Privacy Policy

1. Introduction

Welcome to TexasLobby.org ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

TexasLobby.org is operated by Ronin Holdings LLC, a Texas Limited Liability Company. We provide a marketplace platform connecting Texas businesses with registered lobbyists.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you provide when creating an account or using our services:

• Account Information: Name, email address, password (encrypted)
• Lobbyist Profile Information: Phone number, website URL, bio, years of experience, cities served, subject area expertise, LinkedIn profile, profile photo
• Client Information: Client names, descriptions, relationship duration (for lobbyist profiles)
• Testimonials: Client testimonials, ratings, and related contact information
• Verification Documents: Government-issued ID photos for profile claim verification (stored securely and only accessible to administrators)
• Payment Information: Billing name and email (card information is handled directly by Stripe and never stored on our servers)
• Communications: Support ticket messages, contact form submissions, and correspondence with us

2.2 Information Collected Automatically

When you use our services, we automatically collect certain information:

• Usage Data: Pages viewed, profile views, search queries, favorites, bill watchlist preferences
• Device Information: Browser type, operating system, IP address, device identifiers
• Session Data: Authentication tokens (HTTP-only cookies), login timestamps, session duration
• Analytics Data: Referral source, page navigation patterns, time spent on pages

2.3 Information from Third Parties

We collect lobbyist registration data from:

• Texas Ethics Commission: Lobbyist names, registration information (public records)
• Texas Legislature: Bill information, legislative session data (public records)

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Display lobbyist profiles and facilitate marketplace connections
• Process bill watchlist notifications and email alerts
• Enable saved favorites and personalized features
• Verify profile claims and prevent fraud/impersonation

3.2 Billing and Subscription Management

• Process payments and manage subscriptions
• Send billing receipts and subscription updates
• Handle refunds, cancellations, and payment disputes
• Comply with tax and accounting requirements

3.3 Communications

• Send transactional emails (profile approval, subscription changes, bill notifications)
• Respond to support requests and provide customer service
• Send important account and security notifications
• Notify you of changes to our terms or policies

3.4 Platform Improvement

• Analyze usage patterns to improve our services
• Track profile views for analytics features
• Monitor system performance and security
• Conduct research and development

3.5 Legal Compliance

• Comply with legal obligations and government requests
• Enforce our Terms of Service and other policies
• Detect, prevent, and address fraud and security issues
• Maintain audit logs for accountability and security

4. Data Sharing and Disclosure

4.1 Public Information

The following information is publicly visible on our platform:

• Approved lobbyist profiles (name, bio, experience, expertise, contact information)
• Client lists and approved testimonials
• Profile photos and professional information
• Bill tags and annotations created by lobbyists

4.2 Third-Party Service Providers

We share data with trusted third-party services that help us operate our platform:

Database and Authentication Provider

• Purpose: Data storage, user authentication, file storage
• Data Shared: All account data, profile information, uploaded files

Payment Processor

• Purpose: Subscription billing and payment processing
• Data Shared: Name, email, billing information (card data goes directly to the processor, not our servers)

Email Service Provider

• Purpose: Transactional email delivery
• Data Shared: Email addresses, names, email content

Web Hosting Provider

• Purpose: Website hosting and delivery
• Data Shared: IP addresses, request logs, session data

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with court orders, subpoenas, or legal processes
• Protect our rights, property, or safety
• Investigate fraud or security issues
• Respond to government requests

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your options.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Cookies and Tracking Technologies

5.1 Cookies We Use

We use the following types of cookies:

• Essential Cookies: Required for authentication and core functionality (HTTP-only, secure session cookies)
• Analytics Cookies: Track page views and usage patterns to improve our services

5.2 Session Management

We use HTTP-only, secure cookies to maintain your logged-in session. These cookies:

• Are encrypted and cannot be accessed by JavaScript
• Use the Secure flag (HTTPS only) and SameSite attribute
• Expire when you log out or after a period of inactivity

5.3 Your Cookie Choices

You can control cookies through your browser settings. However, disabling essential cookies will prevent you from logging in and using authenticated features.

6. Data Retention

6.1 Active Accounts

We retain your information while your account is active and as needed to provide services.

6.2 Account Deletion

When you request account deletion:

• Your account enters a 30-day grace period
• You can recover your account during this period
• After 30 days, your personal data is permanently deleted or anonymized
• Lobbyist profiles are anonymized (changed to "Deleted User")

6.3 Legal Retention

Some data is retained for legal and compliance purposes:

• Payment Records: Retained for 7 years for tax compliance
• Fraud Reports: Retained for security and legal purposes (reporter information anonymized)
• Audit Logs: Retained for security monitoring (may be anonymized)

7. Your Privacy Rights

7.1 Access and Export

You have the right to access and export your personal data. Use the "Export Data" feature in your account settings to download a JSON file of your information.

7.2 Correction

You can update your profile information, account details, and preferences at any time through your dashboard.

7.3 Deletion

You can request account deletion through your account settings. See Section 6.2 for details about our deletion process.

7.4 Objection and Restriction

You can object to certain data processing or request restrictions by contacting us.

7.5 California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: Request details about data collected in the past 12 months
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: We do not sell your personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

7.6 European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under GDPR:

• Right to access, rectification, erasure, and portability
• Right to restrict or object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7.7 Exercising Your Rights

To exercise any of these rights, contact us at our contact page. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data transmitted over HTTPS/TLS
• Encryption at Rest: Data encrypted in our database (Supabase)
• Secure Password Storage: Passwords hashed using industry-standard algorithms (Supabase Auth)
• HTTP-Only Cookies: Session cookies protected from JavaScript access
• Access Controls: Role-based access and admin audit logging
• Regular Security Audits: Periodic security reviews and updates
• Secure File Storage: ID verification documents stored in private, access-controlled buckets

While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from someone under 18, please contact us immediately, and we will take steps to delete such information.

This platform is designed for professional business use and requires users to be at least 18 years old.

10. International Data Transfers

Our services are provided from the United States. If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States.

By using our services, you consent to the transfer of your information to the United States and other countries where our service providers operate. These countries may have data protection laws different from your country.

For European users, we comply with GDPR requirements for international data transfers and implement appropriate safeguards.

11. Third-Party Links

Our platform may contain links to third-party websites (such as lobbyist websites, LinkedIn profiles, or the Texas Legislature website). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email to the address associated with your account
• Display a notification in your dashboard

Your continued use of our services after the effective date of the revised Privacy Policy constitutes your acceptance of the changes.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us.

Business Name: Ronin Holdings LLC

For privacy-specific inquiries, please include "Privacy Request" in your message subject when submitting the contact form.