Campaign Insights (“Campaign Insights,” “we,” “us,” or “our”) provides Fieldcraft, an integrated voter contact and campaign management platform for municipal campaigns. This Privacy Policy explains how we handle personal information through our website at campaigninsights.ca (the “Site”) and the Fieldcraft software (the “Platform”).
We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law, including the Municipal Elections Act, 1996.
1. Our role: controller vs. processor
Campaign Insights acts in two distinct capacities, and your rights differ depending on which applies:
- As a data controller — for information we collect directly about visitors to this Site and representatives of the campaigns we contract with (for example, demo requests and account contacts).
- As a data processor (service provider) — for voter, volunteer, donor, and campaign data that a campaign uploads to or generates within its own Fieldcraft instance. In this case the campaign is the data controller and decides what is collected and why; we process that data only on the campaign's instructions under a data processing agreement or the data-protection terms of our services agreement.
If you are a voter, volunteer, or donor and want to access or delete data a campaign holds about you, please contact that campaign directly, as they control it. We will assist the campaign in responding to your request.
2. Information we collect
Information you provide to us
- Contact details when you request a demo or email us (name, email, phone, campaign or organization).
- Account information for campaign staff and volunteers who use the Platform (name, email, role, and authentication credentials).
Information processed on behalf of a campaign
- Voter records (such as name, address, contact information, and voting jurisdiction) imported from electoral lists or third-party data.
- Voter-contact data generated in the field — canvass responses, supporter ID, lawn-sign and volunteer interest, phone-bank outcomes, and notes.
- Donation records, where a campaign uses the donations module, subject to the recordkeeping requirements of the Municipal Elections Act.
Information collected automatically
- Standard server and security logs (IP address, browser type, timestamps) used to operate and secure the Platform.
- Limited, privacy-respecting analytics on the Site. See our Cookie & Analytics Notice.
3. How we use information
- To provide, maintain, secure, and improve the Site and Platform.
- To respond to demo requests and support inquiries.
- To authenticate users and enforce role-based access controls.
- To process campaign data strictly according to the instructions of the campaign that controls it.
- To comply with legal obligations and respond to lawful requests.
We do not sell personal information. We do not use voter, volunteer, or donor data from one campaign for any purpose other than delivering the service to that campaign.
4. Consent
Where we act as a controller, we collect, use, and disclose personal information with your consent, which may be express or implied depending on the sensitivity of the information and the circumstances. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us; withdrawing consent may limit our ability to provide certain services.
5. Disclosure and service providers
We share personal information only as needed to operate the service, with trusted third-party service providers who are contractually bound to protect it and to use it only for the purposes we specify. These providers support functions such as application hosting and content delivery, database and authentication, secure storage, and transactional email (for example, invitations and password resets). We can provide further detail about the providers involved in a given engagement on request.
We may also disclose information where required by law, to enforce our agreements, or to protect the rights, safety, and security of users and the public.
6. Where data is stored
We endeavour to host campaign data on infrastructure located in Canada where available. Some service providers may process limited data outside Canada; in those cases the information remains subject to the laws of the jurisdiction in which it is held, and we require providers to maintain comparable protection. We can describe the current hosting region for a given campaign on request.
7. Data isolation between campaigns
Each campaign operates in its own dedicated environment. Data from one campaign is structurally isolated from every other campaign — it is not commingled in a shared database. See our Security & Data Handling page for details.
8. Retention
We retain personal information only as long as necessary for the purposes described here or as required by law. Campaign data is retained according to the controlling campaign's instructions. The campaign, as the controlling party, is responsible for any recordkeeping it must maintain under the Municipal Elections Act, such as campaign financial records. On termination of a campaign engagement, we delete or return campaign data within the period set out in our agreement, unless we are legally required to retain it.
9. Your rights
Subject to applicable law, you may:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your account and associated personal information.
- Withdraw consent, subject to legal or contractual limits.
Account holders can delete their own account from within the Platform. To make any other request, contact us using the details below. We will respond within the timeframes required by PIPEDA.
10. Security
We use technical and organizational safeguards appropriate to the sensitivity of the information, including encryption in transit, role-based access controls, multi-factor authentication for staff accounts, and per-campaign data isolation. No system is perfectly secure, but we work to protect personal information against unauthorized access, loss, or misuse, and we log administrative actions and searches and exports of campaign data so that incidents can be investigated. See our Security page.
11. Minors
The Platform is a tool for campaign organizing, not a consumer service directed at children. Campaigns do, however, rely on youth volunteers, and a campaign may provision Platform accounts for volunteers who are minors where permitted by law. In that case the campaign is responsible for obtaining any required parental or guardian consent and for supervising the minor's use, as described in our Terms of Service. Separately, personal information about minors may appear in an electoral list provided by an election authority; we process that data only on the controlling campaign's instructions.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where changes are material, provide additional notice.
13. Contact us
For privacy questions, requests, or complaints, contact our Privacy Officer using our . Campaign Insights is located in Ontario, Canada.
If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada.