Privacy and Data Policy

Effective date: May 31, 2026

This Privacy and Data Policy explains how Aidan Hill for Berkeley City Council District 7, 2026 ("the Campaign," "we," "us," or "our") collects, uses, stores, shares, retains, and protects information. It also explains the choices and rights available to people whose information we collect.

This policy applies to information collected through our website, online forms, donations, volunteer signups, event registrations, surveys, campaign communications, outreach activities, financial transactions, campaign operations, civic engagement, community organizing, public service activities, and related services.

We may collect information directly from you, automatically when you use our website or services, from public sources, from service providers that support our operations, or from other lawful sources.

We may update this policy to reflect changes in our operations, legal obligations, technology, or privacy practices. If we make material changes, we will update the effective date and post the revised policy on this website.

Who we are

Aidan Hill for Berkeley City Council District 7, 2026

2512 Telegraph Avenue, PMB #142

Berkeley, CA 94704

Website: www.aidanhill.vote

Privacy questions or requests: support@aidanhill.vote

Campaign identification: FPPC ID 1481885

Information we collect

We collect information you provide directly, information obtained from lawful public and organizational sources, information generated through your interactions with our services, and limited technical information when you use our website.

Information we collect may include your name, email address, phone number, mailing address, ZIP code, employer, occupation, donation information, payment records, volunteer interests, event registrations, endorsement submissions, petition or pledge forms, survey responses, communications preferences, social media usernames or handles, messages you send to us, and photographs, videos, or other content you voluntarily provide.

We may collect employer, occupation, contribution, expenditure, and payment-related information where required for campaign finance, fundraising, accounting, compliance, or reporting purposes.

We may also maintain outreach and organizing records related to campaign operations, civic engagement, volunteer coordination, supporter engagement, constituent communications, fundraising, community organizing, issue advocacy, public service work, and related activities. These records may include contact history, event participation, volunteer activity, canvassing records, phone banking or texting responses, meeting notes, supporter interactions, and similar operational records.

If you choose to connect a financial account through a service provider such as Plaid, we may receive financial account information authorized by you. This may include account information, account ownership information, account balances, transaction information, recurring transaction information, and related financial data. We use this information only for authorized financial management, budgeting, transaction reconciliation, cash flow analysis, reporting, compliance, and related operational purposes.

We do not request or store your financial institution username or password. Financial account connections are handled through the applicable third-party financial data provider.

When you visit our website, we may collect limited technical information through standard website technologies. This may include IP address, browser type, operating system, device type, referral source, pages visited, dates and times of access, website interactions, and other diagnostic or usage information.

Where information comes from

Information may come from website forms, donation pages, payment processors, volunteer registrations, event registrations, surveys, petitions, pledge forms, email communications, text messages, phone calls, in-person conversations, sign-in sheets, public meetings, public social media interactions, publicly available records, lawful voter information sources, government records, service providers acting on our behalf, financial service providers authorized by users, and other lawful sources used for campaign operations, civic engagement, community organizing, fundraising, financial management, compliance, or public service activities.

How we use information

We use information to operate, improve, and support campaign operations, civic engagement, community organizing, fundraising, volunteer coordination, communications, events, financial management, compliance, and public service activities.

This includes communicating with supporters, donors, volunteers, endorsers, community members, and service users; organizing canvassing, phone banking, texting, events, and other outreach; processing donations; managing financial records; complying with campaign finance and other legal obligations; responding to requests; improving operations; and maintaining records necessary to carry out campaign and public-facing work.

We may also use information to support ongoing civic engagement, issue advocacy, volunteer coordination, future campaign activity, community organizing, or related public service work connected to the Campaign's mission, unless you ask us not to or applicable law requires a different approach.

We do not sell personal information, financial information, donor information, supporter information, or website visitor data. We do not use personal information for unrelated commercial purposes.

Data access and handling

Access to personal information is limited to authorized people and service providers who need access to perform legitimate campaign, organizing, operational, financial, compliance, security, or technical functions.

This may include campaign staff, authorized volunteers, consultants, contractors, payment processors, website providers, communications tools, financial service providers, security providers, and other service providers acting on our behalf.

We seek to collect only the information reasonably necessary for operational purposes, reduce unnecessary duplication, restrict access according to role and responsibility, and remove access when it is no longer required.

Financial information and connected account data are subject to additional access limits. Access is limited to authorized personnel and systems that need the information for financial management, budgeting, reconciliation, reporting, compliance, security, or related operational purposes.

Use of AI and automated tools

We may use artificial intelligence, machine-assisted tools, analytics tools, and other software systems in a limited, supervised, and human-reviewed role to support campaign and organizing operations.

Examples may include drafting communications, preparing website content, creating flyers and outreach materials, organizing records, summarizing notes, assisting with research, improving workflows, supporting volunteer coordination, preparing reports, categorizing transactions, flagging potential compliance issues, and assisting with financial management or operational tasks.

Where practical, we seek to minimize, redact, anonymize, or otherwise limit personal information before using AI tools. We do not intentionally provide full voter files, complete supporter databases, sensitive financial account credentials, government-issued identification numbers, protected health information, or other highly sensitive records to general-purpose AI systems unless specifically required for an authorized function and subject to appropriate safeguards.

AI-generated content, recommendations, summaries, classifications, or analyses are reviewed by a person before being relied upon for significant operational, financial, compliance, or public-facing decisions.

AI tools are used to support human decision-making, not replace it.

Public-facing visual content substantially generated by AI will be labeled where appropriate.

Automated processing and prioritization

We may use software systems, analytics tools, and AI-assisted technologies to organize, sort, categorize, tag, prioritize, or route information and requests.

Examples may include prioritizing support requests, identifying duplicate records, categorizing transactions, flagging potential compliance issues, organizing volunteer activity, summarizing communications, or identifying items that may require human review.

These tools are used to improve efficiency, consistency, security, and service quality. Final decisions regarding campaign operations, financial management, compliance matters, volunteer participation, donations, access to services, or other significant actions are not made solely by automated systems.

How we share information

We share information only as reasonably necessary to operate the Campaign, support related organizing work, provide requested services, maintain security, process transactions, comply with legal obligations, or protect the rights and safety of the Campaign and others.

Information may be shared with trusted service providers that support website hosting, communications, fundraising, payment processing, financial management, data storage, analytics, security, compliance, scheduling, outreach, voter contact, volunteer coordination, and other operational functions.

Information may also be shared with campaign staff, authorized volunteers, consultants, contractors, legal or compliance advisors, financial service providers, and other people or entities that need access to perform legitimate campaign or operational work. Access is limited where appropriate and may be subject to confidentiality expectations, contractual obligations, or non-disclosure requirements.

We may disclose information when required by campaign finance law, election law, tax law, court order, subpoena, government request, legal process, or other applicable legal obligation.

We do not sell personal information or share personal information for unrelated commercial use.

Donations and campaign finance disclosures

If you donate to the Campaign, your information may be collected and processed by third-party fundraising platforms, payment processors, banks, compliance tools, or other service providers involved in processing and recording contributions.

Certain donor, contribution, expenditure, employer, occupation, address, and payment-related information may be collected, maintained, reported, or disclosed as required by campaign finance, election, accounting, tax, or other applicable law.

Campaign finance, contribution, expenditure, accounting, tax, and compliance records may be retained for the period required by applicable law, even if you request deletion of other personal information.

Connected financial accounts

If you choose to connect a financial account through Plaid or another financial service provider, you authorize that provider to collect and share selected financial account information with us for the purposes described in this policy.

Connected financial account information may be used to support account verification, account ownership review, transaction tracking, donation and expenditure reconciliation, balance reporting, budgeting, cash flow analysis, campaign finance reporting, accounting, compliance, and related financial management functions.

We do not sell connected financial account information. We do not use connected financial account information for credit underwriting, lending decisions, insurance eligibility, employment screening, tenant screening, debt collection, or unrelated commercial purposes.

You may revoke access to connected financial accounts by using available account settings, disconnecting the account through the applicable service, or contacting us at support@aidanhill.vote.

Text, phone, and email communications

If you provide your contact information, we may contact you by email, phone, text message, or similar means for campaign, volunteer, event, fundraising, civic engagement, organizing, public service, or related purposes.

Campaign texts may be sent using peer-to-peer, application-to-person, or similar messaging tools. Message and data rates may apply. You may opt out of text messages by replying STOP where available or by contacting us directly.

Campaign emails may include unsubscribe options where appropriate. You may also request removal from communications by contacting support@aidanhill.vote.

Cookies, analytics, and website tools

Our website may use cookies, analytics tools, security tools, logs, and similar technologies to operate and secure the website, remember preferences, understand general traffic patterns, improve performance, measure engagement, maintain reliability, and support campaign and organizational operations.

These tools may collect limited technical and usage information such as IP address, browser type, device type, operating system, referral source, pages visited, dates and times of access, website interactions, and other diagnostic information.

Some website tools may be provided by trusted third-party service providers that assist with hosting, analytics, security, communications, payment processing, fundraising, financial management, scheduling, or other operational functions. These providers may process information on our behalf subject to contractual or legal obligations.

Most browsers allow users to control cookies through browser settings. You may block, restrict, or delete cookies at any time. Disabling certain cookies may affect website functionality and limit access to some features.

We do not sell website visitor data. If we add advertising, audience, retargeting, or third-party tracking tools in the future, this policy will be updated to reflect those practices.

Data retention and disposal

We retain information only for as long as reasonably necessary to provide services, operate the Campaign, maintain security, support financial management, comply with legal obligations, preserve campaign finance records, resolve disputes, enforce agreements, and support related civic engagement, organizing, public service, or compliance activities.

Financial account information obtained through Plaid or other financial service providers is retained only as long as reasonably necessary for authorized financial management, budgeting, transaction reconciliation, reporting, compliance, security, accounting, or operational purposes.

Upon account closure or a verified deletion request, personal information and connected financial data that are no longer required for legal, accounting, auditing, campaign finance, fraud prevention, security, dispute-resolution, or operational purposes will be deleted, de-identified, or anonymized within a reasonable period, generally not exceeding 90 days.

Certain records may be retained longer where required or permitted by applicable law. This may include campaign finance records, contribution records, expenditure records, tax records, accounting records, legal records, security logs, fraud prevention records, and records necessary to document compliance obligations.

We periodically review retained information and securely dispose of information that is no longer required for operational, legal, compliance, security, or recordkeeping purposes.

Data security

We use reasonable administrative, technical, and operational safeguards to protect information from unauthorized access, disclosure, alteration, loss, or misuse.

These safeguards may include password management, multi-factor authentication for critical systems, limited access controls, role-based permissions where available, encrypted transmission, encryption at rest where supported by service providers, secure cloud services, locked devices, access reviews, removal of unnecessary local copies, and removal of access when personnel or service providers no longer need it.

Administrative access to systems that process or control financial information is limited to authorized users. Secrets, tokens, API keys, and similar credentials are not intended to be stored in public code repositories or shared through unsecured channels.

No system is completely secure, but we take steps to reduce unnecessary exposure and protect the information entrusted to us.

Children and minors

Our website and services are not directed to children under 13. We do not knowingly collect personal information from children under 13 online without appropriate permission.

We do not intentionally collect personal information from individuals under 18 for campaign work without appropriate authorization or supervision where required.

If minors participate in campaign or volunteer activities, they must have appropriate parent or guardian permission where required. If you believe a child has provided personal information to us without proper permission, contact support@aidanhill.vote, and we will review and remove the information where appropriate.

Your choices and privacy rights

You may ask to access, correct, update, limit use of, or delete certain personal information we maintain about you. You may also opt out of campaign emails, texts, phone calls, or other communications.

To make a privacy request, contact:

support@aidanhill.vote

Suggested subject line: Privacy Request

We may need to verify your identity before processing certain requests. Some requests may be limited where retention is required or permitted by law, including campaign finance, election, accounting, tax, compliance, security, fraud prevention, or recordkeeping obligations.

California privacy rights

If you are a California resident, you may have rights regarding access to certain personal information, correction of inaccurate information, deletion of certain information, and information about how your data is used, subject to legal exceptions and campaign-related obligations.

Where applicable, you may also have the right to know what categories of personal information we collect, the sources of that information, the purposes for collection and use, and the categories of service providers or third parties with whom information is shared.

To make a California privacy request, contact support@aidanhill.vote.

Third-party links and platforms

Our website, emails, texts, forms, and communications may link to third-party services such as donation pages, payment processors, financial account connection providers, forms, maps, event tools, social media platforms, or other external websites.

Those services operate under their own terms, privacy policies, and security practices. We are not responsible for the privacy or security practices of third-party sites or platforms that we do not control.

Changes to this policy

We may update this Privacy and Data Policy as campaign operations, tools, legal requirements, technology, financial integrations, security practices, or organizing practices change.

When we update this policy, we will revise the effective date above and post the updated version on this website.

Your continued use of our website or continued interaction with the Campaign after changes are posted means the updated policy will apply going forward.

Contact us

Questions, requests, or concerns about this policy or our data practices may be sent to: