LAST UPDATED AUGUST 3, 2026
Privacy policy
When you add contacts, Canvass stores the contact fields you authorize, matches them to permitted records, and helps you and your participating team organize around real relationships. You can remove individual matches, disconnect a contact sync, correct information, or delete your account.
Information we handle
We may handle account details, participating-organization information, contacts you choose to make available for matching, partner-provided person and place records, relationships you deliberately confirm, actions and communications you record, messaging consent evidence, and limited security and diagnostic data needed to operate the service.
Contact matching
When you tap Add contacts and grant operating-system permission, Canvass stores encrypted names, phone numbers, email addresses, user-supplied postal addresses, and native contact identifiers from the contacts made available to the app. Notes, birthdays, organizations, social profiles, and photos are not uploaded. Normalized matching values are protected with organization-scoped keyed hashes. A high-confidence match may be added automatically only when exact phone evidence, an exact address match, and district data agree. Other possible matches require a bulk review. Every inferred address or district retains its confidence and source; it is not presented as a fact you confirmed. You can remove an automatic match, and Canvass will not silently restore it during a later sync.
Your team and your contacts
Your participating organization can use confirmed and high-confidence relationships for aggregate coverage, appropriate assignments, and the workflows shown in the service. Other members cannot browse your raw address book or see who else contributed independent matching evidence. We do not share your address book across unrelated organizations, infer political affiliation or voting preference from your contacts, or allow advertisers to use this information.
Text messaging
We use mobile numbers and text-message consent records to provide messages that a person expressly requested from Canvass or a participating organization. Mobile information and SMS opt-in consent are not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. We may provide this information to messaging and infrastructure vendors only as needed to deliver and secure the requested service.
How we use information
We use information to provide matching and place context, operate participating-organization programs, deliver consented communications, secure and improve the service, respond to support requests, and meet legal obligations. We do not sell personal information or raw address-book data.
Service providers and legal requests
We use service providers including Supabase for database and application infrastructure, Smarty for permitted address validation, and Apple and Google platform services. They process information only as needed to provide and secure Canvass under their applicable terms. We may disclose information when required by valid legal process or when necessary to protect people, the service, or our legal rights. We do not sell personal information or share it for cross-context behavioral advertising.
Retention and deletion
Complete contact-sync snapshots currently expire after 90 days unless refreshed, and abandoned uploads expire after 24 hours. A newer full sync replaces older snapshots. Remove synced contacts withdraws organization-specific consent and removes the active encrypted contact vault and matching evidence for that organization. Removing an individual match keeps only the revocation needed to prevent it from being silently restored. Revoking device permission prevents future reads but does not itself delete a completed sync. You can withdraw messaging consent by replying STOP and request full account deletion through our account-deletion page.
Your privacy rights
Regardless of where you live, you may ask to access, correct, download, or delete personal information associated with your account. We will verify requests before acting and may retain limited records when required for security, legal compliance, opt-out enforcement, or dispute resolution. Contact us at the address below.
Nonpartisan use and governing law
Canvass is designed for nonpartisan civic and community organizing. Participating organizations remain responsible for their own lawful use of data and communications. This policy is governed by the laws applicable in the State of Hawaiʻi, without limiting privacy rights that cannot legally be waived.
Contact
Questions and privacy requests can be sent to hello@canvass.to.