Privacy Policy

Last updated: 16 July 2026

Keystone ("we," "us") is a product of Cyber Works of Northern Virginia, LLC ("NovaCyberWorks"). This policy explains what we collect, how we use it, and the choices you have. It is provided for transparency and is not legal advice; a campaign's own counsel should review data-handling obligations that apply to it.

What we collect

Account information you provide (name, email, organization) and, once you connect an integration, the campaign data that integration returns — for example donations, expenditures, volunteer activity, messages, mentions, and calendar events. We store credentials for connected services in encrypted form and use them only to retrieve your data.

How we use it

We use your data to operate the service: to ingest, correlate, and display your common operating picture, to evaluate the alerts you configure, and to maintain the security and reliability of the platform. We do not sell your data. We do not use donor information for advertising.

Isolation and security

Every record is scoped to your account and isolated from other tenants. Connected-service credentials are envelope-encrypted at rest and are never returned by the API. Access to the platform requires authentication, and privileged actions are audited.

Data retention and deletion

We retain your data for as long as your account is active. You may request export or deletion of your account's data; on deletion we remove your campaign records and destroy the associated encrypted credentials.

Third parties

We rely on infrastructure and payment providers (for example Cloudflare for hosting and Stripe for billing) that process limited data on our behalf under their own terms. We integrate with the services you explicitly connect.

Contact

Questions about this policy or your data: privacy@keystonecampaign.com.