Privacy Policy

Who we are

Alexander Strategic Group ("ASG", "we") provides political campaign technology, including donation pages we host on behalf of candidates and committees ("campaigns"). When you contribute through a donation page, you are giving to the campaign named on that page; ASG processes the transaction as its technology provider. Questions: [email protected].

Information we collect

• Contribution information: your name, email, mailing address, employer, occupation, contribution amount, and the certification you affirm. Payment-card details are collected and processed by Stripe — ASG never receives or stores your full card number.
• Communications information: if a campaign contacts you, your phone number and message/call history for that campaign.
• Voter information: for campaigns we serve, we process voter-registration data obtained from public records to support lawful electoral activity.
• Technical information: basic, largely anonymous site analytics. We do not use cross-site advertising trackers.

How we use it

• To process your contribution and send your receipt.
• To meet campaign-finance law — recordkeeping, contribution-limit checks, and required reporting.
• To enable the campaign you supported to communicate with you and conduct its program.
• To operate, secure, and improve the platform.

Public-record nature of political contributions

Campaign-finance law requires committees to publicly report contributor information (typically name, address, occupation, and employer) once a contributor exceeds legal thresholds. Information reported to election authorities becomes a public record. This is a legal obligation of the campaign, not a choice by ASG.

How we share it

• With the campaign you contributed to or that serves you.
• With service providers (subprocessors) who help us operate — e.g. Stripe (payments), Resend (email), Twilio (calls/texts), Cloudflare (hosting/security). See our subprocessor list.
• As required by law — including campaign-finance reporting and lawful requests.

We do not sell your personal information.

Subprocessors

The third-party service providers we use to operate the platform, and the personal data each may process.

• Cloudflare — hosting, edge compute, database and storage, security (WAF/CDN). All platform data at rest and in transit. USA / global edge.
• Stripe — payment processing (donations). Donor name, email, billing address, card data (Stripe is the card processor; we never receive full card numbers), contribution amount. USA.
• Twilio — SMS, voice calls, ringless voicemail. Recipient phone number, message or call content and metadata. USA.
• Resend — transactional and outreach email (receipts, system mail). Recipient email, message content. USA.
• Anthropic (model API) — the admin AI operations assistant. Operational text an administrator sends to the assistant (no donor card data). USA.
• Google (Maps / Street View, where used) — address geocoding and canvassing imagery. Address or coordinates (no donor identity). USA.
• GitHub — source control and CI. Source code only (no production personal data). USA.

Your choices & rights

• Communications: reply STOP to opt out of texts; use the unsubscribe link in emails; or contact us. Opt-outs are honored.
• Access / correction / deletion: request a copy, correction, or deletion of your information by emailing us. Note that records we are legally required to keep (e.g. contribution records under campaign-finance law) cannot be deleted until the retention period ends.
• California residents have additional rights under the CCPA/CPRA, including to know and to delete (subject to the legal-recordkeeping exception above); we do not sell or "share" personal information for cross-context advertising.

Retention

We keep contribution and reporting records for at least the period required by applicable campaign-finance law, then dispose of them in accordance with law. Other personal information is kept only as long as needed for the purposes above.

Security

Card data is handled by Stripe under PCI-DSS and never touches our servers. We use encryption in transit, access controls, and signed-permission tenant isolation. No system is perfectly secure; we maintain an incident-response process for any breach.

Children

Our donation pages are intended for adults (18+). We do not knowingly collect information from children.

Changes & contact

We may update this policy; the effective date above reflects the latest version. Contact us at [email protected].