Legal

Privacy Policy

Last updated October 29, 2026. This policy applies to new accounts from that date and to existing accounts from November 28, 2026.

1. Who we are and what this covers

tools.democrat is operated by Borich Hernandez Solutions LLC, a Virginia limited liability company (“we,” “us”). This policy explains what information we collect through tools.democrat and its apps (Votes & Notes, Raise Rate, Burn Rate, DonorDialer, Command Post and the Suite), how we use it and who we share it with. It is part of our Terms of Service.

The policy covers two groups of people:

  • Customers: campaigns, committees and the staff and volunteers who use our apps.
  • People in our customers’ records:donors, prospects, event guests and other contacts that a campaign puts into or collects through the apps. For that information, the campaign decides what is collected and how it is used, and we handle it on the campaign’s behalf (section 3).

2. Information we collect

Account information
Examples: Name, email address, password (stored hashed), campaign or committee name
Where it comes from: You, when you sign up
Billing information
Examples: Plan, billing history, Stripe customer ID. We never see or store your full card number
Where it comes from: You, through Stripe checkout
Campaign records
Examples: Donor and prospect names, email addresses, phone numbers, mailing addresses, contribution amounts and dates, employer and occupation, pledges, call notes and outcomes, budgets, expenses, events and RSVPs
Where it comes from: You and your team; files you import; ActBlue data you connect
Event guest information
Examples: Name, email and RSVP details from people who respond to a campaign's event page
Where it comes from: Guests, through Votes & Notes event pages
Usage and device information
Examples: Pages visited, actions taken, IP address, browser type, error logs
Where it comes from: Collected automatically when you use the apps
Messages to us
Examples: Support requests and email correspondence
Where it comes from: You, when you contact us

We do not buy data about people from data brokers, and we do not add outside information to your campaign records.

3. How we use information

We use account, billing and usage information to:

  • provide, secure and support the apps, including signing you in across products
  • process subscriptions, trials and cancellations
  • send account and service emails (section 5)
  • find and fix problems, prevent abuse and improve the apps
  • meet legal, tax and accounting obligations

Campaign records are yours. We store and process your campaign records, including donor and guest information, only to provide the apps to your campaign. Specifically, we:

  • never sell or rent campaign records, and never share one campaign’s records with another campaign
  • never use your records to fundraise, solicit or contact anyone ourselves
  • never use your records in Borich Hernandez Solutions’ consulting work
  • access them only to support you, fix problems, keep the service secure or meet a legal obligation

Your campaign is responsible for having the right to collect and use the information in its records, and for following campaign finance rules on its use, including rules against using contributor information from public disclosure reports for solicitation.

4. Who we share information with

We share information only with service providers that run parts of the apps for us, under contracts that limit their use of it to providing those services:

Supabase
What they do: Database and sign-in
What they receive: All account and campaign records
Vercel
What they do: Hosting
What they receive: Requests to the apps, including IP addresses and logs
Stripe
What they do: Subscription payments and the billing portal
What they receive: Billing details and your email address
Resend
What they do: Sending email
What they receive: Recipient email addresses and message content
Apple
What they do: Distributing the DonorDialer app
What they receive: App Store account details Apple already holds; no campaign records

Services you connect.If you connect ActBlue or import files, data flows from that service to us at your direction. ActBlue’s own privacy policy governs what it does with information.

We may also disclose information if the law requires it, such as a valid subpoena, to protect the rights or safety of people, or as part of a sale or merger of the business, in which case this policy would continue to apply to your information. We do not sell personal information, and we do not use advertising or tracking networks.

5. Emails, cookies, retention and security

Emails.We send service emails such as sign-in links, password resets, trial reminders, receipts and important account notices. You can’t opt out of these while you have an account. When a campaign uses the apps to email its own guests or contacts, for example event reminders, the campaign controls who receives those messages and what they say.

Cookies. We use cookies only to keep you signed in and remember your session across tools.democrat apps. We do not use advertising, analytics or cross-site tracking cookies.

Retention. We keep account and campaign records while your account is active. After it ends, we keep them for up to 90 days so you can return or ask for a copy, then delete them, except where the law requires us to keep something longer, such as billing records for tax purposes. Deleted data leaves our backups on their normal rotation.

Security.Data is encrypted in transit, each campaign’s records are walled off from every other campaign’s at the database level, and administrative access is limited to the people who run the service. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

6. Your choices and rights

Customers. You can review and update your account information in the apps. You can ask us for a copy of your information, ask us to correct it, or ask us to delete your account and records by emailing tommy@borichhernandez.com. We will respond within 30 days and may need to confirm your identity first.

Donors, guests and other contacts.If a campaign holds your information in our apps, contact that campaign first, since it decides how your information is used. If you can’t reach the campaign, email us and we will pass your request on.

Children. The apps are for adults. We do not knowingly collect information from anyone under 18 as a customer.

Where data is stored. Information is stored and processed in the United States.

Changes. We will post changes on this page. For material changes we will email account owners at least 30 days before they take effect.

Contact. Privacy questions or requests: tommy@borichhernandez.com. Borich Hernandez Solutions LLC, Alexandria, Virginia.