demo and newsletter leads). We may disclose information if required by law or to protect our rights and our users.

Nonpartisan by design

Mandate is nonpartisan. We do not condition access on party affiliation, and we do not use the information you share to support or oppose any candidate or party other than to serve your own request and run your own campaign.

Your choices & rights

Every newsletter email includes an unsubscribe link, and you can opt out at any time. For Platform accounts, you can update your profile in the app, and you may disconnect Google sign-in from your Google account settings. You may reach us through our contact formto access, correct, or request deletion of information we hold about you. Where the data is campaign data we process on a campaign's behalf, we will direct your request to that campaign (the controller) and support them in honoring it. We honor applicable rights under Texas and U.S. law.

Cookies

The Site does not use advertising or cross-site tracking cookies, and our analytics are cookieless. The Platform uses strictly necessary cookies to keep you signed in and secure your session. If we add cookie-based analytics in the future, we will update this policy and provide any required consent controls.

Data security & retention

We treat the information we hold as sensitive and apply reasonable administrative and technical safeguards, including encrypted transport, access controls, and role-based permissions on the Platform. We retain Site information only as long as needed to respond to you and meet legal obligations; Platform and campaign data is retained for the life of the organization's agreement and then deleted or returned as that agreement provides.

Children

Mandate is intended for adults running for or supporting campaigns, and for government and professional users; it is not directed to children. We do not knowingly collect information from anyone under 13.

Changes to this policy

We may update this policy from time to time. We'll change the “Last updated” date above and, for material changes, take additional steps where required.

Contact

Questions? Reach us through our contact form. Mandate is based in Frisco, Texas. See also our Terms of Service.