Introduction
Capital Rights Lab, Inc. ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, and safeguard your information when you visit capitalrights.org.
Information We Collect
We collect information you voluntarily provide — such as your name, email address, and ZIP code when you sign our petition, or your email when you subscribe. We do not collect sensitive personal information such as Social Security numbers or health data.
If you donate, your payment is processed by Stripe, Inc. on Stripe's hosted platform. CRL receives limited transaction information — your name, email, and donation amount — but never your payment card number, bank details, or other financial account information.
Our website may automatically collect technical information including IP address, browser type, device type, and pages visited, through standard server logs and analytics, used solely to maintain and improve the site.
How We Use Your Information
We use your information to send updates about our research, litigation, and advocacy if you have subscribed; to respond to inquiries; and to improve our website. We do not sell, rent, or share your personal information with third parties for their marketing purposes.
Email Communications
If you subscribe, your email is processed through Buttondown, our email service provider. You may unsubscribe at any time using the link in every email.
Third-Party Services
Our website is hosted on Netlify; our domain is registered through GoDaddy; subscriptions are managed through Buttondown; donations are processed by Stripe, Inc. — we do not receive or store payment card information. Stripe's privacy policy is available at stripe.com/privacy. Each service has its own privacy policy.
Data Security
We take reasonable measures to protect your information from unauthorized access, use, or disclosure. However, no method of transmission or storage is completely secure.
Children's Privacy (COPPA)
Our website is not directed at children under 13, and we do not knowingly collect their personal information. If you believe we have, contact us at info@capitalrights.org and we will delete it promptly.
International Visitors (GDPR)
If you are in the EEA, UK, or Switzerland, you have rights under the GDPR. We process your data only with a lawful basis: your consent, our legitimate interests in operating the site, or compliance with legal obligations.
You have the right to access, correct, delete, object to or restrict processing, and to data portability. To exercise these rights, contact info@capitalrights.org; we respond within 30 days. We do not transfer data outside the EEA except where appropriate safeguards are in place.
Your Rights (CCPA)
Depending on your location, you may have rights under the California Consumer Privacy Act — to know what we collect, to request deletion, and to opt out of any sale of personal information. We do not sell personal information. To exercise these rights, contact info@capitalrights.org.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes are posted here with a revised date; material changes are noticed on our website or by email to subscribers.
Contact Us
Capital Rights Lab, Inc.
PO Box 73242
Washington, DC 20056
info@capitalrights.org