Privacy Policy

Who we are and how to reach us

Lepanto is a door-to-door canvassing platform used by nonprofits, campaigns, and field sales teams. It is operated from San Diego, California. Contact: hello@lepantomaps.com.

Three kinds of people, three different situations

• Organization admins and managers: you have an account, you set up campaigns, and you can see everything your organization collects.
• Canvassers (volunteers, sales reps and other field staff): you have an account (or joined with a code) and use the phone app in the field. We record what you submit and, while you are canvassing, where your phone is.
• Residents: someone from an organization using Lepanto knocked on your door and recorded the visit. You do not have an account. The organization that visited you is responsible for that data; we store it for them.

What we collect about account holders

• Name, email address, role in the organization, and a hashed password.
• Organization name, plan, and trial or billing status. Payment card details are handled by our payment provider when billing launches and never touch our servers.
• What you do in the app: pages visited, features used, and errors encountered. We use this to fix bugs and decide what to build. We do not sell it.
• Emails we send you (invitations, password resets, notifications) and whether they were delivered.

What we collect about canvassers in the field

• Every submission: the address, the outcome, form answers, notes, any photo, and the time.
• Your device’s GPS position at the moment you submit, and periodic position pings while the app is open during a canvass. Managers use this to see who is where, to verify that a visit happened at the door, and to keep canvassers safe. Location is not recorded when the app is closed.
• Voice notes, if you use the microphone. The audio is sent to a speech-to-text provider, converted to text, and the text is stored as the note. We do not keep the audio.

Your organization can see all of this. Other members of your team can see your position on the shared map while you are both canvassing, and your name and initials on it. If you do not want your location recorded, do not use the app to canvass and tell your organizer.

What we store about residents

Whatever the organization’s canvassers record at the door: usually an address, the outcome of the visit, answers to the organization’s survey questions, and sometimes a name, a phone number or email if the resident offered one, and free-text notes. If a resident asks not to be contacted, the organization can mark the address so its canvassers skip it in future.

We never contact residents ourselves and never sell resident data. If you are a resident and want to know what an organization recorded about you, or want it deleted, contact that organization; if you do not know who it was, email us and we will help you identify them.

If you ask us to text you

A business applying for the Million Dollar Route or a Lepanto Selection can tick "Text me the details" and give a cell number. We keep the number with your request, together with the words you agreed to and the time. A person at Lepanto texts you about the route; nobody else gets the number. Reply STOP to any text and we stop for good.

If you call or text a number on a Lepanto card

Each business on a Lepanto card (a Lepanto Selection or a Lepanto mailer) has its own phone number, run for us by Twilio. When you call it, the call rings straight through to the business. We never record calls. We keep the number you called from, the caller ID name your phone company shows, the time and whether the business picked up; if you text the number, we also keep your words. The business gets them as a lead, so it can reach you, and we count them so the business knows the card works. We do not sell them.

Text alerts for businesses on a Lepanto card

A business on a Lepanto card can choose to get text alerts at a cell number it gives us when it joins: a missed-call alert with the caller's number, and the words of any text sent to its card number. Alerts are only about calls and texts to the business's own card number, never marketing. How many depends on how many calls the business misses. Message and data rates may apply. Reply STOP to stop the alerts and HELP for help, or email hello@lepantomaps.com.

We do not sell or share your SMS opt-in data or consent with third parties for their marketing. Text messaging originator opt-in data and consent will not be shared with any third parties, except the providers that deliver the texts for us (Twilio).

If you write to us about a business in a Lepanto Selection

Homeowners who get a Lepanto Selection card (the San Marcos Selection, for example) can tell us when a business in it let them down. We keep what you send: your name, your phone number or email, the business, what happened, and the consent words you agreed to, with the time. We use it to reply to you, to check the business against our standard, and, because you agreed, to tell you later about another business in the same trade. We do not pass your details to the business you wrote about without asking you first, and we do not sell them. Email hello@lepantomaps.com to see what we keep or to have it deleted.

If you check your lot on lepantomaps.com/lot

When you pick your address and your lot has room for a backyard home, we keep that lot: its address from the county parcel records, the time, the code on the card that brought you (if any) and your browser's internet address. We may mail that home a card about its lot later. If you also answer the questions and give your name and phone, we keep those with the consent words you agreed to and the time, and we pass them to the one local builder named at booking, so they can reach you about your lot. The credit score question is optional: we keep only the range you pick, never a credit report, and we never check your credit. To decide which homes to mail and which requests to call first, we also use public county records about the home (its assessed value and size) and public USGS ground-slope maps.

Your email joins our email list only if you tick the box that says so; we keep the words of that box with the time. Each email has a link to stop them. We do not sell your details. Email hello@lepantomaps.com to see what we keep or to have it deleted.

Reference map data

The map shows addresses, building outlines, and points of interest from public and openly licensed datasets (OpenAddresses, Microsoft building footprints, OpenStreetMap, U.S. Census). This is not personal data; it is the same information you would see on a public map. Canvassers correct it as they work (for example, marking an address as not a home).

Aggregate address facts shared across organizations

This is the one way data from one organization can benefit another, so we want to be explicit about it.

• What can be shared: structural facts about an address — it is vacant, demolished, a business, a church, not accessible, or the address point is in the wrong place. These are facts about a building, not about a person.
• How: a fact becomes shared only after a person at Lepanto reviews it, usually after more than one independent organization has reported the same thing. Nothing is shared automatically.
• What other organizations see: a hint on the map (for example, “likely not a residence”). Never which organization reported it, never who the canvasser was, never anything a resident said.
• What is never shared: names, form answers, notes, voice transcripts, do-not-contact requests, and anything else about a person or about an organization’s relationship with a resident. This stays inside the organization that collected it, on every plan.
• Data recorded while a campaign is in test mode never enters this process.

Who else handles your data

We run on a small number of infrastructure providers: Railway (servers and database), Vercel (web hosting), Groq (speech-to-text), Resend (email), Twilio (card phone numbers, calls and texts), Sentry (error reporting) and PostHog (usage analytics) in the United States, map tiles from Esri and OpenFreeMap, and a place-search service in Germany that sees only a typed place name (Photon). Each is bound by its own terms to use the data only to provide its service to us. The full list, with what each one sees, is in the Data Processing Terms at the end of our Terms of Service.

We share data with no one else, except if the law requires it or to protect someone’s safety, and we will tell the affected organization unless we are legally prevented from doing so.

How long we keep it

• Account and organization data: while the account is open. If a subscription or trial ends and is not renewed, it is kept 90 days after planning pauses (the organization’s admins are emailed when it pauses, 30 days and 7 days before) and then permanently deleted, photos and signatures included (60 more days in backups). On a request to close an account: deleted within 30 days (60 days for backups).
• Field submissions and resident records: as long as the organization keeps them. Organizations can export their data at any time, and can permanently delete a campaign with everything recorded in it; to delete everything else, email hello@lepantomaps.com.
• Canvasser location pings: kept for the life of the campaign, including while it is archived, so managers can review coverage; deleted when the organization permanently deletes the campaign.
• Usage analytics and error reports: 90 days.
• Aggregate structural address facts: kept, because they are not personal data.

Security

Data is encrypted in transit. Each organization’s data is isolated by organization at the database query level, so one customer cannot read another’s records. Passwords are hashed. Access is scoped by role on every request. We back up the database regularly, and each backup is verified by restoring it and comparing record counts before it is kept. We run automated checks for vulnerable dependencies and leaked credentials. If we ever discover unauthorized access to your data we will tell the affected organizations within 72 hours.

Your choices and rights

• Account holders can email hello@lepantomaps.com to correct their name or email, or to have their account exported or deleted.
• Canvassers can stop location recording by closing the app or leaving the campaign. Ask your organizer to remove you from a campaign.
• Residents should contact the organization that visited them. We will help you find them if you email us.
• If you are in California, the CCPA gives you the right to know what personal information we hold about you, to have it deleted, and not to be discriminated against for asking. We do not sell personal information. If you are in the EU or UK, the GDPR gives you similar rights plus the right to object and to complain to your data-protection authority. To exercise any of these, email hello@lepantomaps.com.

Cookies and local storage

We use a single session token stored in your browser to keep you signed in, and local storage to hold field submissions until they can be sent when your phone has signal. Our analytics provider sets a cookie to tell one visit from another. If you reach our site through a link that carries a tag (an ad, for example), we keep that tag in your browser for 90 days and send it with a demo request, so we know which link brought you; it is a label, not information about you. We do not use advertising cookies or trackers.

Children

Lepanto is not directed at children under 13 and we do not knowingly collect their data. Organizations that involve canvassers under 18 are responsible for having parental consent where required.

Changes

If we change this policy in a way that matters, we will email organization admins at least 14 days before it takes effect and update the date at the top of this page.