Privacy Policy
What we collect when you visit touchstone.vote or get in touch, why we collect it, and how to control it.
Effective 2 October 2026
Who we are
TouchStone Technologies LLC (“TouchStone”, “we”) is based in Minneapolis, Minnesota, USA. We are the controller of the personal data described in this policy: data collected through touchstone.vote and through the sales and partnership conversations it leads to.
Questions or requests about your data go to [email protected].
What this policy doesn’t cover
Campaigns and organizations that use the TouchStone canvassing application decide what voter and canvasser data goes into it and why. For that data, the campaign or organization is the controller and TouchStone processes it on their behalf under our customer agreement. If you were contacted by a canvasser, or you canvass for a program that uses TouchStone, contact that campaign or organization about your data.
What we collect
Information you give us
- Demo and contact requests. The details you enter in our form, such as your name, email address, phone number, organization, and message.
- Correspondence. Emails and messages you send us, and notes from calls and meetings we have with you.
Information collected when you browse
- Delivery and security data, always. Our host, Cloudflare, processes your IP address, browser details, and the pages you request to deliver the site and block abuse. Cloudflare Web Analytics gives us aggregate page-view counts without cookies.
- Analytics and marketing data, only with your consent where the law requires it. Google Analytics, Microsoft Clarity, HubSpot, and LinkedIn use cookies to record the pages you view, where you came from, your device and browser, your approximate location from your IP address, and how you interact with pages. Clarity records clicks, scrolling, and mouse movement so we can replay sessions and build heatmaps. It does not record what you type into our form, because the form runs in a separate HubSpot frame.
We don’t ask for sensitive information through this site, and we ask that you don’t send it.
How we use it
Under the EU and UK General Data Protection Regulation (GDPR), each use needs a legal basis. Ours are:
- Answering your request and setting up demos, because you asked us to, as a step before a possible contract (Art. 6(1)(b)).
- Following up with business contacts about TouchStone, on the basis of our legitimate interest in growing our business (Art. 6(1)(f)). We send marketing email only where the law allows, and every email has an unsubscribe link.
- Analytics, session recording, and ad measurement, on the basis of your consent (Art. 6(1)(a)) if you are in the EEA, the UK, or Switzerland. Elsewhere, on the basis of our legitimate interest in improving the site, and you can opt out at any time.
- Running and securing the site, on the basis of our legitimate interest in keeping it available and free of abuse (Art. 6(1)(f)).
- Meeting legal obligations, such as tax and accounting records, or responding to lawful requests (Art. 6(1)(c)).
We don’t sell personal data, and we don’t make decisions about you based solely on automated processing.
Cookies
If you visit from the EEA, the UK, or Switzerland, or we can’t tell where you are, analytics and marketing cookies stay off until you choose “Accept” in the cookie banner. Everywhere else they are on by default, and you can turn them off. We treat a Global Privacy Control signal from your browser as an opt-out.
You can change your choice at any time: . The same link is in the footer of every page. Withdrawing consent stops the tools from loading and removes the cookies we are able to remove.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| Strictly necessary · always on | |||
ts_consent (local storage) |
TouchStone | Remembers your cookie choice | 12 months |
ts_region (session storage) |
TouchStone | Holds your country code, read from Cloudflare, to decide whether to ask for consent | Until you close the tab |
__cf_bm |
Cloudflare, on HubSpot form domains | Bot protection for the demo request form | 30 minutes |
__hs_do_not_track |
HubSpot | Set only if you opt out, so HubSpot tracking stays off | Up to 13 months |
| Analytics · consent required | |||
_ga, _ga_WD7WN33SVP |
Google Analytics | Counts visitors and sessions | 2 years |
_clck, _clsk |
Microsoft Clarity | Links page views into sessions for replays and heatmaps | 1 day to 1 year |
CLID, MUID, ANONCHK, SM, MR |
Microsoft (clarity.ms, bing.com) | Identifies the browser across Clarity sessions | Session to 13 months |
| Marketing · consent required | |||
hubspotutk, __hstc, __hssc, __hssrc |
HubSpot | Tracks visits and links them to a contact record if you submit the form | Session to 6 months |
_gcl_au, test_cookie |
Google Ads (google.com, doubleclick.net) | Measures ad conversions | 15 minutes to 90 days |
bcookie, bscookie, li_sugr, lidc, UserMatchHistory, AnalyticsSyncHistory |
LinkedIn Insight Tag (linkedin.com) | Measures ad conversions and builds ad audiences | 1 day to 1 year |
Providers set these durations and can change them. This list was checked against the live site on 2 October 2026.
Who we share it with
We share personal data only with service providers who process it for us under contract:
- HubSpot, Inc. runs our forms, CRM, email, and site tracking.
- Google LLC provides Google Workspace (our email), Google Tag Manager, Google Analytics, and Google Ads measurement.
- Microsoft Corporation provides Microsoft Clarity.
- LinkedIn provides the LinkedIn Insight Tag.
- Cloudflare, Inc. provides hosting, content delivery, security, and Web Analytics.
Google and LinkedIn may also use ad-measurement data for their own purposes, as their own privacy policies describe. We may also disclose data to professional advisers, to authorities when the law requires it, or to a successor if TouchStone is sold or merged.
International transfers
TouchStone is based in the United States, and our providers store most data there. If you are in the EEA, the UK, or Switzerland, your data is transferred to the US. Each provider listed above is certified under the EU–U.S. Data Privacy Framework, its UK Extension, and the Swiss–U.S. Data Privacy Framework. Their data processing terms also include the European Commission’s Standard Contractual Clauses.
How long we keep it
- Enquiries and CRM records: while we are in conversation or working together, then deleted or anonymized within 3 years of our last contact, unless the law requires us to keep them longer.
- Google Analytics event data: up to 14 months.
- Clarity recordings: 30 days. Aggregate heatmaps up to 13 months.
- Cookies: as listed in the cookie table above.
Your rights
Under the GDPR and UK GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we use it;
- receive it in a portable format;
- object to processing based on legitimate interests, and to direct marketing at any time;
- withdraw consent at any time, without affecting processing that happened before.
To exercise these rights, email [email protected]. We will reply within one month, and we may ask you to confirm your identity first. You can also complain to the data protection authority where you live or work. EU authorities are listed by the European Data Protection Board (opens in new tab); in the UK, it is the Information Commissioner’s Office (opens in new tab).
Residents of some US states have similar rights under state law. Send those requests to the same address.
Security
The site is served only over HTTPS. Access to enquiry and CRM data is limited to TouchStone staff who need it, and our service providers protect the data they hold for us under contract. No system is perfectly secure. If a breach puts your data at risk, we will notify you and the authorities as the law requires.
This site is meant for professionals and isn’t directed at children under 16.
Changes and contact
When we change this policy, we will update the effective date at the top of this page. If a change is significant, we will flag it here.
TouchStone Technologies LLC
Minneapolis, Minnesota, USA
[email protected]