RMET Strategies LLC ("RMET Strategies," "we," "us," or "our") builds and operates software tools used by campaigns, committees, advocacy organizations, and the firms that serve them. This policy explains what personal information we collect, how we use it, and the choices available to you.
It applies to rmetstrategies.com and to the software applications we build, host, and operate for our customers (together, the "Services").
There are two kinds of data here, and they're treated differently. Account data is information about you as a customer — we control that. Customer content is the files and records you upload or connect to our Services. We process customer content only to run the Service for you, on your instructions.
1. Information we collect
Account data
When you create an account or contact us, we collect your name, email address, organization, and — if you subscribe to a paid plan — billing contact details. We also keep a record of your plan, invoices, and support correspondence.
Payment information
Subscriptions are processed by Stripe. Card numbers are submitted directly to Stripe and are never stored on our systems. We receive only a payment token, the last four digits, the card brand, and the transaction result.
Usage and log data
We record standard technical information when you use the Services: IP address, browser and device type, pages and features accessed, timestamps, and error and performance data. We use this for security, debugging, abuse prevention, and understanding which features are actually used.
Cookies
We use cookies that are necessary to operate the Services — session and authentication cookies, and cookies that remember display preferences. We do not use advertising or cross-site tracking cookies. Blocking cookies will prevent you from staying signed in.
Customer content
Depending on the application, you may upload or connect files and records that contain personal information — for example email addresses and phone numbers in a contact list, donor or supporter records, voter file extracts, or the contents of email and SMS messages. We process this content to provide the Service and for no other purpose.
2. How we use information
- To provide, operate, secure, and improve the Services
- To create and administer accounts and process subscription payments
- To respond to support requests and communicate about your account, including service notices and changes to terms
- To monitor for abuse, fraud, and violations of our terms
- To meet legal, tax, and accounting obligations
We do not sell personal information. We do not use customer content to train machine learning models, and we do not use one customer's content to build features or data products for another customer. Aggregated, de-identified usage statistics that cannot reasonably identify any person or organization may be used to improve the Services.
3. How we share information
We share personal information only in these circumstances:
- With subprocessors that provide the infrastructure the Services run on — cloud hosting and databases, email delivery, error monitoring, and payment processing — under contracts limiting their use of the data to providing services to us. A current list is available on request.
- At your direction, when you connect a third-party system to one of our Services. Data you send to a connected system is then governed by that system's own privacy policy.
- When required by law, including in response to lawful requests from public authorities, subpoenas, or court orders. Where we are permitted to do so, we will notify you first.
- To protect rights and safety, where we reasonably believe disclosure is necessary to prevent fraud, abuse, or harm.
- In a business transfer, if RMET Strategies is involved in a merger, acquisition, or sale of assets. We will provide notice before personal information becomes subject to a different privacy policy.
4. Your responsibilities as a customer
If you upload personal information about other people, you are responsible for having the legal right to do so and for providing any notices or obtaining any consents required by law. For that data, you are the controller and we act as your processor or service provider. If an individual contacts us about data you uploaded, we will refer them to you.
5. Data retention
Account data is retained for as long as your account is active, and afterward as needed for legal, tax, and accounting purposes. Customer content is retained for the period set out in your agreement with us — uploaded media and processing artifacts are deleted on a rolling schedule — and is deleted within 30 days of a written deletion request or account closure, except where we are required to keep it. Backups age out on their own schedule, typically within 35 days.
6. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, encryption at rest for stored data, role-based access controls, and limiting access to personnel who need it. Access to production systems is restricted and logged. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we become aware of a breach affecting your data, we will notify you without undue delay and provide the information you need to meet your own notification obligations.
7. Your rights and choices
Depending on where you live, you may have the right to request access to, correction of, or deletion of personal information we hold about you, to request a copy in a portable format, and to opt out of certain processing. To make a request, email privacy@rmetstrategies.com. We may need to verify your identity before acting, and we will respond within the time required by applicable law.
You can opt out of product announcement emails at any time using the link in those messages. We will still send transactional notices about your account and the Services.
8. International users
Our Services are operated in the United States and intended for organizations operating in the United States. If you access them from elsewhere, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.
9. Children
The Services are directed to organizations, not to individuals under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. For material changes, we will notify account holders by email before the changes take effect.
11. Contact us
Questions, requests, or complaints about this policy or our privacy practices:
RMET Strategies LLC
35 Hodgdon Way, Bldg A
Portsmouth, NH 03801, United States
privacy@rmetstrategies.com
(202) 670-0684