Privacy Policy

Winning Ground is software for running political campaigns, nonprofits, and volunteer organizations. It is operated from Canada, and this policy is governed by Canadian federal privacy law — the Personal Information Protection and Electronic Documents Act (PIPEDA) — and applicable provincial privacy legislation.

This policy explains what personal information we collect about people who create and use a Winning Ground account, how we use it, who we share it with, and how you can access or delete it. It covers winningground.ca and every campaign workspace hosted on our subdomains and customer custom domains.

Organizations that use Winning Ground also load their own supporter and constituent records into the platform. For that information we act as a service provider to the organization, not as the owner of the data. See Data your organization loads.

We collect only what we need to run your account:

• Account information. Your name, email address, whether that email is verified, and — if your identity provider supplies one — your profile picture.
• Authentication records. A password hash if you sign up with a password, or the identifier and tokens issued by Google or Apple if you use one of those to sign in. We never receive or store your Google or Apple password.
• Session and security data. Session tokens, expiry times, the IP address and browser user agent recorded when a session is created. We use these to keep you signed in and to detect abuse.
• Organization membership. Which campaigns or organizations you belong to, and your role within each.
• Support and enquiry messages. Anything you send us through our contact form.
• Operational logs and product analytics. Aggregate usage and performance data used to keep the service reliable and to understand which features are used.

We do not collect biometric data, precise device location, contact lists, health information, or advertising identifiers.

When you choose Sign in with Google, we ask Google only for the basic OpenID Connect scopes: openid, email, and profile. From those, Google sends us your Google account identifier, your email address and its verification status, your name, and your profile picture URL.

We request no restricted or sensitive Google API scopes. We do not read your Gmail, Drive, Calendar, Contacts, or any other Google service.

We use this information for one purpose: to create your Winning Ground account, to sign you in, and to link a returning sign-in to the account you already have. It is never used for advertising, never sold, never transferred to third parties for their own purposes, and never used to build profiles of you.

Winning Ground's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Winning Ground from your Google account at any time at myaccount.google.com/permissions. Doing so stops future Google sign-ins; it does not by itself delete your Winning Ground account — use the deletion instructions below for that.

When you choose Sign in with Apple, Apple sends us a stable user identifier, your email address, and — on your very first sign-in only — the name you choose to share.

If you elect to hide your email, Apple gives us a Private Relay address ending in @privaterelay.appleid.com instead of your real address. We treat that relay address as your account email and send all account mail through it. We do not attempt to discover, resolve, or circumvent the real address behind a relay.

We use this information only to create your account, sign you in, and send necessary account and service email. It is never used for advertising and never sold.

You can review or revoke Winning Ground's access in Settings → your name → Sign in with Apple on your Apple device. As with Google, revoking access stops future sign-ins but does not delete your Winning Ground account.

We use personal information to:

• create and authenticate your account and maintain your signed-in sessions;
• provide the features of the product to you and to the organizations you belong to;
• send transactional email — sign-in links, password resets, invitations, and important service notices;
• keep the service secure: detect and investigate fraud, abuse, and unauthorized access;
• diagnose faults, monitor performance, and improve the product;
• meet our legal and regulatory obligations.

We do not use your personal information for advertising, and we do not sell personal information.

Under PIPEDA we rely on your consent. You give express consent when you create an account or choose to sign in with Google or Apple; the consent screen shown by your identity provider tells you exactly what will be shared before anything is sent to us. Where the law permits, we also rely on implied consent for processing you would reasonably expect — such as keeping security logs — and we process without consent only where PIPEDA specifically allows it, for example to investigate a breach of an agreement or to comply with a lawful order.

You can withdraw your consent at any time by closing your account.

We do not sell personal information and we do not share it with advertisers. We disclose it only in these circumstances:

• Within your organization. Administrators of a campaign or organization you join can see your name, email, and role there.
• Service providers. Vendors who run infrastructure on our behalf — cloud hosting and edge delivery, our managed Postgres database, our transactional email provider, and our product analytics provider — process data only on our instructions and under contract.
• Legal requirements. Where we are compelled by a valid legal process, or where disclosure is necessary to protect the rights, safety, or property of our users, the public, or Winning Ground.
• Business transfers. If Winning Ground is acquired or merged, your information may transfer to the successor, which would remain bound by this policy. We will give notice before your information becomes subject to a different policy.

Our databases and application servers are operated by cloud providers that may store and process data in Canada, the United States, and other countries. Information stored outside Canada is subject to the laws of the country it is held in, and may be accessible to courts, law enforcement, and national security authorities there.

We use contractual protections with our providers to ensure a comparable level of protection wherever data is processed. All traffic to Winning Ground is encrypted in transit with TLS, and data at rest is encrypted by our infrastructure providers. Passwords are stored only as salted hashes.

We keep your account information for as long as your account is active. When you delete your account we delete your user record, your linked Google and Apple identities, and your sessions from our production systems within 30 days. Encrypted backups roll off on their own schedule and are fully purged within 90 days.

Records we are required to retain for legal, accounting, or fraud-prevention reasons are kept for the period the law requires, and are then deleted.

You can, at any time:

• Access the personal information we hold about you, and ask how it has been used and disclosed;
• Correct anything that is inaccurate or incomplete;
• Delete your account and the personal information attached to it;
• Withdraw consent and stop using the service, subject to any legal or contractual restrictions;
• Unlink Google or Apple sign-in from your account while keeping the account itself.

We answer requests within 30 days. If we cannot act on a request, we will tell you why. We do not charge for these requests, and we will never discriminate against you for making one.

To delete your Winning Ground account and the personal information associated with it, send us a deletion request through our contact form from the email address on the account, or ask an administrator of your organization to remove you. We will confirm the request, delete your user record, linked Google and Apple identities, and sessions within 30 days, and confirm when it is done.

Records that belong to an organization you worked in — for example a canvassing visit you logged — may be retained by that organization as its own business record, with your identity removed where we are able to do so.

Campaigns and organizations use Winning Ground to hold information about their supporters, members, and constituents. That information belongs to the organization. We process it only to provide the service to them, under our agreement with them — we do not use it for our own purposes, sell it, or use it to train models.

Each organization's data is isolated from every other organization's. If you are a constituent or supporter and want your information accessed, corrected, or deleted, please contact the organization that holds it — they control it and can act on your request directly. If you are not sure who that is, contact us and we will help you route the request.

We use cookies that are strictly necessary to operate the service: a session cookie that keeps you signed in, and security cookies that protect against cross-site request forgery. These cannot be turned off without breaking sign-in.

We also use a small amount of first-party analytics to understand feature usage and page performance. We do not use advertising or cross-site tracking cookies, and we do not allow third parties to track you across other sites through Winning Ground.

Winning Ground is a tool for organizations and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as the product changes. When we make a material change, we will update the date at the top of this page and, where the change meaningfully affects how we handle your information, notify account holders by email before it takes effect.

For any privacy question, or to make an access, correction, or deletion request, reach us through our contact form. Please tell us it is a privacy request so we can route it correctly.

If you are not satisfied with our response, you may bring a complaint to the Office of the Privacy Commissioner of Canada at priv.gc.ca.