Privacy Policy

1. Introduction

OneVoice Advocacy LLC ("OneVoice," "we," "us," or "our") is a Texas limited liability company that provides an advocacy email campaign platform (the "Service") that enables organizations to mobilize their communities and direct email communications to elected officials, government agencies, and other target recipients.

Your privacy is important to us, and we are committed to protecting the information entrusted to us. We collect only the information we need to operate the Service, and nothing more. This Privacy Policy explains how OneVoice collects, uses, stores, and protects information in connection with the Service and our website at onevoiceapp.io (the "Site").

This Policy applies to three groups:

• Customers: organizations and their authorized users who hold accounts on the platform;
• Advocates: individuals whose information is submitted through Customer-operated campaign action pages; and
• Visitors: individuals who browse the Site without creating an account.

Where this Policy addresses Customers, those practices may be supplemented by a data processing agreement between OneVoice and the Customer. In the event of a conflict between this Policy and a signed data processing agreement, that agreement controls with respect to the Customer data it covers.

By using the Service or the Site, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We practice data minimization. We collect only the limited categories of information necessary to provide and operate the Service, and we do not collect more than we need.

2.1 Customer Account Information

When an organization creates an account, we collect the information necessary to establish and manage that account and its authorized users, such as name, email address, organization name, and role.

2.2 Advocate Submission Data

When an advocate submits a communication through a Customer's campaign action page, we collect the information the Customer's campaign requests from that advocate, together with the content of the submission. This information is collected and stored on behalf of the Customer organization, which is the party responsible for that information. OneVoice acts as a service provider processing this information under the Customer's direction.

Customers are solely responsible for ensuring they have obtained all necessary consents and permissions from advocates before submitting advocate information to the Service or directing the Service to send communications on advocates' behalf.

2.3 Usage and Analytics Data

We collect anonymized usage data such as page views, feature usage, and campaign statistics to operate and improve the Service. This information is not used to identify individual advocates.

We may aggregate de-identified information across our customer base to produce benchmarking insights and to improve the Service. Any such aggregated information does not identify you, your organization, your members, or your contacts, and is not attributable to any individual or organization.

2.4 Payment Information

OneVoice uses Stripe, Inc. as its third-party payment processor. When you subscribe to a paid plan, your payment card or bank information is submitted directly to Stripe. OneVoice does not receive, process, or store your full payment card number or bank account information. We retain only limited reference details, such as the last four digits of your card and your subscription status. Stripe's handling of payment data is governed by Stripe's own privacy policy.

2.5 IP Addresses and Technical Information

When you use the Service or Site, we and our infrastructure providers automatically collect certain technical information, including IP address, browser type, operating system, and access timestamps. We use this information for security, fraud prevention, abuse detection, and platform reliability. An IP address alone generally cannot identify you personally.

2.6 Contact and Inquiry Data

When you submit a contact or inquiry form on the Site, we collect the information you provide, such as your name, email address, organization, and message, in order to respond to your inquiry.

2.7 AI-Assisted Features

The Service includes features that use artificial intelligence to support campaign analytics and campaign creation. These features are powered by our AI provider (currently Anthropic). Information relevant to a given AI-assisted feature, which may include advocate information, may be processed by this provider when that feature is used. AI features can be enabled or disabled at the account level. Data sent to our AI provider through the Service is not used to train the provider's models.

3. How We Use Information

We use the information we collect to:

• Create, authenticate, and manage accounts;
• Deliver advocacy communications on behalf of Customers to their chosen target recipients;
• Process payments and manage subscriptions;
• Provide campaign analytics and reporting to Customers;
• Communicate with Customers about their accounts, the Service, and material changes to this Policy or our Terms of Service;
• Respond to inquiries and provide support;
• Detect, prevent, and address fraud, security incidents, spam, and abuse;
• Comply with applicable law and legal process; and
• Operate, maintain, and improve the Service.

We do not sell, lease, or distribute your personal information or your organization's contact lists to third parties for their own marketing or commercial purposes.

4. How Information Is Shared

4.1 Delivery to Target Recipients

A core function of the Service is delivering advocacy communications to their intended destinations. When an advocate submits a communication through a campaign, the information collected by that campaign and the content of the communication are transmitted to the target recipients the campaign is directed at. Target recipients may include elected officials, government agencies, or other entities or individuals that a Customer's campaign is addressed to. This sharing is the purpose for which advocates submit communications through the Service.

4.2 Service Providers

We share information with the third-party service providers that operate the platform, listed in Section 5. Each is bound to protect the information and to use it only as directed by OneVoice in connection with the Service.

4.3 Legal and Business Transfers

We may disclose information if required by law, legal process, or a governmental request, or to protect the rights, safety, or property of OneVoice, our Customers, or others. If OneVoice is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy.

5. Third-Party Service Providers

We engage the following providers to operate the platform. Each is contractually bound to protect the information and use it only in connection with the Service.

We may update this list of providers from time to time as the Service evolves.

6. Other Technical Data

Some pages load resources directly from third parties. Our application loads fonts from Google's font service, which may disclose your IP address to Google as part of that request. If a Customer embeds a video in a campaign page, that page may load content from YouTube, which is Google's own service and subject to Google's privacy practices, not ours. We do not control what these third parties do with information disclosed to them by your browser.

7. Email Communications and Anti-Spam

OneVoice provides email delivery that Customers use to send advocacy communications on behalf of their organizations. All communications sent through the Service must comply with the federal CAN-SPAM Act and all other applicable laws governing electronic communications.

Customers are solely responsible for:

• Obtaining appropriate consent from advocates to send communications on their behalf;
• Maintaining records of consent for their contacts;
• Honoring opt-out and unsubscribe requests promptly; and
• Ensuring the content of communications is truthful and lawful.

You may unsubscribe from promotional or marketing emails from OneVoice at any time using the unsubscribe link in those messages. You may not opt out of service or transactional messages, such as account, billing, security, and material policy-change notices, while your account is active, because these are necessary to operate the Service.

We reserve the right to suspend or limit access to email-sending features if we observe activity suggesting non-compliance with anti-spam requirements or patterns likely to harm deliverability for the platform.

8. Data Retention

We retain account information for as long as your account is active, and afterward only as needed to meet legal obligations, resolve disputes, or enforce our agreements. Deleted campaign targets and campaign records are soft-deleted and then permanently purged according to the retention period applicable to your subscription plan. You may request deletion of your account and associated data at any time.

Anonymized, aggregated information that does not identify any individual or organization may be retained for analytics and service improvement.

9. Cookies and Local Storage

The Service stores session information and user preferences using your browser's local storage, not cookies. This information stays on your device and is used to keep you signed in and to remember your settings. We do not use advertising cookies or third-party behavioral tracking cookies, and our advocate-facing campaign pages do not use tracking cookies or local storage to track advocates.

10. What We Don't Do

We do not track email opens or link clicks in the communications advocates send through the Service. We do not record user sessions. We do not run behavioral analytics on advocates, and we do not build advertising profiles from any information we collect.

11. Data Security

We use industry-standard technical and organizational measures to protect information against unauthorized access, disclosure, alteration, and loss. These include:

• Encrypted connections using TLS in transit and encryption at rest;
• Row-level security policies on our database;
• Access controls that limit production data access to authorized personnel; and
• Secure authentication.

If a security incident affects your information, we will notify affected Customers and take appropriate steps in accordance with applicable law. No method of transmission or storage is completely secure, and while we work hard to protect your information, we cannot guarantee absolute security.

12. Your Privacy Rights

12.1 General Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion of your information, subject to applicable exceptions;
• Export your information in a portable format; and
• Object to or restrict certain processing.

To exercise any of these rights, contact us at support@onevoiceapp.io. We will respond within the time required by applicable law.

12.2 California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act, as amended, provides certain rights, subject to exceptions. These include the right to know the categories and specific pieces of personal information we collect, to delete personal information, to correct inaccurate information, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights.

OneVoice does not sell or share your personal information as those terms are defined under the CCPA. In the past 12 months, we have collected the categories of information described in this Policy, including identifiers, professional or organizational information, and internet or network activity information. To submit a request, contact us at support@onevoiceapp.io. We may verify your identity before responding, and you may use an authorized agent.

12.3 Texas Residents (TDPSA)

If you are a Texas resident, the Texas Data Privacy and Security Act provides certain rights, subject to exceptions. These include the right to confirm whether we process your personal data and to access it, to correct inaccuracies, to delete personal data, to obtain a portable copy, and to opt out of the sale of personal data or processing for targeted advertising or certain profiling.

OneVoice does not sell personal data or process personal data for targeted advertising or for profiling that produces legal or similarly significant effects. To submit a request, contact us at support@onevoiceapp.io. You may appeal a decision by contacting us at the same address, and if an appeal is denied you may contact the Texas Attorney General.

13. Children's Privacy

The Service is not intended for individuals under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. If you believe we may have information from a child under 13, contact us at support@onevoiceapp.io.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Customers by email or in-app notice and update the "Last Updated" date above. Your continued use of the Service after a change takes effect means you accept the updated Policy.

15. Governing Law

This Privacy Policy is governed by the laws of the State of Texas, without regard to its conflict-of-law principles.

16. Contact

If you have questions or requests regarding this Privacy Policy or our data practices, contact us: