Last Updated: June 30, 2025

Indigo Engineering, Inc. ("Indigo," "we," "us," or "our") builds data platforms — including Matchbook and Stacks — to help progressive campaigns and organizations understand and engage voters, donors, and supporters.

We respect your privacy and are committed to protecting personal information in compliance with the California Consumer Privacy Act (CCPA & CPRA), Virginia CDPA, and Colorado CPA, and other applicable laws.

1. scope of this notice

This Privacy Notice explains what personal information we collect, where we obtain it, why we use it, with whom we share or sell it, and how you can exercise your rights. It applies to information we process in our capacity as a data provider and to visitors of our websites and apps.

note on voter file data

Indigo licenses state voter files and augments them with modeled, survey, and commercial data. We use and disclose such data on behalf of approved users for political purposes, as permitted by law.

2. categories of personal information we collect

We may collect the following categories of personal information:

• Identifiers — Full name, postal address, email, phone number, IP address, online identifiers, and Mobile Advertising IDs.
• Protected-class information — Age, gender, and race/ethnicity (where legally permissible).
• Commercial & Donation Data — Contribution history and consumer purchase segments.
• Internet / Device Activity — Log files, cookie identifiers, and browsing behavior on Indigo sites.
• Geolocation Data — Latitude and longitude derived from physical address, precinct, or census block.
• Political & Survey Data — Party registration, voting history, and modeled issue positions or preferences.
• Professional / Employment Data — Job title, employer name, and industry classification.
• Inferences — Propensity scores, such as likelihood to vote, donate, or support specific issues or causes.

3. sources of personal information §1798.130(a)(5)(B)

1. Public Records & Official State Voter Files
2. Commercial Data Compilers & Data Brokers
3. Surveys & Polling Conducted by Indigo or Partners
4. Clients & Authorized Partners (e.g., file uploads to Matchbook)
5. Automated Collection via cookies, SDKs, and similar technologies on our sites/products
6. Social Media & Open Web Sources where users make data public

4. business & commercial purposes for processing §1798.130(a)(5)(C)(iii)

We use personal information to:

• Provide, maintain & improve Matchbook, Stacks, and related services
• Build predictive models & audience segments for political & non-profit outreach
• Authenticate users and secure our platforms
• Conduct analytics, quality assurance, research & development
• Market Indigo's products to prospective customers
• Detect, investigate & prevent fraud or security incidents
• Comply with legal obligations, court orders, and regulatory requests

5. how we disclose or sell personal information

5.1 disclosures for a business purpose §1798.130(a)(5)(C)(i)

Disclosed for a Business Purpose	Categories of 3rd Party Recipients
Identifiers, Geolocation, Inferences	DSPs, social networks, programmatic ad exchanges

5.2 sharing for targeted advertising §1798.130(a)(5)(C)(ii)

Indigo shares certain limited data elements (e.g., hashed email, MAID, voter ID plus modeled scores) to advertising platforms and onboarders solely for campaign outreach.

Categories of Personal Information	Categories of 3rd Party Recipients
Identifiers, Internet Activity	Cloud-hosting providers, security vendors
Voter-file Data & Inferences	Indigo clients under contract (campaigns, PACs, non-profits)
Geolocation Data	Latitude and longitude derived from physical address, precinct, or census block.
Commercial, Donation & Survey Data	Data processing & analytics vendors
All categories as needed	Legal advisors, auditors, regulators

6. your privacy rights

Jurisdiction	Rights Available
California (CCPA/CPRA)	Access, Know, Delete, Correct, Opt-Out of Sale/Share, Limit Use of Sensitive PI, No Retaliation
Colorado, Virginia, Connecticut, Utah	Access, Delete, Correct, Opt-Out of Sale/Targeted Ads, Appeal

You may exercise these rights as outlined below.

7. your privacy rights & how to contact us

We are committed to honoring your privacy rights under applicable laws, including the California Consumer Privacy Act (CCPA/CPRA), the EU/UK General Data Protection Regulation (GDPR), and others.

how to submit a request

You may request access to, correction of, or deletion of your personal information, or opt out of the sale/sharing of your data. You may submit a request using either of the following methods:

• Online form: indigo.engineering/privacy/request
• Email: privacy@indigo.engineering

We respond to verifiable consumer requests within the timeframes required by law. Identity verification may be required before we fulfill your request.

do not sell or share my personal information

To opt out of the sale or sharing of your personal data, visit our Do Not Sell or Share My Personal Information page. We honor Global Privacy Control (GPC) signals as required.

data protection officer

You may contact our Data Protection Officer with any questions about this privacy policy or how your data is handled:

changes to this policy

We may update this notice occasionally. If we make significant changes, we'll update the "Last Updated" date at the top of the page and notify you where required.

contact us

For any privacy-related inquiries, you may also reach us at privacy@indigo.engineering.