Privacy policy

Effective date: September 26, 2026 Last updated: October 7, 2026

This policy explains what personal data Organiz collects, why we collect it, who we share it with, and the choices you have. It covers our member-facing platform and our admin panel, used by the organizations ("clients") who run campaigns on Organiz.

If you have questions about this policy, contact us at privacy@organiz.org.

Who we are

Organiz, Inc. ("Organiz", "we", "us", "our") is a gamified action platform that helps organizations turn their supporter lists into active communities, through points, levels, and calls to action like petitions, events, and sign-ups.

Organiz, Inc. 4346 Manzanita Dr San Jose, CA 95129

Information we collect

Account information. When you sign up or log in, we collect your name, email address, and (if you use social login) the profile information your identity provider shares with us. Login is handled by our identity provider, Auth0.

Your profile. Your display name, handle, and profile photo.

Contact information you give us. Some actions, like signing up for updates from an organization, collect your phone number, zip code, and SMS consent, in addition to your name and email. Signing a petition or RSVPing to an event can also collect your postcode and country, depending on the form.

Activity data. We record the actions you take on the platform: which calls to action you complete, points earned, streaks, kudos given and received, and rewards redeemed. This is the core of how the platform works. It's what your points and level are built from.

Content you create. Chat messages, comments, and photos or videos you upload to a campaign.

Information about other people. Some actions involve people other than you:

• Text a Contact. When you reach out to friends, we save the first and last name and phone number you enter for each one, any note you add, and whether you reached them. Your text is sent from your own phone. Organiz doesn't send it.
• Signing someone else up. If you enter a friend's details in a sign-up form, we store what you entered.
• Lists organizations upload. An organization can upload its own contact list (names and email addresses, for example) to invite those people to Organiz. We hold that list on the organization's behalf.

Usage analytics. We use product analytics (PostHog) to understand how the platform is used, so we can improve it. Analytics events don't identify members: they're tied to a random device identifier, not to your name, email, or account, and profile handles and invitation links are removed from the page addresses they carry. Organization admins and Organiz staff are identified by their account ID, so their own activity can be left out of client analytics.

Session recordings and heatmaps. To see where the app is confusing or broken, we record how pages are used: the pages you visit, where you click and scroll, and what's on the screen. Heatmaps combine where people click across many visits. Recordings never include what you type. Chat messages, comments, and the friends' names and phone numbers in Text a Contact are blacked out, and we don't record a visit that arrives through an invitation link. A recording can still show other things on the screen, such as names on a leaderboard or a profile. Page addresses are kept as they are, so a recording can also show the handle of the member whose share link you followed. If you're signed in, a recording of your visit can show who you are, for example your own name in the app or your handle in a page address. Only Organiz staff can watch recordings, and only to improve the product.

Payment information. We don't collect or store payment card data. Rewards on Organiz are digital downloads or coupon codes for an organization's own store, not purchases made through Organiz.

Cookies and browser storage. We use cookies and browser storage to:

• Keep you logged in.
• Credit the member whose share link brought you to a campaign (kept for 24 hours).
• Hold points you earned before signing in, so they're added when you do (kept for 24 hours).
• Hold an organization's invitation while you create your account (kept for 1 hour).
• Remember your language and theme.
• Measure usage with PostHog, which stores a random identifier in a cookie and in browser storage.

We don't use advertising cookies. Content embedded from other sites can set its own cookies (see "Embedded content" below).

What's public

Member profiles and campaign leaderboards are public. Anyone, signed in or not, can see your display name, handle, profile photo, points, level, badges, the actions and campaigns you've pinned, and who you follow and who follows you. Search engines can index profiles. Your email address, phone number, and contact details are never shown publicly.

How we use information

We use the information above to:

• Operate your account and track your points, levels, and activity
• Let organizations see and communicate with the members who've engaged with their campaigns
• Send you notifications in the app and by email, such as streak reminders, digests, weekly reports, and rewards ready. Most are on by default. You can turn each one off in your notification settings, and every email has an unsubscribe link.
• Improve the product, using aggregate analysis where possible
• Keep the platform secure and prevent abuse

How we share information

We share personal data only where it's needed to run the platform, never to advertisers, and never for sale.

Service providers. We use a small set of vendors to operate Organiz, each limited to the purpose below:

Embedded content. Campaigns can include content from other sites, such as YouTube and Vimeo videos, TikTok posts, VoteAmerica voter tools, Action Network forms, and pages an organization embeds. That content loads from the other site, which may set cookies and collect data under its own privacy policy.

Your organization's own integrations. An organization can connect tools it already uses, so your information reaches it there. This only happens for organizations that have turned the connection on, and only for that organization's own account in the tool.

• Action Network receives your name, email, phone, and zip code, your engagement stats with that organization (points, level, number of actions, and dates), and tags for which actions and campaigns you took part in.
• Mobilize receives what you enter when you RSVP to an event: name, email, phone, zip code, and your text message choice.
• ControlShift receives what you enter when you sign a petition or RSVP: name, email, phone, postcode, and country.

Legal requirements. We may disclose information if required by law, or to protect the rights, safety, or property of Organiz, our users, or others.

Data retention

We keep personal data for as long as your account is active, and as described in our Data Retention Policy. You can request deletion of your account and associated data at any time. See "Your choices and rights" below.

Data security

We encrypt sensitive credentials (like a connected integration's API key) at rest, encrypt all data in transit over HTTPS, and restrict access to personal data by role. An organization's members are visible to that organization's authorized admins. Admins of a parent organization, such as a national network over its chapters, can also see a chapter's members, depending on the data-sharing setting for that chapter. A small number of Organiz staff can access data to support clients and operate the platform. See our Security Incident Response Policy for how we handle and disclose security incidents.

Your choices and rights

You can:

• Access or correct your data by editing your profile, or by contacting us at privacy@organiz.org
• Request deletion of your account and personal data by contacting us at the address above. The Data Retention Policy explains what deletion covers.
• Turn off notifications in your notification settings
• Ask what data we hold about you, by contacting us

We offer these rights to every member, wherever they live. We'll respond to a request within 30 days. We won't treat you differently for making one.

Organiz serves organizations and members in the United States. We don't sell personal data, and we don't share it for targeted advertising. If a state privacy law gives you additional rights, contact us and we'll honor them.

Children's privacy

Organiz is not directed at children under 13, and we don't knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we'll delete it.

International data transfers

Organiz stores and processes data in the United States. Our database is hosted in the western US, and our login and analytics providers use their US-based infrastructure. If you access Organiz from outside the United States, your data is transferred to and processed in the US.

Changes to this policy

We'll update the date at the top of this page when we make changes. For material changes, we'll make a reasonable effort to notify active users.

Contact us

Questions about this policy or your data: privacy@organiz.org.