WalkLists
GPS Routes Team Sync Data Enrichment PDF Walk Lists Mobile App
Political Sales Insurance Roofing
Pricing
WalkLists vs the field Best canvassing apps Best door-to-door sales software Best political canvassing software Best roofing sales software Best solar sales software
Help Center Blog Contact Trust & Security

WalkLists Privacy Policy

Last Updated:

This policy applies to walklists.com, the WalkLists mobile apps, and related services.

This Privacy Policy explains how Scale Campaign LLC ("Scale Campaign", "WalkLists", "we", "us", or "our") collects, uses, shares, and protects personal information when you use the WalkLists field-operations platform, mobile apps, and related services (collectively, the "Services"). It is written to be read — not to hide behind legalese.

For details on how we protect your data, see our Security & Trust page. For how we use cookies, see our Cookie Policy.

1. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, and a hashed password when you create an account. If you sign in with Google or Apple, we receive your name and email from that provider.
  • Uploaded Data: Voter files, contact lists, and related records you upload for processing into walk lists and canvassing routes (see Section 3 on who controls this data).
  • Field & Canvassing Data: Door-knock dispositions, survey and script responses, notes, scheduled follow-ups, deals and signatures (for sales verticals), and the GPS location and timestamp captured when a record is logged.
  • Photos: Photos your team captures in the field. Before storage, photos are converted to WebP and their embedded EXIF metadata (including any camera-written GPS) is stripped; we separately store the knock location your device reports.
  • Payment Information: Billing details processed through our payment processor (Stripe). We do not store credit-card or bank-account numbers on our servers.
  • Usage & Device Information: IP address, browser/device type, and basic usage events, collected automatically to operate and secure the Services.

2. Whose Data Is It — Controller and Processor

WalkLists is a business-to-business platform, and that affects who is responsible for which data:

  • Data you create with us — your account, billing, and usage information — is data for which we are the controller. This Privacy Policy governs it.
  • Data you upload — the voter files and contact lists you bring to the platform — belongs to you (the customer). You are the controller; WalkLists acts as your processor, handling that data only to provide the Services on your instructions. If you are an individual whose information appears in a customer's list and you wish to access or delete it, please contact the organization that uploaded it; we will support them in responding.

3. How We Use Your Information

We use collected information to:

  • Provide and improve the platform, walk-list generation, mapping, and mobile apps.
  • Process your uploaded data into walk lists, optimized routes, and enriched records.
  • Manage your account and process payments.
  • Synchronize canvassing data and team activity in real time.
  • Send service-related communications and respond to support requests.
  • Detect and prevent fraud, enforce our Terms of Service, and comply with legal obligations.

We do not use your data to serve third-party advertising, and we do not track you across other companies' apps or websites.

4. Data Security

We protect your data with encryption in transit (HTTPS/TLS), private and access-controlled storage, role-based access, hardened session and cookie settings, and CSRF protection. Card data never touches our servers. A full description is on our Security & Trust page.

5. How We Share Information & Our Sub-Processors

We do not sell your personal information. We share data only as needed to run the Services, with vetted providers ("sub-processors") who are bound to protect it:

  • Stripe — payment processing (PCI-DSS Level 1).
  • Amazon Web Services (SES) — transactional and account email delivery.
  • CSV2Geo — geocoding, map tiles, and property/roof/hazard data enrichment.
  • HERE Technologies — fallback address geocoding.
  • DigitalOcean (Spaces) — encrypted storage for field photos.
  • Google and Apple — optional single sign-in, if you choose it.
  • Pusher — real-time field/team synchronization.
  • ScaleChat (a Scale Campaign service) — in-app team messaging.
  • NREL / OpenEI / EIA (U.S. government / public APIs) — solar production estimates from an address; no contact PII is sent.

We may also disclose information for legal compliance (when required by law or valid legal process), in a business transfer (merger, acquisition, or asset sale), or to protect the rights, safety, and property of Scale Campaign, our users, or the public.

6. Data Retention

  • Account data is retained while your account is active. You may request deletion of your account and data at any time.
  • Uploaded files and generated walk lists are retained for the duration of your subscription. Pay-as-you-go data is available for one-time download per purchase unless a separate preservation agreement is made.
  • Field and canvassing data is retained for the duration of your subscription and can be exported by authorized admin users.
  • Usage logs are retained for up to 90 days for security and analytics.

7. Mobile App Data

When you use the WalkLists mobile apps:

  • Location: With your permission, the app uses your device GPS to show your position, optimize walking routes, and stamp the location and time of each knock for proof-of-presence. We do not track your location when you are not actively canvassing.
  • Camera & Photos: With your permission, the app captures field photos. EXIF metadata is stripped before upload, and photos are stored in a private bucket served only through short-lived signed links.
  • Offline use: Knocks logged offline are queued securely on the device and sync to our servers when connectivity returns.
  • Collected field data flows to our secure servers; it cannot be exported from the app itself — only authorized admins can export from the platform.

For the per-store disclosures, see our Apple App Privacy (iOS) and Google Play Data Safety (Android) pages — they mirror exactly what we declare to each store.

8. Cookies and Tracking

We use only the cookies needed to keep you signed in, secure forms, and render the right experience for your role. We do not use advertising or third-party analytics tracking cookies. See our Cookie Policy for the full list and how to control them.

9. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, and to object to or restrict certain processing. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no "sale" or "targeted advertising" for you to opt out of — but you may still exercise the other rights below.

  • California (CCPA/CPRA): rights to know, access, delete, correct, and non-discrimination for exercising them. We do not sell or share your personal information.
  • EU/UK/EEA (GDPR): rights of access, rectification, erasure, restriction, portability, and objection. Our lawful bases are contract performance, legitimate interests, consent (where required, e.g. device permissions), and legal obligation.
  • Everyone: you can update account information in-app or ask us to help.

To exercise a right, email [email protected] with the subject "Privacy Request", or to delete your account and data use our account deletion page. We will verify your identity and respond within the timeframe required by applicable law. If your data is part of a customer's uploaded list, see Section 2.

10. International Data Transfers

We operate from and host on infrastructure in North America. If you access the Services from outside North America, your information will be transferred to and processed there. Where required, we rely on appropriate safeguards for such transfers.

11. Payment Information

All payment transactions are processed by Stripe. Scale Campaign does not view, store, or have access to your full card numbers or bank details. Transactions are between you and the payment processor and financial institution.

12. Children's Privacy

The Services are intended for business and organizational use and are not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it promptly.

13. Third-Party Links

Our website may link to third-party sites. We are not responsible for their privacy practices or content, and we encourage you to review their policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted here, and we will make reasonable efforts to notify registered users of material changes by email. Please check this page periodically.

15. Contact Us

For questions, requests, or complaints about this Privacy Policy or our data practices:

  • Email: [email protected]
  • Phone: (616) 439-4102
  • Address: Scale Campaign LLC, Grand Rapids, MI