Legal

Privacy policy

What we collect, why we collect it, and what you can do about it. AoR HQ is run by volunteers — we handle your data the way we'd want ours handled.

Effective April 22, 2026·Applies to all users

Short version: we collect the minimum we need to match volunteers with campaigns in your county. We don't sell your data. We don't run ad trackers. You can delete your account and data at any time.

This Privacy Policy is incorporated by reference into the Terms of Service. If a conflict arises between the two, this Privacy Policy controls for the personal-information processing it specifically covers.

01What we collect

We split what we collect into two buckets: what you give us, and what your device tells us.

Information you give us

  • Account details: name, email, password
  • Profile: skills, location, bio, role
  • Campaign details: office sought, party, needs
  • Messages and help-request content

Information collected automatically

  • Device and browser details
  • IP address and approximate location
  • Usage data (pages, features, timestamps)
  • Essential cookies (see Section 6)

02How we use it

We use your information to:

  • Operate and maintain the Platform.
  • Match volunteers with campaigns based on skills and location.
  • Send notifications about applications, assignments, and deadlines.
  • Enforce our Terms of Service and protect against misuse.
  • Improve the Platform through aggregate usage analytics.
  • Respond to your support requests.

We don't use your information to train third-party AI models, target ads, or sell to data brokers. Full stop.

03Who sees what

We do not sell your personal information. We share it only in these situations:

  • Between users: profile details are visible to other Platform users where needed for matching — e.g., a campaign sees a volunteer's profile after the volunteer applies to a request.
  • Service providers: infrastructure partners that host the Platform, deliver email, or provide analytics. They're bound by confidentiality obligations and can only use your data to help us run AoR.
  • Legal requirements: when required by law, subpoena, or court order, or to protect the safety of users or the public.
  • County admins: your county administrator can see users and activity in their county to keep the pool healthy.

04How long we keep your data

We retain your information while your account is active or as needed to provide the service. If you delete your account, we remove your personal information within 30 days, except where we must retain something by law (for example, security logs required for fraud investigation).

05How we protect it

We use industry-standard measures, including TLS in transit, encrypted at-rest storage where applicable, scoped access for admins, and two-factor authentication for privileged accounts. No system is perfect — we can't guarantee absolute security, but we do the work.

If you suspect your account has been compromised, email security@aorhq.org and we will lock it while we investigate.

06Cookies

We use essential cookies to keep you logged in and remember your preferences. We don't use third-party advertising cookies. Any analytics cookies we use collect aggregate usage data and do not personally identify you.

07Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct anything that's wrong.
  • Delete your account and the data attached to it.
  • Export your data in a portable format.
  • Opt out of non-essential communications.

Most of these are one-click in your account settings. For anything else, email privacy@aorhq.org.

08Children

AoR is not for anyone under 18. We don't knowingly collect personal information from children. If we learn we have, we'll delete it promptly — and if you believe a child has given us data, tell us.

09Changes to this policy

We may update this policy. For material changes, we'll notify you by email or a prominent in-app notice at least 14 days before the change takes effect. Continued use after a change means you accept the updated policy.

10Contact

Questions about your data, this policy, or anything adjacent? Email privacy@aorhq.org. A real human will answer.

Effective April 22, 2026Read the SMS terms →