Privacy Policy

1. Who we are

Stump.run ("Stump", "we", "us") is operated by Stump Run LLC, a Florida limited liability company. You can reach us about privacy at admin@stump.run.

This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to stump.run, the campaign sites we host, and the admin console (together, the "Service"). It is part of our Terms of Service.

2. Two kinds of information, two roles

Your account information. When you sign up and run a campaign on Stump, we decide how that information is used. For this information, we are the "controller."

Information your campaign collects. When someone fills out a volunteer form or otherwise submits information on a campaign's site, that campaign decides what to collect and how to use it. For this information, the campaign is the controller and Stump Run LLC is the "processor." We store and handle it only to provide the Service to that campaign.

If you signed up to volunteer for or support a campaign, please contact that campaign directly with questions or requests about your information. If you cannot reach them, email us and we will help pass your request along.

3. What we collect

Account information. Your name, email address, phone number, and election date. If you sign in with Google, we receive basic profile information from Google, such as your name and email address.

Campaign content. The text, images, positions, events, and other content you add to your campaign site and admin console.

Volunteer and supporter submissions. Information people enter on campaign sites, such as names, email addresses, phone numbers, and answers to the campaign's custom questions.

Endorser information. Names and other details campaigns enter about endorsers, and answers to endorsement questionnaires.

Site analytics. We run our own first-party analytics on campaign sites. This includes pageviews, referring sites, and visitor counts that are based on hashed or derived values rather than stored identities.

Feedback reports. Information you send us when you report a problem or share feedback.

Front Desk chat messages. Messages you send to Front Desk, our in-app help assistant.

4. How we use information

We use information to:

Create and run your account, campaign site, and admin console.
Publish your site and show your content to visitors.
Store volunteer and supporter submissions so your campaign can see, manage, and export them.
Send emails related to the Service, such as account confirmations, welcome messages, and notices about your account.
Show your campaign how its site is performing.
Answer your questions through Front Desk and through email.
Fix problems, prevent abuse, and keep the Service secure.
Follow the law and enforce our Terms.

5. Front Desk and AI

Front Desk uses OpenAI to generate answers to your questions. The messages you send to Front Desk are shared with OpenAI for that purpose. We do not send your account-specific billing information to OpenAI.

Endorsement questionnaire drafting in the admin console uses Lovable's AI gateway with Google Gemini models. When you use that feature, the questionnaire text, your candidate name and profile, and your past questionnaire answers are sent through Lovable to Google to generate draft answers.

We share information with service providers that help us run Stump. They may use it only to provide their services to us.

Lovable: hosting, deployment, and managed database. Lovable's AI gateway also provides Google Gemini models for endorsement questionnaire drafting, as described above.
Supabase: database, sign in, and file storage.
Cloudflare: hosting, delivering campaign sites, and protecting forms from bots.
Resend: sending email.
Lemon Squeezy: payments, tax, and refunds. Lemon Squeezy is the merchant of record and handles your payment details directly; we do not store your card number.
OpenAI: generating Front Desk answers, as described above.
Google: signing in with your Google account, if you choose to.

We may also share information:

When the law requires it, such as in response to a valid court order.
To protect the rights, safety, or property of our users, the public, or Stump Run LLC.
As part of a merger, sale, or similar transaction, in which case this Privacy Policy will continue to apply to your information.
With your permission.

7. We do not sell personal information

We do not sell personal information. We do not show advertising to students.

8. Tools campaigns add to their sites

Campaigns can add their own Google Analytics, Google Tag Manager, or Meta Pixel to their published site. If a campaign does this, those tools may collect information about visitors to that site, such as pages viewed and device details, under Google's or Meta's own policies.

These tools are added and controlled by the campaign, not by Stump, and the campaign is responsible for them.

9. Cookies and browser storage

We use cookies and similar browser storage that are needed to keep you signed in and to make the Service work.

Tools a campaign adds to its own site, described in section 8, may set their own cookies.

10. Students and children

You must be at least 13 years old to use Stump. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, email admin@stump.run and we will delete it.

Educators may create campaign sites for students. Students under 18 use Stump under the direction of their school or educator, who is responsible for any required parent or guardian consent and for meeting FERPA and other student privacy obligations.

We do not sell student data and we do not show advertising to students.

11. How long we keep information

We keep account information and campaign data for as long as your account is active.

After your election month, if your campaign moves to Archived status, your site goes offline but we keep your campaign data, including volunteer lists, until you ask us to delete it. This lets you come back to it or export it later.

You can ask us to delete your data at any time by emailing admin@stump.run. We may keep some information where the law requires it, and deleted data may remain in routine backups for a limited time before it is overwritten.

12. Your choices and rights

You can:

Export your campaign content and volunteer lists from the admin console.
Ask us for a copy of your personal information, or ask us to correct or delete it, by emailing admin@stump.run.

Depending on where you live, you may have additional privacy rights under local law. We will respond to requests as required by the laws that apply.

If you are a volunteer or supporter of a campaign, the campaign controls your information, so please send your request to them first.

13. Security

We use reasonable technical and organizational measures to protect personal information, including access controls that keep each campaign's data separate from other campaigns. No system is perfectly secure, so we cannot guarantee absolute security.

If you think your account has been compromised, email admin@stump.run right away.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above. If a change is significant, we will give account holders notice by email or in the admin console before it takes effect.

15. Contact

Questions about privacy? Email Stump Run LLC at admin@stump.run.