Effective date: August 31, 2026 · Last updated: October 7, 2026
OrganizeOS LLC ("OrganizeOS," "we," "us") provides an organizing platform: a web application, mobile apps, and hosted public pages that membership organizations use to run their operations. This policy explains what personal information we collect, how we use it, and the choices you have.
It covers the OrganizeOS platform at app.organizeos.org, the OrganizeOS mobile apps, our marketing website at organizeos.org, and the public pages we host for organizations. It does not govern what member organizations do with information in their own workspaces; that relationship is explained in the next section, because it shapes everything else in this policy.
Depending on who you are, we handle your information in one of two ways.
If you have an OrganizeOS account, we decide how the data needed to operate your account is collected and used. For that data, we are the "data controller" in privacy-law terms, and this policy describes our obligations to you directly.
If an organization using OrganizeOS holds information about you, such as a contact record, a donation, a survey response, or a note from a conversation at your door, that organization controls the information. We store and process it on the organization's instructions as their service provider (a "data processor"). We do not sell it and we do not use it for advertising. If you want that information corrected or deleted, the organization is the right place to start, and the section "Your choices and rights" explains how we help.
One person can be both. If you volunteer for an organization and also appear in its contact list, your account is ours to protect and your contact record is theirs to manage.
Running the platform requires a few processing activities we perform for our own limited purposes even when the underlying records came from an organization: keeping the service secure and preventing abuse, complying with legal obligations, maintaining accurate records across the platform (described under "Platform intelligence and analytics"), and producing aggregated statistics that do not identify anyone. Those activities are disclosed in this policy rather than governed by any single organization.
For app-store data disclosures: information we process for organizations still moves through the OrganizeOS app and servers, so it is declared in the app stores' data-safety disclosures even where an organization, not OrganizeOS, controls it.
Account information. Name, email address, password (we do not store passwords in plain text), and optional profile details you add. If you enable multi-factor authentication, we store the enrollment needed to verify it.
Organization membership. Which organizations you belong to and your roles in them, so the platform can show you the right workspaces and apply the right permissions.
Billing information. If your organization pays for OrganizeOS, or you donate or pay dues through the platform, payment card details go directly to our payment processor and never touch our servers. We keep records of transactions (amounts, dates, status) but not card numbers. This applies to every payment on the platform, including donations made by people without OrganizeOS accounts.
Usage information. Our web pages record page views, along with the referring page and campaign parameters in the address (such as which link brought you there). To connect the views in one visit, we store a random identifier in your browser's local storage and a session identifier for the current visit. These are not shared with advertising or analytics companies; the events go into our own systems. If you sign in, your visit history is linked to your account, and organizations you interact with see engagement measures derived from your activity with them (described under "Platform intelligence and analytics").
Device and technical data. Server logs (IP address, browser type, pages requested, timestamps) kept for security and debugging. If you enable push notifications in the mobile app, we store a device token tied to your account so notifications can reach that device. Error diagnostics run on the web application only; the mobile app does not include a crash-reporting service.
Communications. Messages you send us, including requests to privacy@organizeos.org.
The mobile app asks for device permissions only when a feature needs them:
Declining a permission disables the features that need it and nothing else. You can revoke any permission later in your device settings, with the same effect.
Organizations use OrganizeOS to manage their own data about members, supporters, donors, and the people they talk to. This includes contact records and custom fields, membership and dues records, donation history, event registrations, messages and posts inside the organization's workspace, files the organization stores, and canvassing data: walk lists, door-knock attempts with their locations, survey responses, and photos canvassers take.
For all of it, the organization decides what to collect and why. We use this information to provide the service to that organization, including the analytical and advisory features we offer them, subject to the limited platform purposes described in "Two different relationships." Each organization's data is logically separated from every other organization's using per-organization access controls enforced at the database layer, and access inside a workspace follows the roles and permissions the organization configures.
A note on canvassing and political data. Organizations engaged in civic work may record information that reflects political opinions or affiliations. OrganizeOS processes such data to provide the service to the organization, applies the same separation and access controls as everything else, and does not use it for advertising or sell it. Organizations are responsible for collecting it lawfully in their jurisdiction.
Organizations can publish public pages through OrganizeOS: donation pages, signup forms, event pages, and websites. When you submit information on one of those pages, it goes into that organization's workspace and the organization controls it.
What OrganizeOS itself does on those pages: our servers log requests (as described above), the usage information described earlier is recorded (page views, referral parameters, and the browser identifiers that connect a visit), payment details you enter go directly to the payment processor, and we set only the cookies needed for the page to function. We do not place advertising or tracking cookies on hosted pages, and we do not share visitor activity with advertising or analytics companies.
Personal share links. Members of an organization can share its public pages using a personal link. The link carries a short random code, not the member's name or any information about you. If you sign up, register for an event, volunteer for a shift, or donate during a visit that began with someone's personal link, we record which link you used. The organization sees whose link brought you in. The member who shared the link sees your first name if you signed up, registered for an event or volunteered through it, along with a count of how many people their links have brought in. They never see whether you donated or how much: donations through their links are shown to them only as a number, and only once at least three have been made. Credit applies only to what you do during the visit in which you followed the link; we do not set a cookie to remember it.
Organizations can add their own analytics tools, tracking pixels, or embedded content to the pages they publish. Those tools collect information under the organization's direction and are governed by the organization's own privacy practices, not this policy.
OrganizeOS includes features that derive information from activity on the platform. Because some of them operate across the platform rather than inside a single workspace, they are our responsibility, and we describe them here plainly.
Engagement measures. For each organization, we compute measures of how the people in its records interact with it: for example, an engagement score based on event attendance, donations, and messages within that organization. These are computed separately for each organization from its own data and shown only to that organization.
Identity resolution. We maintain an internal record-keeping system that recognizes when records held on the platform describe the same person, by matching identifiers such as an email address or phone number, including when the records are held by different organizations. Its purposes are accuracy and de-duplication: keeping a person's event registrations, sign-ups, and contact records consistent rather than fragmented. This system is internal infrastructure. Organizations cannot query it, it is not shown anywhere in the product, and no organization can see another organization's records, or learn whether another organization knows you, through it. It does not add information about you to any organization's records that the organization did not collect itself.
Benchmarks. We compute aggregated statistics across organizations, such as typical engagement or donation patterns for organizations of a similar type and size, so an organization can compare itself to its peers. These are computed only over groups large enough that no individual or single organization is identifiable, and they contain no personal information.
We may also use aggregated or de-identified information, which does not identify any person, to understand and improve how the platform works.
OrganizeOS hosts state voter files: voter registration records (such as name, address, party registration, and voting history, though never how anyone voted) that state governments make available as public records. These records are loaded and maintained by OrganizeOS staff, not uploaded by organizations. An organization is granted access per state, for a limited time, and organizations with access to the same state's file see the same public records. Organizations may match their own contact lists against the voter file to keep their records accurate; those matches belong to the organization that made them.
Voter file records originate with state election authorities. If you believe your voter registration record is inaccurate, the state's election authority is the authoritative place to correct it; you can also contact privacy@organizeos.org with questions about how these records appear on our platform.
We rely on a small set of service providers to run the platform, each bound by agreements limiting them to providing their service to us: cloud hosting and databases, file storage, a payment processor, an email delivery service, a text-messaging provider, a video-meeting infrastructure provider, a mapping provider, an error-diagnostics service on the web application, and a language-processing provider for the advisory features described below.
Advisory and drafting features. Workspaces include advisor features that answer questions and draft content. When someone uses them, the relevant workspace information is sent to our language-processing provider to generate the response: the conversation itself, summary statistics about the workspace, and, when the question calls for it, individual records the requesting user already has permission to view (for example, a short list of matching contacts or top donors). Advisor conversations are retained as part of the workspace. Separately, content posted in community spaces may be screened automatically by the same provider to help enforce platform rules. In every case, the provider processes the data to produce the result and does not use it to train its models.
Account data is kept while your account is active. When you ask us to delete your account, we delete or de-identify it within 30 days, except records we must keep for legal, security, tax, or financial-audit reasons. Copies in encrypted backups age out on a rolling cycle of roughly 90 days.
Billing and transaction records are kept for as long as tax, accounting, and payment-network rules require, even if the associated account is deleted.
Organization-controlled data is kept as long as the organization instructs. When an organization deletes records, or ends its use of OrganizeOS and asks us to delete its workspace, we honor that on the same schedule as account deletions, subject to the same legal, security, tax, and financial-audit exceptions.
Server logs are kept for a bounded period for security investigation and then deleted.
To delete your OrganizeOS account, email privacy@organizeos.org from the address on your account. We will verify the request and complete the deletion within 30 days, as described in "Retention." Deleting your account removes your account data, including your advisor conversations and device tokens. It does not remove records that organizations hold about you in their own workspaces; those belong to the organizations, and you can ask them directly or ask us to pass your request along.
Access, correction, deletion. Email privacy@organizeos.org from the address on your account. We verify every request before acting on it. Depending on where you live, you may have specific legal rights to access, correct, delete, or receive a copy of your data; we honor these regardless of jurisdiction where we reasonably can.
When an organization controls the data. If your request concerns information an organization holds about you, we pass your request to the organization and tell you we have done so. We support organizations in fulfilling these requests, but the decision is theirs.
US state privacy rights. Residents of states with comprehensive privacy laws may have rights to know, correct, delete, and obtain a copy of personal information, to limit the use of sensitive personal information, and to be free from discrimination for exercising those rights. Requests go to privacy@organizeos.org; if we decline a request, we will explain why and how to appeal.
Push notifications can be turned off in the app or in your device settings at any time.
Being named to the member who shared a link. If you have an OrganizeOS account, turning off "Show me on leaderboards" in your profile settings shows you to the member who shared the link as "Someone" instead of by name from then on; notices they have already received do not change. If you do not have an account, ask the organization; it can remove the record that you came through that member's link.
Email. Transactional email about your account cannot be opted out of while the account exists; organization emails include the organization's own unsubscribe handling.
We take measures appropriate to the sensitivity of the data: encryption in transit, storage-level encryption at rest provided by our database and file-storage infrastructure, passwords stored only in hashed form, optional multi-factor authentication, and per-organization access controls enforced at the database layer. No system is perfectly secure, and we encourage strong unique passwords and MFA enrollment.
OrganizeOS is not directed at children under 13, and we do not knowingly collect personal information from them through accounts. Records that organizations keep may include information about minors (for example, a family membership); organizations are responsible for collecting that information lawfully, consistent with their role described in this policy. If you believe a child has provided us information directly, contact privacy@organizeos.org and we will delete it.
OrganizeOS is intended for use by organizations in the United States. Our infrastructure is located in the United States, and some service providers may process data in other countries in the course of providing their services. If you use OrganizeOS from outside the United States, your information is transferred to and processed in the United States.
We will post changes here and update the date at the top. For material changes, we will notify account holders by email or in-app notice before the change takes effect.
OrganizeOS LLC
privacy@organizeos.org