PRIVACY POLICY

Political Window · SPK Holdings LLC · Last updated August 18, 2026

1. Summary 2. Who we are 3. What we collect 4. Processors 5. Analytics and session recording 6. Why we use it 7. Sharing 8. Retention 9. Your choices 10. Deleting your data 11. Contact

1. Summary

We collect the email address and password you register with, what you do in the product, and the details you type into our contact form. We record browsing sessions — mouse movement, clicks, scrolling, and the pages you see — through one analytics vendor, with form inputs masked. We do not sell personal information and we do not run advertising. To have your account and personal information deleted, email info@politicalwindow.com from the address on your account.

The rest of this page is the detail behind that paragraph. It covers personal information about you. It does not cover the public records inside the product — FCC political files, FEC filings, candidate and committee data — which are public filings about political advertising, not personal data we collected from you.

2. Who we are

Political Window is operated by SPK Holdings LLC, which is the controller of the personal information described here. Our Terms of Service govern your use of the product, and this policy is part of them.

3. What we collect

Category	What it is	Where it comes from
Account	Email address, password (stored only as a salted hash, never in readable form), plan tier, whether your email is verified, and the dates your account was created and last changed.	You, at registration.
Billing	Your plan, its status and renewal or expiry date, and the customer and subscription identifiers our payment processor issues. We never receive or store your full card number, CVC, or bank details — those go directly to Stripe.	You, through Stripe's checkout; Stripe, through payment notifications.
Contact form	The Request Access form collects your first name, company name, business email, phone number, job level, business type, company size, media intelligence budget range, what you need help with, how soon you need it, how you heard about us, any details you add, and whether you asked to receive updates.	You, when you submit the form.
Support and email	Messages you send us and our replies, and delivery results for the transactional email we send you, such as email verification and billing confirmations.	You; our email processor.
Usage	Pages you open, features you use, searches and filters you run, the time of each, your approximate location derived from IP address, IP address, browser, operating system, device type, screen size, and the page that referred you.	Automatically, through the analytics tools in section 5.
Session recordings	A replay of your visit: mouse movement, clicks, scrolling, page changes, and the content of the pages you saw. Text you type into form fields is masked before it leaves your browser, so passwords and typed input are not captured in the recording.	Automatically, through the session-recording tool in section 5.
Local storage	Your browser stores your sign-in token (`pw_token`), the email address of the signed-in account (`pw_user`), and the date of your last visit (`pw_last_visit`). Our analytics vendors also store their own identifiers.	Set by the site in your browser.

We do not ask for and do not want special-category information — health, biometric, precise geolocation, government identifiers, or political party membership. Do not put such information into the contact form.

4. The processors we use, by category

These companies process personal information on our behalf, under contract, for the purposes below and no other.

Category	Processor	What it handles
Product analytics	PostHog (United States region)	Page views, feature events, and session recordings. Once you sign in, this activity is linked to your account email.
Website analytics	Google Analytics 4	Aggregate traffic and page-level usage measurement.
Payments	Stripe	Checkout, card processing, subscriptions, invoices, and the billing portal. Stripe is the controller of your payment-card data, not us.
Transactional email	Resend	Sending email verification, billing confirmations, and account notices.
Hosting and delivery	Vercel; Railway; Neon	Serving the site, running the application, and storing the database.
Fonts and map assets	Google Fonts; unpkg; CARTO	Loading typefaces, the map library, and basemap tiles. These receive your IP address and browser details as a consequence of your browser requesting the file.

Each of these processes information in the United States. If you use Political Window from outside the United States, your information is transferred there.

5. Analytics and session recording, stated plainly

Your visits are recorded and replayed. One vendor, PostHog, captures a replay of what you do on the site so we can see where the product is confusing or broken. A replay shows your mouse path, your clicks, your scrolling, and the content of the pages you were looking at.

What is not captured: text you type into form fields is masked in the browser before the recording is sent, which covers passwords, the contact form, and search boxes. We do not receive card numbers in a recording, because card fields are hosted by Stripe on a separate page.

Sessions are linked to your account once you sign in. The product analytics tool is given your account email so a recording and its events can be attributed to your account. A signed-out visit is not linked to a person by us.

We use analytics to measure and improve the product. We do not use it to build advertising profiles, and we do not share it with advertising networks. Section 9 explains how to opt out.

6. Why we use your information

To run the service — authenticate you, apply your plan's access, and show you the data you asked for.
To bill you — process payments, renew or end a subscription, and send receipts and renewal notices.
To communicate — verify your email, answer your messages, and send notices about your account, security, or changes to these policies.
To improve the product — understand which features are used, find defects, and fix what is confusing.
To keep the service secure — detect abuse, credential sharing, scraping, and attacks, and enforce the Terms of Service.
To meet legal obligations — keep tax and payment records, and respond to lawful requests.

Where the law requires a legal basis, ours is: performing our contract with you (account, billing), our legitimate interests (security, product improvement, analytics), your consent where we ask for it (marketing email), and legal obligation (records, lawful requests).

7. Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have never done either.

We disclose personal information only:

to the processors in section 4, for the purposes listed there;
when you tell us to;
to comply with the law, a subpoena, or a court order, or to protect our rights, our users, or the public from harm; and
to a buyer or successor if the business is sold, merged, or reorganized, under the same commitments as this policy.

8. How long we keep it

What	How long
Account information	While the account is open, and for 30 days after you close or delete it, so that an accidental deletion can be reversed.
Billing records	Seven years, because tax and accounting law requires it. Deleting your account does not delete an invoice.
Contact form submissions	24 months from submission.
Session recordings	As long as the vendor's retention window, currently up to 12 months, after which they expire automatically.
Analytics events	Up to 14 months in aggregate form.
Server and security logs	Up to 90 days.

9. Your choices and your rights

Everyone

Opt out of session recording and analytics by using a content blocker or your browser's tracking protection, or by asking us at info@politicalwindow.com to exclude your account. Opting out does not affect what the product does for you.
Do Not Track and Global Privacy Control. Browsers can send a "Do Not Track" or Global Privacy Control signal. This site does not currently respond to either signal, and we say so rather than implying otherwise. Use one of the two methods above instead — both work today.
Stop marketing email by using the unsubscribe link in it, or by writing to us. We still send transactional email about your account, verification, and billing.
Clear local storage from your browser settings. Doing so signs you out.

California residents

Under the California Consumer Privacy Act as amended, you may ask us to tell you what we have collected about you and where it went, to correct it, to delete it, and to limit the use of sensitive personal information. We collect no sensitive personal information as that law defines it. We do not sell or share personal information, so there is nothing to opt out of on that count. We will not treat you differently for exercising a right.

Everywhere else

If the law where you live gives you rights of access, correction, deletion, portability, objection, or complaint to a regulator, we honor them. Use the same address.

We answer requests within 45 days. We may ask you to confirm your identity by replying from the email address on the account, because handing account data to the wrong person is the harm these rights exist to prevent.

10. Deleting your data

To delete your account and the personal information in it, email info@politicalwindow.com from the address on your account with the subject "Delete my account." You do not need to give a reason.

We confirm receipt, cancel any active subscription, and delete the account, its profile, and its usage and session-recording history. Deletion completes within 30 days and we email you when it is done. Two things survive, and we say so rather than promise otherwise: billing records we must keep for tax law (section 8), and backups, which expire on their own rotation within 90 days and are not returned to service.

Public records inside the product are not personal data about you and are not affected by a deletion request.

11. Security, children, changes, and contact

Security. Passwords are stored as salted hashes. Traffic is encrypted in transit. Access to production data is limited to the people who need it. No system is perfectly secure, and we do not claim ours is.

Children. Political Window is a business product and is not for anyone under 18. We do not knowingly collect information from children. If we learn we have, we delete it.

Changes. We post updates here with a new date. If a change materially affects how we handle your information, we email the address on your account before it takes effect.

Contact. SPK Holdings LLC, 2108 N St, Ste N, Sacramento, CA 95816 · info@politicalwindow.com