Privacy Policy

Who we are

AdvocacyOS is operated by Ridge Policy Group. This policy explains what information we collect through AdvocacyOS, how we use it, and who else sees it. AdvocacyOS is currently offered on an invite-only pilot basis — this policy applies to that pilot and will be revised as the product and its terms mature.

Information we collect

We collect information in three ways:

• Account information. When you sign in, our authentication provider (Clerk) collects your name and email address. We do not see or store your password.
• Information you provide. Your organization's name, mission, website, and issue-area keywords (either entered directly or generated from a website you point us to during setup); the bills and legislative memos you track, tag, or take notes on; any messages you send us through the app; and, for firm accounts, client-engagement and time-tracking records.
• Usage information. Which features you use and how often, recorded as a feature name, your organization ID, and a timestamp — never the content of what you asked for. We use this to understand demand and manage cost during the pilot, not to build a profile of you individually.

How AI is used on your information

Several AdvocacyOS features — legislative relevance scoring, bill analysis, prospect reports, talking points, and similar tools — send relevant text (your organization's profile, a bill's text, or content you submit) to Anthropic's Claude API to generate a result. This is an automated processing step, not a human review, and the request is made under Anthropic's standard commercial API terms. We do not use your data to train our own models. AI-generated content is a starting point, not verified fact — every AI output in the product carries its own notice to that effect and should be checked before you rely on or share it.

Who else sees your information

We do not sell your information. It is shared only in these circumstances:

• Service providers who host or operate parts of AdvocacyOS on our behalf: Clerk (sign-in), Neon (database hosting), Vercel (application hosting), Anthropic (AI processing, above), LegiScan (the source of the legislative data we display), and Resend (transactional email, e.g. invitations). Each only receives what it needs to perform its function.
• Your own team. Everyone you invite into your organization's AdvocacyOS workspace can see that workspace's data.
• A firm you've engaged. If your organization works with a lobbying firm through AdvocacyOS, that firm's staff can see your workspace's data as part of that engagement — the same way they would if you shared it with them directly.
• Legal reasons, if we're required to by law, or to protect the security of the platform or its users.

Data retention and deletion

We keep your information for as long as your account is active. If you'd like your account or organization's data deleted, contact us using the address below and we'll work with you on it — during this pilot, that's a manual process, not a self-serve button.

Security

We use industry-standard providers (Clerk, Neon, Vercel) that encrypt data in transit and at rest, and we scope access internally so that, by default, one organization's data isn't visible to another's. No system is perfectly secure; if we ever become aware of an incident affecting your data, we will tell you.

Children's privacy

AdvocacyOS is a business tool for advocacy organizations and is not directed at or knowingly used by children.

Changes to this policy

We may update this policy as AdvocacyOS moves past its pilot phase. We'll update the date above when we do, and for material changes, we'll let active accounts know directly.

Contact us

Questions about this policy or your data: jhigh@ridgepolicygroup.com.