Privacy Policy

As a Data Processor

When campaigns submit data to our platform, including voter records, donor records, and field activity, we process that data on the campaign's behalf according to their instructions. In this capacity, the campaign is the data controller and grndwrk is the processor. Campaigns are responsible for ensuring their data collection and use complies with applicable law.

As a Data Controller

For data we collect about our own users, including campaign staff accounts, website visitors, and billing information, grndwrk is the data controller and is responsible for those processing decisions.

For voter data specifically

Voter registration data originates from public records. Campaigns are the legal requestors of that data. grndwrk processes it on the campaign's behalf as their authorized agent. grndwrk does not independently acquire voter data for commercial sale.

4.1 Campaign User Account Data

4.2 Voter Registration Data (Public Records)

See Section 5 for special rules governing this data.

4.3 Field Activity Data

When campaign volunteers log field activity, we record:

• Contact disposition (reached, not home, declined, etc.)
• Volunteer-entered notes about voter interactions
• Timestamps, location data (if enabled), and volunteer identifiers
• Survey responses collected during outreach

4.4 Donor Data

Donation records entered by campaigns may include:

• Donor name, address, employer, occupation (required for FEC compliance)
• Donation amount, date, and election designation
• In-district status
• Payment method type (full payment card details are processed by our payment processor and never stored by grndwrk)

4.5 Website and Platform Usage Data

• IP address and approximate location
• Browser type, operating system, device type
• Pages visited, features used, time spent
• Referral source
• Error logs and crash reports

We use this data to improve our platform and troubleshoot issues. We do not sell this data or use it for targeted advertising.

5.1 Public Record Basis

Voter registration data processed through grndwrk originates from public government records. In New Jersey, voter registration information is available under the Open Public Records Act (NJSA 47:1A-1 et seq.). Similar laws exist in other states. This data is not grndwrk's proprietary product - it is public information that campaigns are legally entitled to access themselves.

How campaigns can access voter data directly: Political campaigns can request voter registration records from their county clerk or state election authority. grndwrk provides guidance on this process at grndwrk.com/resources/voter-data-requests. grndwrk may submit these requests on behalf of campaigns as their authorized agent. In all cases, the campaign remains the legal requestor of record.

On cancellation: If a campaign account is cancelled, grndwrk will provide documentation of all data requests submitted on the campaign's behalf within 30 days of written request, enabling the campaign to follow up with the relevant government authority directly.

5.2 What Voter Data We Process

Voter data processed through our platform may include fields from public voter registration records, including name, address, date of birth, gender (where available), party affiliation, registration status and date, district and precinct information, election participation history, and vote-by-mail status. We do not process how any voter voted in any election.

5.3 Permitted Uses

Voter data in our platform may be used only for lawful political purposes: voter outreach, candidate campaigns, party committee activities, voter registration assistance, and issue advocacy. Use for commercial solicitation, employment decisions, credit decisions, housing decisions, or any purpose unrelated to lawful political activity is prohibited and may constitute a criminal violation of NJ NJSA 19:31-31 or equivalent state statutes.

5.4 OPRA Permissions

grndwrk maintains a record of the public data requests submitted on behalf of each campaign. Campaigns can view their data access status in their account settings. If a campaign's request is denied or not yet approved, access to relevant voter records is restricted until approval is received.

6.1 What We Use

6.2 Managing Cookies

You can manage cookies through your browser settings. Disabling essential cookies will prevent you from using the platform. To opt out of analytics tracking, visit grndwrk.com/privacy/cookie-preferences.

We do not use tracking pixels, fingerprinting, or cross-site tracking for advertising purposes.

What scores we calculate

• Likelihood to Vote Score (0-100): Based on public election participation history
• Supporter Score (0-100): Campaign-specific score based on likelihood to vote, party alignment, and contact recency

How these scores are used

These scores are tools provided to political campaigns to help prioritize voter outreach. They do not produce legal or similarly significant effects on voters - no employment, credit, housing, or government benefit decisions are made based on these scores.

Your right to object

Voters may request that their record be excluded from automated scoring by submitting an opt-out request at grndwrk.com/privacy/my-data. See Section 15 for details.

Human oversight

Campaign staff can view, override, and supplement automated scores with their own assessments. Scores are advisory, not determinative.

8.1 Scores We Calculate

Likelihood to Vote Score: Derived from publicly available election participation history. Factors include recency of voting, primary vs. general election participation, and consistency of participation. This is a derivative calculation from public records.

Supporter Score: A campaign-specific score combining likelihood to vote, party alignment relative to the campaign's declared party, and recency of voter contact recorded through the platform. The same voter receives a different supporter score for each campaign - this is intentional. The score reflects fit with a specific campaign, not a universal political profile.

8.2 Political Opinion Signals and Issue Alignment

When campaign volunteers enter notes about voter interactions, such as a voter expressing a view on a policy issue, those notes may be used to improve our predictive models. We handle this data as follows:

• Political opinion signals from notes are used only as anonymized training signals for aggregate models.
• We do not store individual political opinions as permanent, identifiable voter attributes.
• We do not license political opinion data about identified individuals.
• The resulting model may produce an updated supporter score that reflects alignment with a specific campaign's stated positions.

8.3 What We Will Never Do

• Store political opinions as permanent individual voter attributes available for licensing.
• License individual voter files at any level below the municipal aggregate.
• License individual donor records.
• Sell voter or donor data to data brokers.
• Use voter data for targeted advertising unrelated to the campaign that collected it.

8.4 Enriched Aggregate Data Products

grndwrk may develop and license aggregate data products derived from platform activity. Examples include municipality-level voter engagement indices and precinct-level turnout likelihood distributions. All licensed data products are aggregated to a minimum of the municipal level. No data product identifies or enables identification of individual voters or donors.

In the event of a merger or acquisition

If grndwrk is acquired, voter and donor data will remain subject to the same privacy protections described in this policy. We will notify campaign administrators before any such transfer and provide a 30-day window to export and delete their data if they choose.

11.1 Default Isolation

All campaign data is isolated by default. No data crosses campaign boundaries without explicit authorization from the relevant campaign administrators.

11.2 Committee Aggregates

Campaigns linked to a party committee account share only aggregate statistics with that committee, such as total voters reached, total raised, and volunteer counts. Individual voter records, donor records, and field notes are never accessible at the committee level.

11.3 Authorized Data Sharing

Two or more campaigns may authorize grndwrk to enable limited data sharing between their accounts. This requires written authorization from administrators of all participating campaigns. Even with authorization, sharing is limited to the data types explicitly authorized and does not include political opinion signals or enriched scoring data sourced from other campaigns' field activity.

11.4 Donor Intelligence Program

Campaigns may elect to participate in our Donor Intelligence Program. Participation is opt-in and off by default. Participating campaigns agree that anonymized donation signals - not individual donor records - from their campaign may be used by grndwrk to improve platform-wide donor likelihood models. Participating campaigns receive enhanced donor scoring features. Campaigns may opt out at any time with 30 days' notice. Campaigns that participate should disclose this in their own privacy communications to donors.

13.1 Technical Measures

We implement industry-standard security measures to protect personal data, including:

• Encryption of data in transit over secure connections.
• Encryption of data at rest in our storage systems.
• Technical access controls that enforce campaign-level data isolation.
• Role-based access management within each campaign workspace.
• Access logging for sensitive data operations.
• Regular security assessments.

13.2 Organizational Measures

• Access to personal data is limited to personnel who require it for their role.
• All employees with data access receive privacy and security training.
• Written data processing agreements are in place with all third-party service providers.
• Internal data handling policies govern how personal data is accessed, used, and protected.

13.3 Breach Notification

In the event of a data breach affecting personal data, grndwrk will:

• Contain the breach as quickly as reasonably possible.
• Notify affected campaign administrators within 72 hours of discovery.
• Notify applicable government authorities as required by law, including under New Jersey's Identity Theft Prevention Act (NJSA 56:8-163).
• Inform affected individuals about what data was involved and recommended protective steps.

15.1 Verification

To protect your privacy, we verify your identity before processing requests. You will be asked to provide your full name, date of birth, and current registered voting address. No account creation is required.

15.2 Response Timelines

• Opt-out requests: 15 days
• Access, correction, and deletion requests: 45 days (with one 45-day extension if needed)
• Acknowledgment of receipt: within 5 business days

New Jersey (NJDPA - effective January 1, 2025)

New Jersey residents have the right to access, correct, delete, and transfer their personal data, and to opt out of the sale of personal data, targeted advertising, and profiling for significant decisions. Opt-out requests are processed within 15 days. We do not sell personal data. To exercise your rights, see Section 15.

California (CCPA/CPRA)

California residents have the right to know, delete, correct, and opt out of the sale or sharing of personal information, and to limit use of sensitive personal information. We do not sell personal information. To exercise your rights, see Section 15 or email privacy@grndwrk.com with "California Privacy Request" in the subject line.

Other States

As grndwrk expands nationally, we comply with applicable state privacy laws including those in Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy legislation. The rights described in Section 15 are available to all users regardless of state.

Political affiliation

Party registration is public record in most states and is included in voter registration data. We process it as public information subject to the restrictions in Section 5.

Political opinions

Voter-expressed political opinions recorded during campaign outreach are handled as described in Section 8.2. They are used only as anonymized signals for model improvement and are never stored as permanent individual attributes or licensed as political opinion data.