It is easy to get lost in the minutiae of privacy policies and terms of service, but what matters most is the values driving the policies. You can read our values around data here. You can also refer to our Terms of Service and our Data Processing Agreement.

Privacy Policy

Last Updated: August 28, 2026

Data Management and Compliance, Inc. DBA Warchest (“Warchest”, “we”, “us”, our”) offers software products and services, referred to as the “Site” or “Services” in this Privacy Policy.

This Privacy Policy describes how we protect, collect, and use your personal information when you use our Site or Services. We are committed to ensuring the privacy and security of your data while providing you with exceptional service. This Policy is governed by the laws of the Commonwealth of Massachusetts.

Warchest operates a software platform that enables political campaigns, political action committees (PACs), and other political organizations (“Customers”) to manage campaign finance data and prepare filings with the Federal Election Commission (FEC) and other regulatory bodies. In providing these Services, Warchest handles two distinct categories of data:

Information We Collect Directly (Controller Data).

When you create an account, visit our website, or interact with our team, we collect information about you as described below. For this data, Warchest acts as the controller, meaning we determine the purposes and means of processing.

Information Our Customers Enter Into the Platform (Customer Data).

Our Customers input campaign finance records, donor information, contribution and expenditure data, committee details, and other organizational data into the platform to use our Services. For this data, Warchest acts as a processor or service provider, meaning we process it solely on our Customers’ behalf and under their instructions. Our handling of Customer Data is described below and governed in detail by the Data Processing Addendum to our Terms of Service.

Information We Collect Directly

When you interact with Warchest as a user of our Site or Services, we collect the following categories of personal information:
Account and Contact Information. Your name, email address, company or organization name, and role or title, provided when you create an account or contact us.

Payment Information. Billing details necessary to process transactions for our Services. We use third-party payment processors and do not store full payment card numbers on our systems.

Usage and Technical Data. Information about how you interact with our platform, including which screens you navigate to, which in-app actions you take, browser type, device type, IP address, approximate location, and session timing. If you accept analytics cookies, this data is collected through PostHog, as described in the “How We Use Cookies” section below.

Communications. Records of your correspondence with our support team, feedback, or other communications you send us.

How We Use Controller Data

We use the personal information we collect directly for the following purposes:

Providing, operating, and maintaining our Services and your account
Processing transactions and sending related notices
Responding to your inquiries and providing customer support
Improving, personalizing, and developing our platform
Sending service announcements and, where you have opted in, marketing communications
Ensuring the security and integrity of our Services
Complying with legal obligations

Legal Basis. We process Controller Data on the following bases: (a) performance of our contract with you, to provide and maintain the Services; (b) our legitimate interests in improving the platform, ensuring security, and communicating with users, where those interests are not overridden by your rights; and (c) your consent, where applicable (for example, analytics cookies and marketing communications).

Retention. We retain Controller Data for as long as your account is active or as needed to provide the Services. After account termination, we retain personal information only as required to comply with legal obligations, resolve disputes, or enforce our agreements. Specific retention periods vary by data type: account records are retained for three (3) years following account closure; transaction records are retained as required by applicable tax and financial record-keeping requirements; usage and analytics data is not retained in identifiable form other than a randomly assigned numeric user identifier, which is deleted within 90 days after a user terminates their Services Agreement.

After termination, we retain customer data, including fundraising records and donor information processed through the Services, for ninety (90) days to allow for data export and transition, unless a longer retention period is required by applicable law, regulation, or legal process, or is necessary to resolve disputes, enforce our agreements, or fulfill a legitimate business obligation.

At the end of the applicable retention period, we securely delete or anonymize personal data in accordance with industry-standard practices. Certain aggregated or de-identified data that cannot reasonably be used to identify an individual may be retained indefinitely for analytical and product-improvement purposes.

How We Use Your Personal Data

We use your Personal Data only for specific, limited purposes:

Providing and maintaining our services
Processing transactions
Responding to your inquiries
Improving our platform
Sending important service announcements
Data security

We implement a variety of technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. We secure the data you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure.

Customer Data We Process on Behalf of Our Customers

Our Customers use the Warchest platform to manage campaign finance operations, including donor records, contribution and expenditure data, committee information, vendor payment details, and other data necessary to prepare and file reports with the Federal Election Commission and applicable state agencies. This data may include the personal information of donors, vendors, staff, and other individuals associated with a Customer’s operations (“Customer Data”).

Our Role. Warchest processes Customer Data solely as a service provider acting on behalf of, and under the instructions of, each Customer. We do not determine the purposes or means of processing Customer Data. Each Customer is the controller of its own Customer Data and is responsible for its own compliance with applicable privacy and campaign finance laws.

How We Use Customer Data. We process Customer Data only to provide the Services our Customers have engaged us to perform, including data storage, report generation, filing transmission, and related platform functions. We do not sell, share, or use Customer Data for our own commercial purposes, including advertising or marketing. We do not use Customer Data to train artificial intelligence or machine learning models. We process fundraising and donor data on behalf of political campaigns and committees. This data may include information that reveals political affiliation by its nature. We treat this data as sensitive, do not sell it, and process it solely to provide our Services.

Safeguards. We apply technical and organizational security measures to Customer Data consistent with the protections described in the “Data Security” section of this policy. Our analytics tools are configured to mask donor names, dollar amounts, committee names, FEC identifiers, and other sensitive Customer Data fields in session recordings and product analytics.

Retention and Deletion. We retain Customer Data for the duration of the Customer’s subscription and as specified in our agreement with the Customer. Upon termination of a Customer’s account, we delete or return Customer Data in accordance with our Data Processing Addendum.

Data Subject Rights. If you are an individual whose personal information has been entered into the Warchest platform by one of our Customers (for example, as a donor or vendor), please direct any requests to access, correct, or delete your personal information to the relevant campaign, PAC, or organization that collected your data. They are the controller of your information and are responsible for responding to your request. We will cooperate with our Customers to fulfill verified data subject requests as required by law and as described in our Data Processing Addendum.

Governing Terms. The detailed terms governing our processing of Customer Data, including security measures, sub-processor management, breach notification, and data subject request handling, are set forth in the Data Processing Addendum to our Terms of Service.

Third-Party Service Providers

We engage third-party service providers that process personal data solely on our behalf and under our instructions to help us operate and maintain our Services (for example, cloud hosting, payment processing, and customer support). These service providers are bound by written agreements that restrict them from using personal data for any purpose other than performing the services we have engaged them to provide. We do not sell personal data, and we do not share personal data with third parties for their own commercial purposes, including targeted advertising.

How We Use Cookies

We use essential cookies necessary for our website’s core functionality. When you log into your Warchest account, we may also store a functional cookie on your device that contains your email address to facilitate login convenience on future visits. This cookie is retained temporarily and is used solely to streamline the authentication process for existing account holders. It is used exclusively for internal, first-party account servicing purposes. We do not sell, share, or disclose the information contained in this cookie to any third party. These cookies do not track your browsing activity for marketing purposes or collect personal information beyond what is required for the website to function properly.

You may clear the functional cookie at any time through your browser settings, which will require you to re-enter your login credentials on your next visit. Clearing your cookies will all clear preferences you’ve selected within the Warchest Cashflow application.

We use analytics cookies in the app to understand how the product is used and to fix problems. If you accept analytics cookies, we use PostHog, a vendor hosted in the United States. PostHog may store a cookie on your device and receive:

Which screens you navigate to and which in-app actions succeed (for example a save, import, or filing step);
Technical information such as browser type, device type, IP address, approximate location, session timing and approximate product performance;
Session recordings that allow us to review how a user interacts with our Site and Services. Recordings are configured to mask names, amounts, and other private on-screen text.

PostHog and Warchest do not sell or share any of this information. We use it to improve the product and to see whether features work. We do not personally view or send PostHog donor names, dollar amounts, committee names, Federal Election Commission (FEC) ids, file names, or search text you type into the product. You can decline to allow us to collect analytics cookies within the banner that once you’re logged into one of our apps.

How We Use AI

Warchest uses artificial intelligence tools to support certain internal business operations, including research, content drafting, data analysis, and software development. These tools help our team work more efficiently on behalf of our clients. AI is used as an assistive technology to augment our team’s work; it does not replace human judgment or decision-making.

Your Data and AI Systems

We limit the Customer Data that enters AI systems to what is necessary to improve the software’s functionality. Where feasible, we anonymize or redact identifying information before using AI tools. Some operational processes, such as address verification through third-party geocoding services, require the use of identifiable data; in those cases, the data is shared only with providers bound by contractual confidentiality and data protection obligations. When team members use AI tools in connection with client work, internal policies require the use of company-managed accounts with model training disabled, and the removal or replacement of client-identifying details where practicable.

We enforce data retention and deletion controls consistent with our broader data management policies, and we conduct periodic security reviews of all approved AI tools. With respect to AI tools used in our operations, we ensure that: (a) model training on inputs and outputs is contractually disabled on all company-managed AI accounts; and (b) access to Customer Data through AI tools is limited and subject to anonymization requirements in accordance with our internal AI policy.

Warchest is committed to using AI responsibly and in a manner consistent with the trust our clients place in us. If you have questions about our use of AI tools, please contact us at support@mywarchest.com.

Your Rights

If you are a Warchest account holder or website visitor (Controller Data): You have the right to access, correct, and request deletion of the Personal Data we have collected directly from you. You may also opt out of marketing communications at any time by using the unsubscribe link in any email or by contacting us. Where we process your data based on consent (such as analytics cookies), you may withdraw your consent at any time. To exercise any of these rights, contact us at support@mywarchest.com. We will respond to verified requests within 30 days, or within the timeframe required by applicable law.
If your personal information was entered into Warchest by one of our Customers (Customer Data): Please contact the campaign, PAC, or organization that collected your information. They are the controller of your data and will direct us to take any necessary action on their behalf. We do not respond directly to data subject requests for Customer Data except at the instruction of the relevant Customer.

Changes to this Policy

Material changes to this Privacy Policy are subject to the notice and objection procedures set forth in Section 1.7 of the Terms of Service.

Last Updated: August 28, 2026

Data Management and Compliance, Inc. DBA Warchest
405 Waltham St, Suite 181
Lexington, MA 02421
support@mywarchest.com