Privacy & data rules
Plain-language summary. The signed agreement with each campaign is the binding version — ask and I’ll send it.
Your campaign owns its data.
Voter files, canvass results, volunteer lists — yours. We process them only to run Turf for you.
Where district data is preloaded, it comes from two places only.
A file your campaign uploads, or a state file we may lawfully stock from the Secretary of State. Never a party file resold. Voter data is never publicly viewable — volunteers sign in, and see only their campaign.
We don't share, sell, or cross-use.
No use for any other campaign or client. No data brokers. No merging one client's data with another's, even anonymized. No training AI models on it.
You can leave with everything.
Full export in a machine-readable format on request, within five business days, free. On departure we delete from live systems within 30 days and from encrypted backups within 90, and confirm in writing.
Infrastructure.
Turf runs on Supabase (database), Vercel (hosting), Resend (email), and Twilio (telephony, if enabled). They process data solely to provide infrastructure to us.
Breach notice.
If we become aware of unauthorized access to your data, we notify you within 72 hours with what we know and what we're doing.
This site itself
collects only what the contact form asks for. No ad trackers.
Questions: sam@buildyourturf.com · Backbone Inc.