Privacy Policy

1. Introduction

Innovative Research & Data Solutions, LLC ("IRDS," "we," "us," or "our") is committed to protecting the privacy of individuals whose information we process. This policy describes what information we collect, how we use it, and the safeguards we maintain.

IRDS provides data intelligence services for political organizations and advocacy groups. In the course of this work, we process publicly available personal information to build voter contact databases. We recognize the sensitivity of this work and hold ourselves to standards that exceed minimum legal requirements.

2. Information We Collect

Information You Provide Directly

When you interact with our website or contact us, we may collect your name, email address, phone number, and other information you voluntarily provide.

Information We Collect Automatically

When you visit our website, we may collect standard usage data including IP addresses, browser type, and browsing activity. We do not use cookies for advertising or cross-site tracking.

Public Records and Publicly Available Data

In the course of our data services, we collect personal information from publicly accessible sources including:

• Public government records (property records, corporate filings, voter registration data obtained through licensed vendors)
• Published organizational directories and bulletins
• Public web pages that do not require login or authentication to access
• Licensed commercial data from authorized vendors

We do not collect data from sources that require login credentials, authentication bypass, or CAPTCHA circumvention. Our collection practices are grounded in the legal safe harbor established by Meta v. Bright Data (N.D. Cal., 2024) and hiQ Labs v. LinkedIn (9th Cir., 2022) for logged-off access to publicly available information.

3. How We Use Information

Client Data Processing

IRDS acts as a data processor on behalf of our clients. We process client-directed data only as specified in each engagement agreement and in accordance with applicable law. We do not independently collect or compile personal data for purposes outside of client engagements.

Data Enrichment

We enrich contact records using publicly available data and licensed commercial sources to resolve mailing addresses, verify identities, and assess the reliability of religious identification signals. All enrichment sources are documented, and records include an audit trail of every source used.

We Do Not

• Sell personal information to third parties outside of client engagement agreements
• Use personal data for purposes unrelated to the specific engagement
• Store data beyond the retention period defined in each engagement
• Process data from sources with statutory restrictions on commercial use (such data is tagged and excluded from deliverables)

4. Religious Data as Sensitive Information

IRDS processes data that includes religious identification — specifically, signals indicating Catholic parish engagement. We treat this as sensitive personal information and apply the following safeguards:

• Religious classification is never co-mingled with government-issued identification numbers, financial data, or health information
• Religious data is used solely for the targeting purposes defined in client engagement agreements — it is not published, disclosed to the public, or used for discriminatory purposes
• Confidence scoring is transparent — every record includes a numeric score reflecting the strength and diversity of the evidence supporting the religious identification, validated against independent survey data
• Opt-out mechanisms are available for individuals who wish to be excluded from our databases

5. Data Sources and Compliance

Before incorporating any external data source, IRDS conducts a compliance review that documents:

• The source's terms of use, privacy policy, and any legal restrictions
• Applicable statutory requirements (federal, state, and local)
• A risk assessment and required compliance measures

Sources that carry legal restrictions on commercial use are tagged in our system and excluded from client deliverables. Sources that fail compliance review are not used.

6. Data Retention

Personal information is retained only as long as necessary to fulfill the purposes of the engagement. Upon completion or termination of a client engagement:

• Data is retained for the period specified in the engagement agreement
• After the retention period, data is securely deleted
• Clients may request early deletion of their engagement data

7. Data Security

We implement technical and administrative safeguards to protect personal information against unauthorized access, disclosure, or modification. These include:

• Encrypted storage for all personal data
• Access controls limiting data access to authorized personnel
• Secure transfer protocols for all data transmissions
• Regular security reviews

No method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, but we take reasonable measures to protect the data entrusted to us.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Delete your personal information from our systems
• Opt out of having your information included in our databases
• Restrict processing of your personal information

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

9. State Privacy Law Compliance

IRDS complies with applicable state privacy laws including the California Consumer Privacy Act (CCPA/CPRA) and other state data privacy statutes. Residents of states with consumer privacy laws may exercise their rights as described in Section 8.

We do not sell personal information as defined under CCPA. Our processing of personal data in the course of client engagements constitutes a "service provider" relationship under applicable privacy frameworks.

10. Children's Privacy

Our services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children.

11. Third-Party Services

Our website and services may integrate third-party tools for analytics and functionality. These third parties operate under their own privacy policies. We encourage you to review those policies independently.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on our website with an updated effective date. Continued use of our services after changes are posted constitutes acceptance.

13. Contact

Questions about this privacy policy or requests to exercise your rights may be directed to:
[email protected]
Innovative Research & Data Solutions, LLC