Privacy Policy

Effective Date: February 1, 2026

1. INTRODUCTION

Campaign for America First International Assistance ("CAFIA," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make donations, sign up for communications, or otherwise interact with our organization.

By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our website or services.

This Privacy Policy applies to all information collected through our website, mobile applications (if any), email communications, and any related services, sales, marketing, or events (collectively, the "Services").

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register on our website, subscribe to our newsletter, express interest in obtaining information about us or our mission, participate in activities on our website, or otherwise contact us. The personal information we collect may include:

Identification Information: Full name, email address, mailing address, phone number
Communication Preferences: Email preferences, communication history, survey responses
Account Information: Username, password, account preferences
Advocacy Information: Information you provide when participating in advocacy campaigns, petitions, or grassroots activities

2.2 Information Automatically Collected

When you access our website, we automatically collect certain information about your device and your use of our Services. This information does not directly identify you but may include:

Device Information: Device type, operating system, unique device identifiers, browser type and version
Usage Information: Pages viewed, time spent on pages, links clicked, referring URLs, access times and dates
Location Information: General geographic location based on IP address
Log Data: IP address, internet service provider, error logs, and diagnostic data

2.3 Cookies and Tracking Technologies

We use cookies, pixel tags, web beacons, and similar tracking technologies to collect information about your browsing activities and to distinguish you from other visitors. These technologies help us analyze trends, administer the website, track users' movements around the site, and gather demographic information about our user base. For detailed information about our use of cookies, please see Section 7 of this Privacy Policy.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for various purposes, including:

3.1 To Provide and Maintain Our Services

Process and fulfill your donations
Provide donation receipts and acknowledgments
Respond to your inquiries and provide customer support
Maintain and improve our website functionality

3.2 To Communicate With You

Send newsletters, updates, and information about our mission and activities
Notify you about events, advocacy opportunities, and policy updates
Send fundraising appeals and donation requests
Provide information you request about our organization

3.3 To Improve Our Services

Analyze website usage patterns and trends
Conduct research and analysis to improve our communications and outreach
Develop new features, services, and content
Personalize your experience on our website

3.4 For Legal and Compliance Purposes

Comply with applicable laws, regulations, and legal processes
Fulfill regulatory reporting requirements, including those mandated by campaign finance laws where applicable
Protect against fraudulent, unauthorized, or illegal activity
Enforce our terms, conditions, and policies

4. DISCLOSURE OF YOUR INFORMATION

We may share your information in the following circumstances:

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including payment processing, email delivery, website hosting, data analytics, customer service, and marketing assistance. These service providers are contractually obligated to use your personal information only as necessary to provide services to us and are prohibited from using your information for their own purposes.

4.2 Legal Requirements

We may disclose your information where required by law, such as to comply with a subpoena, court order, or similar legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4.3 Regulatory Compliance

Certain donor information may be publicly disclosed as required by federal, state, or local campaign finance laws and regulations. For contributions that exceed applicable reporting thresholds, we may be required to disclose your name, address, occupation, employer, and contribution amount to relevant regulatory agencies such as the Federal Election Commission (FEC) or state election authorities. This information may become part of the public record.

4.4 Affiliated Organizations

We may share your information with organizations that share our mission and values, but only with your express consent. You may opt out of such sharing at any time by contacting us using the information provided in Section 14.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, dissolution, or similar transaction, your personal information may be transferred to the successor organization. We will notify you of any such change and any choices you may have regarding your information.

4.6 With Your Consent

We may disclose your personal information for any purpose with your express consent.

4.7 No Sale of Personal Information

CAFIA does not sell, rent, or lease your personal information to third parties for their marketing purposes.

5. DATA SECURITY

We implement and maintain reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include:

Encryption: We use industry-standard SSL/TLS encryption to protect data transmitted between your browser and our servers
Access Controls: Access to personal information is limited to authorized personnel who need the information to perform their job functions
Regular Monitoring: We regularly monitor our systems for potential vulnerabilities and attacks
Employee Training: Our staff receives training on data protection and privacy practices

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you and the appropriate authorities as required by applicable law.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context and our legal obligations:

Donation Records: Retained for a minimum of seven (7) years to comply with IRS requirements and campaign finance regulations
Communication Records: Retained for three (3) years from the date of last communication, unless you request earlier deletion
Website Analytics: Retained for twenty-six (26) months
Account Information: Retained for the duration of your account and for a reasonable period thereafter

When we no longer need your personal information, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

7. COOKIES AND TRACKING TECHNOLOGIES

7.1 Types of Cookies We Use

Essential Cookies: Required for the operation of our website, including security, network management, and accessibility
Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously (e.g., Google Analytics)
Functionality Cookies: Enable enhanced functionality and personalization, such as remembering your preferences
Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of our marketing campaigns

7.2 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all or some cookies or to alert you when cookies are being sent. However, if you disable or refuse cookies, some parts of our website may become inaccessible or not function properly.

7.3 Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Our website currently does not respond to DNT signals, as there is no industry standard for how to respond to such signals. We will update this policy if a standard is established.

7.4 Third-Party Analytics

We use Google Analytics to help us understand how visitors use our website. Google Analytics uses cookies to collect information about your use of our website, including your IP address (anonymized), browser type, pages visited, time spent on pages, and other diagnostic data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

8. THIRD-PARTY LINKS AND SERVICES

Our website may contain links to third-party websites, services, or applications that are not operated by us. These third-party sites have their own privacy policies, which we encourage you to review. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. Your interactions with third-party websites are governed by the privacy policies of those websites.

9. CHILDREN'S PRIVACY

Our Services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information as quickly as possible. If you believe that we may have collected information from a child under 13, please contact us immediately using the contact information in Section 14.

10. STATE-SPECIFIC PRIVACY RIGHTS

10.1 California Residents (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it
Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions required by law
Right to Correct: You have the right to request correction of inaccurate personal information
Right to Opt-Out of Sale/Sharing: We do not sell personal information. However, you have the right to opt out of any sharing of personal information for cross-context behavioral advertising
Right to Limit Use of Sensitive Information: You have the right to limit the use and disclosure of your sensitive personal information
Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights

To exercise these rights, please submit a request using the contact information in Section 14. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

10.2 Virginia Residents (VCDPA)

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (VCDPA), including the rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising and sales of personal data. To exercise these rights, please contact us using the information in Section 14.

10.3 Colorado Residents (CPA)

If you are a Colorado resident, you have rights under the Colorado Privacy Act (CPA), including rights to access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of targeted advertising, sale of personal data, and profiling. To exercise these rights, please contact us using the information in Section 14.

10.4 Connecticut Residents (CTDPA)

If you are a Connecticut resident, you have rights under the Connecticut Data Privacy Act (CTDPA) similar to those described above for Virginia residents. To exercise these rights, please contact us using the information in Section 14.

10.5 Other State Rights

Residents of other states may have additional rights under their respective state laws. We are committed to complying with applicable privacy laws and will honor legitimate privacy requests from all users.

11. INTERNATIONAL USERS

Our Services are operated in the United States. If you are located outside the United States and choose to use our Services or provide information to us, please be aware that your information will be transferred to, stored, and processed in the United States. Data protection laws in the United States may differ from those of your country of residence. By using our Services, you consent to the transfer of your information to the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, please note that we are not specifically targeting users in these regions. However, if you provide personal data to us, you acknowledge that your data will be processed in the United States under applicable U.S. law.

12. YOUR CHOICES AND OPT-OUT RIGHTS

12.1 Email Communications

You may opt out of receiving promotional emails from us by clicking the "unsubscribe" link at the bottom of any promotional email or by contacting us using the information in Section 14. Please note that even if you opt out of promotional communications, we may still send you transactional emails, such as donation receipts or responses to your inquiries.

12.2 Account Information

You may review and update your account information by logging into your account on our website or by contacting us. You may also request deletion of your account, subject to our legal obligations to retain certain records.

12.3 Cookies

As described in Section 7, you can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our website.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this document. We encourage you to review this Privacy Policy periodically.

For significant changes that materially affect how we handle your personal information, we will provide prominent notice on our website or send you direct notification, where required by law. Your continued use of our Services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

14. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Campaign for America First International Assistance

Email: privacy@cafia.org

We will respond to your inquiry as promptly as possible, generally within thirty (30) days.

15. ACKNOWLEDGMENT

By using our website or Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, please do not use our website or Services.

16. GOVERNING LAW AND DISPUTE RESOLUTION

This Privacy Policy shall be governed by and construed in accordance with the laws of the District of Columbia and applicable federal law, without regard to conflict of law principles. Any disputes arising under or related to this Privacy Policy shall be resolved exclusively in the state or federal courts located in the District of Columbia, and you consent to the personal jurisdiction of such courts.

17. SEVERABILITY

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable, such provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable, and the remaining provisions shall continue in full force and effect.

18. ENTIRE AGREEMENT

This Privacy Policy, together with our Terms of Use and any other agreements expressly incorporated by reference, constitutes the entire agreement between you and CAFIA regarding your use of our Services and the processing of your personal information.

* * *