Indigo Privacy & Data Use Center

Last Updated: June 30, 2025

Indigo Engineering, Inc. (“Indigo,” “we,” “us,” or “our”) builds data platforms—including Matchbook and Stacks—to help progressive campaigns and organizations understand and engage voters, donors, and supporters.  

We respect your privacy and are committed to protecting personal information in compliance with the California Consumer Privacy Act (CCPA & CPRA), Virginia CDPA, and Colorado CPA, and other applicable laws.

Table of Contents:

Section 1 – Overview

Section 2 – Categories of Personal Information We Collect

Section 3 – Sources of Personal Information

Section 4 – Why We Use Personal Information (Business & Commercial Purposes)

Section 5 – How We Share or Sell Personal Information

Section 6 – Your Privacy Rights & How to Exercise Them

Section 7 – Submit a Request

Section 8 – Do Not Sell or Share My Personal Information

Section 9 – Data Protection Officer (DPO) Contact

Section 10 – Changes to This Notice

Section 11 – Contact Us

1. Scope of this Notice

This Privacy Notice explains what personal information we collect, where we obtain it, why we use it, with whom we share or sell it, and how you can exercise your rights. It applies to information we process in our capacity as a data provider and to visitors of our websites and apps.

Note on Voter File Data

Indigo licenses state voter files and augments them with modeled, survey, and commercial data. We use and disclose such data only for political, journalistic, scholarly, or other First-Amendment-protected purposes, as permitted by law.

2. Categories of Personal Information We Collect

We may collect the following categories of personal information:.

Identifiers

Full name, postal address, email, phone number, IP address, online identifiers, and Mobile Advertising IDs.

Protected-class information

Age, gender, and race/ethnicity (where legally permissible).

Commercial & Donation Data

Contribution history and consumer purchase segments.

Internet / Device Activity

Log files, cookie identifiers, and browsing behavior on Indigo sites.

Geolocation Data

Latitude and longitude derived from physical address, precinct, or census block.

Political & Survey Data

Party registration, voting history, and modeled issue positions or preferences.

Professional / Employment Data

Job title, employer name, and industry classification.

Inferences

Propensity scores, such as likelihood to vote, donate, or support specific issues or causes.

3. Categories of Sources §1798.130(a)(5)(B)

1. Public Records & Official State Voter Files

2. Commercial Data Compilers & Data Brokers  

3. Surveys & Polling Conducted by Indigo or Partners

4. Clients & Authorized Partners (e.g., file uploads to Matchbook)  

5. Automated Collection via cookies, SDKs, and similar technologies on our sites/products  

6. Social Media & Open Web Sources where users make data public

4. Business & Commercial Purposes for Processing §1798.130(a)(5)(C)(iii)

We use personal information to:

·       Provide, maintain & improve Matchbook, Stacks, and related services  

·       Build predictive models & audience segments for political & non-profit outreach  

·       Authenticate users and secure our platforms  

·       Conduct analytics, quality assurance, research & development  

·       Market Indigo’s products to prospective customers  

·       Detect, investigate & prevent fraud or security incidents  

·       Comply with legal obligations, court orders, and regulatory requests

5. How We Disclose or Sell Personal Information
5.1 Disclosures for a Business Purpose §1798.130(a)(5)(C)(i)  

Categories of Personal Information

Categories of 3rd Party Recipients

Identifiers, Internet Activity

Cloud-hosting providers, security vendors

Voter-file Data & Inferences

Indigo clients under contract (campaigns, PACs, non-profits)

Geolocation Data

Latitude and longitude derived from physical address, precinct, or census block.

Commercial, Donation & Survey Data

Data processing & analytics vendors

All categories as needed

| Legal advisors, auditors, regulators

5.2 Sharing for Targeted Advertising §1798.130(a)(5)(C)(ii)
Indigo shares certain limited data elements (e.g., hashed email, MAID, voter ID plus modeled scores) to advertising platforms and onboarders solely for campaign outreach.

Categories of Personal Information Sold/Shared

Categories of 3rd Party Recipients

Identifiers, Geolocation, Inferences

DSPs, social networks, programmatic ad exchanges

Opt-Out You may direct Indigo not to sell/share your personal information by clicking the Do Not Sell or Share My Personal Information link in our footer or by submitting a request as described in Section 7.

6. Your Privacy Rights

Jurisdiction

Rights Available

California (CCPA/CPRA)

Access, Know, Delete, Correct, Opt-Out of Sale/Share, Limit Use of Sensitive PI, No Retaliation

Colorado, Virginia, Connecticut, Utah

Access, Delete, Correct, Opt-Out of Sale/Targeted Ads, Appeal

You may exercise these rights as outlined below.

7. Your Privacy Rights & How to Contact Us

We are committed to honoring your privacy rights under applicable laws, including the California Consumer Privacy Act (CCPA/CPRA), the EU/UK General Data Protection Regulation (GDPR), and others.

How to Submit a Request
You may request access to, correction of, or deletion of your personal information, or opt out of the sale/sharing of your data. You may submit a request using either of the following methods:

We respond to verifiable consumer requests within the timeframes required by law. Identity verification may be required before we fulfill your request.

Do Not Sell or Share My Personal Information
To opt out of the sale or sharing of your personal data, visit our Do Not Sell or Share My Personal Information page. We honor Global Privacy Control (GPC) signals as required.

Data Protection Officer
You may contact our Data Protection Officer with any questions about this privacy policy or how your data is handled:

Aaron Bly - Data Protection Officer

dpo@indigo.engineering

[Insert mailing address]

Or call us at our Toll free line at:

Changes to This Policy
We may update this notice occasionally. If we make significant changes, we’ll update the “Last Updated” date at the top of the page and notify you where required.

Contact Us
For any privacy-related inquiries, you may also reach us at privacy@indigo.engineering.

Indigo Privacy & Data Use Center

Last Updated: June 30, 2025

Indigo Engineering, Inc. (“Indigo,” “we,” “us,” or “our”) builds data platforms—including Matchbook and Stacks—to help progressive campaigns and organizations understand and engage voters, donors, and supporters.  

We respect your privacy and are committed to protecting personal information in compliance with the California Consumer Privacy Act (CCPA & CPRA), Virginia CDPA, and Colorado CPA, and other applicable laws.

Table of Contents:

Section 1 – Overview

Section 2 – Categories of Personal Information We Collect

Section 3 – Sources of Personal Information

Section 4 – Why We Use Personal Information (Business & Commercial Purposes)

Section 5 – How We Share or Sell Personal Information

Section 6 – Your Privacy Rights & How to Exercise Them

Section 7 – Submit a Request

Section 8 – Do Not Sell or Share My Personal Information

Section 9 – Data Protection Officer (DPO) Contact

Section 10 – Changes to This Notice

Section 11 – Contact Us

1. Scope of this Notice

This Privacy Notice explains what personal information we collect, where we obtain it, why we use it, with whom we share or sell it, and how you can exercise your rights. It applies to information we process in our capacity as a data provider and to visitors of our websites and apps.

Note on Voter File Data

Indigo licenses state voter files and augments them with modeled, survey, and commercial data. We use and disclose such data only for political, journalistic, scholarly, or other First-Amendment-protected purposes, as permitted by law.

2. Categories of Personal Information We Collect

We may collect the following categories of personal information:.

Identifiers

Full name, postal address, email, phone number, IP address, online identifiers, and Mobile Advertising IDs.

Protected-class information

Age, gender, and race/ethnicity (where legally permissible).

Commercial & Donation Data

Contribution history and consumer purchase segments.

Internet / Device Activity

Log files, cookie identifiers, and browsing behavior on Indigo sites.

Geolocation Data

Latitude and longitude derived from physical address, precinct, or census block.

Political & Survey Data

Party registration, voting history, and modeled issue positions or preferences.

Professional / Employment Data

Job title, employer name, and industry classification.

Inferences

Propensity scores, such as likelihood to vote, donate, or support specific issues or causes.

3. Categories of Sources §1798.130(a)(5)(B)

1. Public Records & Official State Voter Files

2. Commercial Data Compilers & Data Brokers  

3. Surveys & Polling Conducted by Indigo or Partners

4. Clients & Authorized Partners (e.g., file uploads to Matchbook)  

5. Automated Collection via cookies, SDKs, and similar technologies on our sites/products  

6. Social Media & Open Web Sources where users make data public

4. Business & Commercial Purposes for Processing §1798.130(a)(5)(C)(iii)

We use personal information to:

·       Provide, maintain & improve Matchbook, Stacks, and related services  

·       Build predictive models & audience segments for political & non-profit outreach  

·       Authenticate users and secure our platforms  

·       Conduct analytics, quality assurance, research & development  

·       Market Indigo’s products to prospective customers  

·       Detect, investigate & prevent fraud or security incidents  

·       Comply with legal obligations, court orders, and regulatory requests

5. How We Disclose or Sell Personal Information
5.1 Disclosures for a Business Purpose §1798.130(a)(5)(C)(i)  

Categories of Personal Information

Categories of 3rd Party Recipients

Identifiers, Internet Activity

Cloud-hosting providers, security vendors

Voter-file Data & Inferences

Indigo clients under contract (campaigns, PACs, non-profits)

Geolocation Data

Latitude and longitude derived from physical address, precinct, or census block.

Commercial, Donation & Survey Data

Data processing & analytics vendors

All categories as needed

| Legal advisors, auditors, regulators

5.2 Sharing for Targeted Advertising §1798.130(a)(5)(C)(ii)
Indigo shares certain limited data elements (e.g., hashed email, MAID, voter ID plus modeled scores) to advertising platforms and onboarders solely for campaign outreach.

Categories of Personal Information Sold/Shared

Categories of 3rd Party Recipients

Identifiers, Geolocation, Inferences

DSPs, social networks, programmatic ad exchanges

Opt-Out You may direct Indigo not to sell/share your personal information by clicking the Do Not Sell or Share My Personal Information link in our footer or by submitting a request as described in Section 7.

6. Your Privacy Rights

Jurisdiction

Rights Available

California (CCPA/CPRA)

Access, Know, Delete, Correct, Opt-Out of Sale/Share, Limit Use of Sensitive PI, No Retaliation

Colorado, Virginia, Connecticut, Utah

Access, Delete, Correct, Opt-Out of Sale/Targeted Ads, Appeal

You may exercise these rights as outlined below.

7. Your Privacy Rights & How to Contact Us

We are committed to honoring your privacy rights under applicable laws, including the California Consumer Privacy Act (CCPA/CPRA), the EU/UK General Data Protection Regulation (GDPR), and others.

How to Submit a Request
You may request access to, correction of, or deletion of your personal information, or opt out of the sale/sharing of your data. You may submit a request using either of the following methods:

We respond to verifiable consumer requests within the timeframes required by law. Identity verification may be required before we fulfill your request.

Do Not Sell or Share My Personal Information
To opt out of the sale or sharing of your personal data, visit our Do Not Sell or Share My Personal Information page. We honor Global Privacy Control (GPC) signals as required.

Data Protection Officer
You may contact our Data Protection Officer with any questions about this privacy policy or how your data is handled:

Aaron Bly - Data Protection Officer

dpo@indigo.engineering

[Insert mailing address]

Or call us at our Toll free line at:

Changes to This Policy
We may update this notice occasionally. If we make significant changes, we’ll update the “Last Updated” date at the top of the page and notify you where required.

Contact Us
For any privacy-related inquiries, you may also reach us at privacy@indigo.engineering.

newsletter

© 2025 Indigo Engineering, LLC. All rights reserved

newsletter

© 2025 Indigo Engineering, LLC. All rights reserved

Indigo Privacy & Data Use Center

Last Updated: June 30, 2025

Indigo Engineering, Inc. (“Indigo,” “we,” “us,” or “our”) builds data platforms—including Matchbook and Stacks—to help progressive campaigns and organizations understand and engage voters, donors, and supporters.  

We respect your privacy and are committed to protecting personal information in compliance with the California Consumer Privacy Act (CCPA & CPRA), Virginia CDPA, and Colorado CPA, and other applicable laws.

Table of Contents:

Section 1 – Overview

Section 2 – Categories of Personal Information We Collect

Section 3 – Sources of Personal Information

Section 4 – Why We Use Personal Information (Business & Commercial Purposes)

Section 5 – How We Share or Sell Personal Information

Section 6 – Your Privacy Rights & How to Exercise Them

Section 7 – Submit a Request

Section 8 – Do Not Sell or Share My Personal Information

Section 9 – Data Protection Officer (DPO) Contact

Section 10 – Changes to This Notice

Section 11 – Contact Us

1. Scope of this Notice

This Privacy Notice explains what personal information we collect, where we obtain it, why we use it, with whom we share or sell it, and how you can exercise your rights. It applies to information we process in our capacity as a data provider and to visitors of our websites and apps.

Note on Voter File Data

Indigo licenses state voter files and augments them with modeled, survey, and commercial data. We use and disclose such data only for political, journalistic, scholarly, or other First-Amendment-protected purposes, as permitted by law.

2. Categories of Personal Information We Collect

We may collect the following categories of personal information:.

Identifiers

Full name, postal address, email, phone number, IP address, online identifiers, and Mobile Advertising IDs.

Protected-class information

Age, gender, and race/ethnicity (where legally permissible).

Commercial & Donation Data

Contribution history and consumer purchase segments.

Internet / Device Activity

Log files, cookie identifiers, and browsing behavior on Indigo sites.

Geolocation Data

Latitude and longitude derived from physical address, precinct, or census block.

Political & Survey Data

Party registration, voting history, and modeled issue positions or preferences.

Professional / Employment Data

Job title, employer name, and industry classification.

Inferences

Propensity scores, such as likelihood to vote, donate, or support specific issues or causes.

3. Categories of Sources §1798.130(a)(5)(B)

1. Public Records & Official State Voter Files

2. Commercial Data Compilers & Data Brokers  

3. Surveys & Polling Conducted by Indigo or Partners

4. Clients & Authorized Partners (e.g., file uploads to Matchbook)  

5. Automated Collection via cookies, SDKs, and similar technologies on our sites/products  

6. Social Media & Open Web Sources where users make data public

4. Business & Commercial Purposes for Processing §1798.130(a)(5)(C)(iii)

We use personal information to:

·       Provide, maintain & improve Matchbook, Stacks, and related services  

·       Build predictive models & audience segments for political & non-profit outreach  

·       Authenticate users and secure our platforms  

·       Conduct analytics, quality assurance, research & development  

·       Market Indigo’s products to prospective customers  

·       Detect, investigate & prevent fraud or security incidents  

·       Comply with legal obligations, court orders, and regulatory requests

5. How We Disclose or Sell Personal Information
5.1 Disclosures for a Business Purpose §1798.130(a)(5)(C)(i)  

Categories of Personal Information

Categories of 3rd Party Recipients

Identifiers, Internet Activity

Cloud-hosting providers, security vendors

Voter-file Data & Inferences

Indigo clients under contract (campaigns, PACs, non-profits)

Geolocation Data

Latitude and longitude derived from physical address, precinct, or census block.

Commercial, Donation & Survey Data

Data processing & analytics vendors

All categories as needed

| Legal advisors, auditors, regulators

5.2 Sharing for Targeted Advertising §1798.130(a)(5)(C)(ii)
Indigo shares certain limited data elements (e.g., hashed email, MAID, voter ID plus modeled scores) to advertising platforms and onboarders solely for campaign outreach.

Categories of Personal Information Sold/Shared

Categories of 3rd Party Recipients

Identifiers, Geolocation, Inferences

DSPs, social networks, programmatic ad exchanges

Opt-Out You may direct Indigo not to sell/share your personal information by clicking the Do Not Sell or Share My Personal Information link in our footer or by submitting a request as described in Section 7.

6. Your Privacy Rights

Jurisdiction

Rights Available

California (CCPA/CPRA)

Access, Know, Delete, Correct, Opt-Out of Sale/Share, Limit Use of Sensitive PI, No Retaliation

Colorado, Virginia, Connecticut, Utah

Access, Delete, Correct, Opt-Out of Sale/Targeted Ads, Appeal

You may exercise these rights as outlined below.

7. Your Privacy Rights & How to Contact Us

We are committed to honoring your privacy rights under applicable laws, including the California Consumer Privacy Act (CCPA/CPRA), the EU/UK General Data Protection Regulation (GDPR), and others.

How to Submit a Request
You may request access to, correction of, or deletion of your personal information, or opt out of the sale/sharing of your data. You may submit a request using either of the following methods:

We respond to verifiable consumer requests within the timeframes required by law. Identity verification may be required before we fulfill your request.

Do Not Sell or Share My Personal Information
To opt out of the sale or sharing of your personal data, visit our Do Not Sell or Share My Personal Information page. We honor Global Privacy Control (GPC) signals as required.

Data Protection Officer
You may contact our Data Protection Officer with any questions about this privacy policy or how your data is handled:

Aaron Bly - Data Protection Officer

dpo@indigo.engineering

[Insert mailing address]

Or call us at our Toll free line at:

Changes to This Policy
We may update this notice occasionally. If we make significant changes, we’ll update the “Last Updated” date at the top of the page and notify you where required.

Contact Us
For any privacy-related inquiries, you may also reach us at privacy@indigo.engineering.

newsletter

© 2025 Indigo Engineering, LLC. All rights reserved