1. Introduction
Conservative States, LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application, the organization pages we host for advocacy organizations, our iPhone, iPad, and Android apps (the "App"), our websites, and related services (collectively, the "Service").
By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
1.1 We Are Not a Government Service
Conservative States is an independent, privately operated service. It is not a government app and is not affiliated with, endorsed by, or operated by any government agency, legislature, elected official, or political party. The bills, votes, hearings, and legislator details we show are public records published by the legislatures on their official websites; we receive them through LegiScan, Congress.gov, Open States, and the legislatures' own member directories. Our sources page lists each legislature's official website so you can check any detail against the government's own record. Bill summaries, analyses, recommendations, and letter drafts are our own work, not statements of any government body.
Information about legislators and other public officials that appears in the Service, such as their names, offices, districts, official contact details, sponsorships, and votes, comes from those public records. It is not information about you, and this Privacy Policy covers only the information we collect about the people who use the Service.
2. Information We Collect
2.1 Personal Information You Provide
We collect information you voluntarily provide when you:
- Create an account (name, email address, password)
- Complete your profile (address information including street, city, state, and ZIP code)
- Give a title (such as Mr. or Ms.) and a phone number when a legislator's official contact form requires them to deliver your letter; both are kept on your profile and you can change or remove them in Settings
- Subscribe to a paid plan (your payment details are collected and processed by our payment processor, Stripe; we receive only limited billing information such as your billing status, the card brand, and the last four digits of the card)
- Connect third-party email services (Gmail or Outlook) for legislator communications
- Write to legislators through our platform, including any personal note you write to help draft a letter
- Choose the issues you care about, track bills, and record whether you support or oppose a bill
- Set notification preferences
- Sign up or take action on an advocacy organization's page (name, email address, address, and the consents you give that organization)
- Contact us with inquiries or feedback
2.2 Information Collected Automatically
When you access our Service, we may automatically collect:
- Device information (browser type, operating system, device model, App version, and device identifiers)
- Log data (IP address, access times, pages viewed, referring URLs)
- Usage information (features used, actions taken within the Service)
- Cookies and similar technologies on our websites
- In the App: an identifier generated for each installation (used to manage signed-in devices) and, if you allow notifications, a push-notification token
2.3 Political Opinions
The issues you choose, the positions you record on bills, and the letters you write reveal political opinions. We use them only to provide the Service to you: to recommend bills, to draft and send the letters you ask us to send, to share your actions with an organization whose page you acted on, and in aggregate, de-identified form to understand how the Service is used. We never sell them and never use them for advertising.
2.4 Information from Third Parties
If you choose to connect your Google or Microsoft account for email functionality, we receive limited information necessary to send emails on your behalf, including your email address and OAuth tokens. We do not access, read, or store the contents of your email inbox.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google and Microsoft access only to send the messages you ask us to send.
2.5 Device Permissions
The App may ask for permission to use certain features of your device. You can grant or revoke these permissions at any time in your device settings.
- Notifications. If you allow notifications, your device gives us a push token so we can alert you when a bill you follow moves or a hearing is coming up. Turning notifications off in your device settings stops these alerts.
- Biometric sign-in. If you enable Face ID, Touch ID, or fingerprint sign-in, the biometric check is performed by your device's operating system. Your biometric data never leaves your device and is not sent to or stored by us; we only learn whether the check succeeded.
The App does not use your device's location. Your legislative district comes from the address in your profile.
2.6 Organization Websites
Advocacy organizations can show their bills and action pages on their own websites using our WordPress plugin or our embeds. When you read a bill on such a website, the organization's site tells us which bill page or bill list it showed you, when you click Take action, and when you open a bill document, together with the address of the page you were on, the website that referred you, any campaign tags in the link you followed, and a random identifier for your browser tab. The identifier is kept in your browser's session storage, not in a cookie, and is discarded when you close the tab; it lets us count how many people read a bill and whether a letter was sent from that visit. These records do not identify you: no name, email address, account, or IP address is stored with them. We use them to show the organization how its bills are read on its website. The organization can turn this reporting off in the plugin's settings. The public bill pages we host for organizations report the same views in the same way.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Create and manage your account
- Identify your legislative representatives based on your address
- Enable you to send letters to legislators through connected email accounts, your mail app, or the official contact channels an office provides
- Send you bill notifications and updates you have opted into
- Send push notifications you have opted into in the App
- Process subscription payments and manage your plan through our payment processor
- Generate bill summaries and draft letters with artificial intelligence (see Section 3.1)
- Respond to your comments, questions, and requests
- Monitor and analyze usage trends to improve user experience
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
We use your information only for the purposes described in this Privacy Policy. We do not use it for any other purpose without first telling you and, where the law requires, asking for your consent.
3.1 Artificial Intelligence
We use OpenAI's API to summarize and analyze bills and to draft letters. When you ask us to draft a letter, the bill's details, your position on it, and any note you wrote are sent to OpenAI to produce the draft. Your name and address are added to the letter afterward and are not sent to the AI. Data sent through OpenAI's API is not used to train its models under OpenAI's API terms.
The support chat on our website is also answered by OpenAI's API. When you use it, the messages you type, the help articles that match your question, and a short description of your account (the kind of account, your plan, your state, and, for organization staff, your organization and role) are sent to OpenAI to produce the reply. Your password, payment details, and letters are never sent. If you ask for a person, we email the conversation to our support team, who reply to the email address on your account.
4. How We Share Your Information
We may share your information in the following circumstances:
4.1 With Your Consent
When you send a letter to a legislator through our Service, your name, address, email address, and the letter's content are shared with the intended recipient as part of that communication. Depending on how the office accepts mail, the letter travels through your own connected email account or mail app, through the office's official web contact form, or, for members of Congress, through the constituent-communication systems operated by the House and Senate.
4.2 Organizations You Join
If you sign up or take action on an advocacy organization's page, the information you provide there, the letters you send from it, and the consents you give are shared with that organization. The organization uses that information under its own privacy practices, which we do not control, and may contact you according to the consents you gave. Organizations may also access their own supporter data through our API and tools they connect, such as a CRM. An organization also sees how its bills are read on its website and on the pages we host for it, as described in Section 2.6; those counts never name you. You can withdraw consent at any time using the unsubscribe link in any message or by contacting the organization or us.
4.3 Service Providers
We share information with third-party vendors who perform services on our behalf. These providers may use the information only to provide their services to us. They include:
- Amazon Web Services (hosting and data storage)
- Postmark (email delivery)
- Geocodio (finding your legislative districts from your address)
- OpenAI (bill summaries, letter drafting, and the support chat)
- Stripe (subscription payments; we never see or store your full card number)
- Expo, Apple, and Google (delivering push notifications to the App)
- PostHog and Google Analytics (usage analytics)
- Meta (measuring whether our ads led to sign-ups, as described in Section 4.4)
- AppsFlyer (measuring which ads led to installs of the App, as described in Section 4.4)
- Vibe (measuring whether our streaming-television ads led to visits to our website, as described in Section 4.4)
- Spotify (measuring whether our podcast ads led to visits to our website, as described in Section 4.4)
4.4 Advertising Measurement
We advertise on Meta (Facebook and Instagram) and on streaming and connected television. To learn which ads lead people to sign up, we record the campaign tags in the link you followed to our website and, if you clicked a Meta ad, Meta's click identifier. We keep these with your account.
Meta. Meta's measurement code runs only on our sign-up page, and only before you have an account. It is never loaded on any page you use after signing in, and we never send Meta information about how you use the Service, the bills you follow, or the letters you send. We tell Meta about three events only: that you created an account, started a free trial, or began a paid subscription. With those events we send your email address, name, city, state and ZIP code in a scrambled (hashed) form, so Meta can match them to its own users without receiving them in readable form, along with the IP address and browser details from your sign-up or checkout. We delete that IP address and browser information from our records 30 days after we last record it. If your browser sends the Global Privacy Control signal, we do not load Meta's code and we do not send Meta any information about you. We also ask Meta to apply its Limited Data Use restrictions to these events where state privacy laws call for it.
AppsFlyer. The App uses AppsFlyer to learn which ad, if any, led to the App being installed. AppsFlyer receives its own identifier for the App on your device, Apple's identifier for our apps on your device (on iPhone and iPad) or Google's advertising ID (on Android, unless you have deleted it in your phone's settings), the device's IP address, and the same few events: that the App was installed and opened, that you created an account, started a free trial, or began a paid subscription. It passes those events to the ad networks that ran the ad. Nothing about how you use the App is sent. On iPhone and iPad, the App asks for your permission to track the first time it opens, using Apple's standard prompt. If you allow it, AppsFlyer and the ad networks also receive Apple's advertising identifier, which lets them match the install to the ad you saw. If you decline, the advertising identifier is never read or sent, we pass no device identifier along with your account's events, and Apple reports the install to the ad network in aggregate without identifying your device. We keep the AppsFlyer identifier and the ad the install came from with your account, and delete the IP address and the Apple and Google identifiers 30 days after we record them. You can turn all of this off in the App under Settings, Privacy, "Share ad measurement", and on iPhone and iPad you can withdraw tracking permission at any time in the device's Settings under Privacy & Security, Tracking.
Streaming television. To measure whether our television ads work, our website shares limited information about your visit with our measurement partner, Vibe: your IP address, the date and time of the visit, and whether you followed a link to the App Store or Google Play. Vibe uses this information to match website visits to households that were shown our ads and reports results to us in aggregate. We do not share your name, email address, profile address, or the bills and legislators you follow for advertising purposes. If your browser sends the Global Privacy Control signal, our website does not send your visit to Vibe.
Podcast advertising. To measure whether our podcast ads work, our website shares limited information about your visit with Spotify: your IP address, a cookie identifier set by Spotify's measurement code, the page you visited, the date and time, and whether you followed a link to the App Store or Google Play. Spotify uses this to match website visits to people who heard our ads and reports results to us in aggregate. If your browser sends the Global Privacy Control signal, Spotify's code is not loaded and your visit is not sent.
4.5 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.6 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of sensitive data in transit and at rest
- Secure password hashing using industry-standard algorithms
- OAuth token encryption for connected email services
- Two-factor authentication options for account security
- Regular security assessments and updates
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain certain information as required by law or for legitimate business purposes, such as:
- Compliance with legal obligations
- Resolution of disputes
- Enforcement of our agreements
- Fraud prevention
Letter history is retained for a reasonable period to prevent abuse and ensure service quality. Support chat conversations are deleted 90 days after the last message. Records of visits to organization websites and to the public bill pages we host (Section 2.6) are deleted after 400 days.
When you delete your account, we immediately erase the information that identifies you. Some de-identified activity records are kept. Our account deletion page lists exactly what is deleted and what is kept.
7. Your Rights and Choices
7.1 Account Information
You may update or correct your account information at any time through your account settings. You can delete your account yourself in Settings on the website or in the App. See how to delete your account. If you cannot sign in, email us and we will delete it for you. Deleting the App from your device does not delete your account.
7.2 Email Connections
You may disconnect your Gmail or Outlook account at any time in Settings. This will revoke our access to send emails on your behalf.
7.3 Notifications
You may opt out of bill notification emails by adjusting your notification preferences in Settings or by disabling notifications for individual bills. You can turn off push notifications in the App's Settings or in your device's settings.
7.4 Cookies and Device Settings
Most web browsers accept cookies by default. You can usually modify your browser settings to decline cookies, but this may affect your ability to use certain features of our Service. When you arrive from an ad or a tagged link, we set a cookie that remembers the campaign until you sign up; Meta's code on our sign-up page sets its own cookies (see Section 4.4). The visit identifier described in Section 2.6 is kept in session storage, which your browser clears when you close the tab; it is not a cookie. On your mobile device, you can manage the App's permissions, including notifications and biometric sign-in, in your device settings.
7.5 Data Access and Portability
You may request access to the personal information we hold about you. Where applicable, you may also request a copy of your data in a portable format.
7.6 Advertising Measurement
You can opt out of advertising measurement on our websites by turning on Global Privacy Control in your browser or a browser extension that supports it; when we detect that signal, our websites do not load Meta's or Spotify's code and do not send your visit to Vibe or Spotify. In the App, turn off "Share ad measurement" under Settings, Privacy; on iPhone and iPad you can also decline Apple's tracking prompt, or withdraw permission later in the device's Settings under Privacy & Security, Tracking. You can also opt out by emailing us at the address in Section 12.
8. Children's Privacy
Our Service is intended for adults 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete that information promptly.
9. Third-Party Links and Services
Our Service may contain links to third-party websites or services, including state legislature websites, LegiScan, the websites of advocacy organizations, and the app stores through which the App is distributed. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
The App is distributed through the Apple App Store and Google Play. Apple and Google may collect information about your download and use of the App under their own privacy policies, which we do not control.
10. State-Specific Privacy Rights
California Residents
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale or sharing of your information. We do not sell personal information. Sending the advertising measurement events described in Section 4.4 to Meta, AppsFlyer, Vibe, and Spotify may be considered "sharing" for advertising under California law; you can opt out by turning on Global Privacy Control in your browser before you visit or sign up on our websites, or by turning off "Share ad measurement" in the App's Settings.
Other States
Residents of other states with privacy laws may have similar rights. Please contact us to exercise any applicable rights.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and in the App and updating the "Effective Date" above. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
Conservative States, LLC 625 Bakers Bridge Ave, Ste 105-94 Franklin, TN 37067