Data Processing Terms

1. Definitions

• "Campaign Data" means the supporter, volunteer, donor, and other personal information a campaign collects, stores, or processes through the Electbase platform for its own purposes — as distinct from the campaign's own account and billing information, which the Platform Privacy Policy covers directly.
• "Campaign," "you," and "your" mean the account holder that determines the purposes of processing Campaign Data — the controller or business, as those terms apply under applicable law.
• "Electbase," "we," "us," and "our" mean BlueList AI LLC, acting as your processor, service provider, or contractor for Campaign Data, as those terms apply under applicable law.

2. Subject matter and duration

Electbase processes Campaign Data for as long as your account remains active, plus the retention window described in the Platform Privacy Policy after your subscription ends.

3. Nature and purpose of processing

Electbase processes Campaign Data to host and secure your published site; receive, record, and store form, volunteer, and donation submissions; operate the integrations you configure; provide support; and perform backups for disaster recovery — all to provide the Service you've subscribed to, not for Electbase's own independent purposes.

4. Categories of data and data subjects

Campaign Data typically includes the name, email address, phone number, mailing address, and (on donation forms) contribution information of your site's visitors, supporters, volunteers, and donors — whatever fields your published forms collect. You control which fields you enable and are responsible for ensuring your own collection and use of them is lawful.

5. Electbase's obligations as your processor

• Process only on your instructions. We process Campaign Data to provide the Service as you've configured it, and don't use it for our own independent purposes, our own advertising, or to advertise to your supporters.
• Confidentiality. Personnel who can access Campaign Data are bound by confidentiality obligations.
• Security. We maintain the administrative, technical, and organizational safeguards described in the Platform Privacy Policy's Security section.
• Sub-processors. We use the vendors listed in the Platform Privacy Policy's provider table to help operate the Service. Each is bound to protect Campaign Data at least as strictly as we are, and none is authorized to use it for its own purposes.
• Assistance with your obligations. If we receive a request from one of your supporters about their own information, we'll forward it to you and assist as reasonably necessary rather than respond to it directly, since you control that relationship — see the Platform Privacy Policy's "Privacy choices and requests" section.
• Deletion or return. When your account closes, Campaign Data is deleted or de-identified per the retention window in the Platform Privacy Policy, except where we're required to keep it longer by law or for a legal claim.
• Incident notification. If we discover a security incident affecting your Campaign Data, we'll notify you without undue delay and provide the information reasonably available to help you meet your own notification obligations.

6. Sub-processor changes

If we add a new sub-processor that will handle Campaign Data, we'll update the provider table in the Platform Privacy Policy. If you have a compliance reason to object to a specific new sub-processor, contact us and we'll work with you in good faith on it.

7. International transfers

Electbase's infrastructure runs in United States regions, as described in the Platform Privacy Policy. We don't currently represent participation in any specific international-transfer framework (such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses) — if your campaign operates in a jurisdiction that requires one, contact us before enabling features that would send that jurisdiction's data through the Service.

8. Audits and assessments

On reasonable written request, no more than once per year, we'll provide information reasonably necessary to demonstrate our compliance with this page — for example, a summary of our security practices. We don't offer on-site audits at this stage of the Service; if your organization has a specific assessment requirement, contact us and we'll see what we can accommodate.

9. Liability

Nothing in this page expands either party's liability beyond what the Terms of Service already set out.

10. Changes to these terms

We may update these terms as the Service and applicable requirements evolve. We'll update the effective date above, and for material changes we'll take reasonable steps to notify active account holders.

11. Contact

Questions about these terms, or a request for a formal countersigned copy: contact us.