Privacy Policy

Effective October 12, 2026

This policy explains how KnockTurf handles personal information. It covers two different things: information about the people who visit this site and use KnockTurf, for which we are responsible, and information that campaigns put into KnockTurf, which we hold for them.

1. Who we are

KnockTurf is provided by 14407831 Canada Inc. ("KnockTurf", "we", "us"), 644 Millway Ave, Concord, ON L4K 4H4.

Our Privacy Officer is accountable for how we handle personal information. Questions, requests and complaints go to the Privacy Officer at privacy@knockturf.com or at the mailing address above.

2. Information about visitors and account holders

For this information, KnockTurf is the organisation responsible.

What	Why we use it
Access requests: name, email, phone, organisation, your message, and the link tags that brought you to us	To reply to you, decide on your request, and learn which of our messages people respond to
Accounts: name, email, phone, role, campaign	To run your account, sign you in, and send you service messages such as invitations, receipts and deletion notices
Billing: what you bought, when, and your billing details	To charge you, keep tax and accounting records, and answer billing questions. Card details are entered on Stripe's hosted page and never reach our servers.
Sign-in and security: session cookies, IP address, device and browser details, and server logs	To keep you signed in, protect accounts and investigate problems
Site analytics: Google Analytics on our public pages only, and only if you accept it	To understand how the site is used. Nothing from Google Analytics loads until you accept, and it is never used inside the signed-in app.

We do not sell personal information, and we do not use it for advertising profiles.

3. Information a campaign puts into KnockTurf

A campaign (the candidate, party, organisation or business that signs up) decides what it collects and why. For that information the campaign is the organisation responsible, and KnockTurf acts as its service provider under our Data Processing Addendum.

It can include addresses, door-visit records and answers, and contact details a canvasser types at a door. Only where the campaign has switched names on can it also include the names of people at an address, their unit and poll, whether they voted (from a voters' list the campaign uploads), and whether they agreed to be contacted.

We use this information only to provide KnockTurf to that campaign. We do not sell it, share it with another campaign, or use it for our own marketing. We count visits to bill the campaign, and we may use statistics that identify no one to run and improve the service.

If you are a voter or resident and want to see, correct or remove what a campaign holds about you, or not to be contacted, please contact that campaign. KnockTurf gives every campaign the tools to answer you. If you cannot reach the campaign, write to privacy@knockturf.com and we will pass your request on and help the campaign respond.

When you are marked do-not-contact or removed, we keep a one-way coded (hashed) copy of your email address and phone number, with no name. It stops you being recorded as agreeing to contact again if a canvasser adds you later.

4. Your rights

You can ask us for access to the personal information we hold about you as a visitor or account holder, ask us to correct it, and withdraw consent you have given (for example to analytics or marketing email). We answer within 30 days. Withdrawing consent may mean we cannot provide part of the service, and we will tell you if so.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the privacy commissioner of your province where provincial law applies.

5. Where information is stored and who helps us

KnockTurf's application, database and uploaded files are hosted by Amazon Web Services in Canada (Montreal). Our email is sent through Amazon in Canada.

Some service providers process information outside Canada, including in the United States: Stripe (payments) and Google (address search, maps, and site analytics where you accept it). Information processed in another country may be accessible to that country's courts and authorities under its laws. The full list of service providers is in the Data Processing Addendum.

6. How long we keep it

Information	How long
Access requests that do not become an account	24 months, then deleted
Account information	While the account is open, then up to 24 months
Billing and tax records	7 years, as Canadian tax law requires
Server and security logs	Up to 90 days, longer only while investigating a security problem
Database backups	Up to 30 days, then deleted automatically. Information deleted from the live service stays in backups until they expire.

Campaign information is kept as the campaign chooses, within the rules in our Data Processing Addendum. In short: for a campaign with a voting day, names are deleted a chosen number of days after voting day (1 to 365) unless the campaign chooses to keep them, and every administrator is emailed at least 30 days before any deletion. A campaign can also delete everything at any time from its dashboard.

7. How we protect it

Encrypted connections, encrypted storage for uploaded files, hashed passwords and sessions that expire. Each campaign's data is kept separate, and a canvasser sees names only at doors in the areas assigned to them. Downloads that contain names are logged. Our staff look at campaign data only when needed to support that campaign, keep the service secure, or comply with the law.

If a breach of security affects personal information we are responsible for and creates a real risk of significant harm, we will notify the Privacy Commissioner of Canada and the people affected, as the law requires.

8. Email from us

We send marketing email only to people who have agreed to receive it, or whom Canada's anti-spam law lets us email, such as candidates who publish a campaign address. Every message names us, gives our mailing address and has a working unsubscribe link, which we honour within 10 business days. Service messages about your account are sent whether or not you subscribe.

9. Changes to this policy

We will update this page when our practices or the law change, and show the new effective date at the top. When a change affects how we handle a campaign's data, we will also email the campaign's administrators.

KnockTurf is built around Canadian privacy law. If a campaign's data is also subject to privacy law elsewhere (for example the EU General Data Protection Regulation or a US state law), please talk to us before using KnockTurf for that data.