Privacy Policy

Information we collect

• Account information. When you register, we collect your name, email address, and a password. Passwords are never stored in plain text—they are kept only as a salted cryptographic hash.
• Settings you create. Saved filters and account preferences you configure within the Service.
• Technical and security data. We process your IP address and basic request metadata to authenticate sessions, enforce rate limits, and protect accounts against abuse such as brute-force login attempts.

The town hall and legislator event information displayed in the Service is gathered from publicly available California state government websites. It is not personal information about you.

How we use information

• To create and maintain your account and authenticate you.
• To provide, operate, and improve the Service.
• To secure the Service—detecting, preventing, and responding to fraud, abuse, or security incidents.
• To respond to your requests and communicate with you about the Service.

We do not sell or share your personal information for advertising, and we do not use it for cross-context behavioral advertising.

Cookies

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. These authentication cookies are HTTP-only and are required for the Service to function. We do not use advertising or third-party tracking cookies.

Service providers

We rely on a small number of third parties to operate the Service:

• Railway — cloud hosting and our managed database, where your account data is stored.
• Anthropic — AI processing used to parse public government web pages. Only publicly available government page content is sent for parsing; your personal account information is never sent to Anthropic.

Data retention

We retain your account information for as long as your account is active. If you ask us to delete your account, we will delete your personal information except where we are required to retain it to comply with legal obligations or to resolve disputes. Limited security logs (such as IP addresses used for abuse prevention) are kept only as long as needed for those purposes.

Your privacy rights

Depending on where you live, including under the California Consumer Privacy Act (CCPA/CPRA), you may have the right to:

• Know what personal information we hold about you;
• Request access to or a copy of that information;
• Request correction of inaccurate information;
• Request deletion of your information; and
• Not be discriminated against for exercising these rights.

To exercise any of these rights, email us at info@graniteridgestrategies.com. We will verify your request using the email associated with your account before acting on it.

Security

We protect your information with industry-standard measures, including encrypted (HTTPS/TLS) connections, hashed passwords, HTTP-only authentication cookies, and rate limiting and account lockout to deter abuse. No method of transmission or storage is 100% secure, but we work to safeguard your information.

Children’s privacy

The Service is intended for government affairs professionals and is not directed to children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be communicated through the Service.

Contact us

If you have questions about this Privacy Policy or our handling of your information, contact us at info@graniteridgestrategies.com.