Privacy Policy
Mission Control is campaign software. A campaign (the operator) uses it to contact voters by text, phone, email and web chat, and to keep a record of those conversations. This policy explains what the software does with personal information, who can see it, and how to get out of it.
Who is responsible for what
The campaign running this software decides who gets contacted, what is said, and what happens to the information afterwards. In privacy terms the campaign is the party accountable for that information. Oldman AI Solutions provides and operates the software on the campaign’s instructions, and does not sell, rent, share or independently market to anyone in a campaign’s records.
This matters for a practical reason: if you want your information corrected or removed, the campaign that contacted you is who can order it, and we will act on that instruction.
What the software holds
- Contact details, typically a name, phone number and partial postal code, usually supplied to the campaign as an elector or membership list, or given directly by someone who got in touch.
- Conversations, meaning the full text of messages sent and received, and a written transcript of what was said on a phone call. Calls are transcribed for the assistant to respond and for the campaign’s record. A phone bank call a volunteer places through the campaign’s number is recorded, both voices, and kept as a transcript (see Phone bank calls, below). A voicemail a person leaves for the campaign is kept as audio for 30 days so someone can listen and call back, then the audio is deleted. Otherwise call audio is not retained as a recording, except a message a person chooses to leave after the tone on a campaign’s robocall (see Robocalls, below).
- Campaign notes, such as whether someone supports the candidate, whether they intend to vote, whether they need a ride, and any follow-up the campaign owes them.
- Consent and contact history, including every opt-out, every message sent, and every delivery result. This is kept deliberately and is the record that stops someone being contacted again after they have asked us not to.
People who sign in
Campaign staff, organisers and volunteers who use the console have an account, given to them by a campaign administrator. There is no public sign-up. An account holds:
- A name and email address, and the role the person has on each campaign they belong to.
- The password, stored only as a one-way hash that cannot be turned back into the password.
- A record of each sign-in: when it happened, whether it succeeded, and the IP address it came from. When a sign-in is tried against an address that has no account, we keep a short one-way mark instead of the address, so repeated guessing can be seen without storing what was typed.
- The work done in the console, such as call outcomes recorded and messages approved, which becomes part of the campaign’s record.
The Android app
Mission Control Politics is also available as an app for Android phones. The app opens this same service in the phone’s web browser (usually Google Chrome), full screen, so everything in this policy applies to it unchanged. It does not ask for access to the phone’s contacts, location, camera, microphone or files.
Where a campaign’s phone bank dials from the volunteer’s phone, tapping a number hands it to the phone’s own dialer, and the call is placed by the volunteer’s phone and carrier. Mission Control does not connect, listen to, or record that call; what it holds is what the volunteer records on screen afterwards. Where it calls through the campaign’s own number instead, the call is connected and recorded as described under Phone bank calls, below. Signing in stores a session cookie on the phone, as it would in any browser.
You are talking to an AI assistant
When the campaign assistant texts, calls, or answers a web chat, it says that it is an AI assistant. It is not the candidate, it does not speak for the candidate beyond positions the campaign has reviewed and approved, and it will pass a request to a person when asked. Nothing in this software is designed to leave anyone with the impression they have spoken to the candidate when they have not.
How to stop being contacted
Reply STOP to any text and the number is blocked immediately, across every channel, without needing to reach a person. You can also say so on a call, reply to an email, or use the unsubscribe link in one. Opt-outs are permanent and are preserved when a campaign loads a new list, so being on a later list does not put you back in contact.
Who else processes this information
The software depends on a small number of service providers, each doing one job:
- Supabase, database and storage
- Vercel, application hosting
- Twilio, sending and receiving texts and calls
- Anthropic, generating the assistant’s replies, and reading the text of a message a person chooses to leave on a robocall (see Robocalls, below)
- OpenAI, converting the assistant’s words to speech on calls, and turning into text a recorded phone bank call and a message a person chooses to leave on a robocall. On a call to the assistant it receives the sentence the assistant is about to say, not the caller’s own audio, which Twilio transcribes. On a phone bank call it receives the recording of the call, after the call. On a robocall it receives only the recorded message, after the call. It is never given the campaign’s records
- Resend, sending email
Each receives only what its job requires. None of them is given a campaign’s records for their own purposes.
The phone assistant answers, it does not call
The phone assistant only answers. It never places a call, and nothing on it dials a list: the person chose to ring the campaign and chose to speak. The assistant is not told who is calling beyond the number the phone network shows, it looks nothing up about them to have the conversation, and it knows only the campaign’s own approved answers.
What it hears is transcribed by Twilio and answered by Anthropic, and only the words it speaks back are sent to OpenAI to be turned into a voice. A caller who gives their name will hear it said back, so that name is in the sentence OpenAI is given. The call is recorded in the campaign’s own database as a transcript, and a person at the campaign can read it.
Phone bank calls
A campaign may let its volunteers call voters through the campaign’s own phone number. The software rings the volunteer’s phone first, and only after the volunteer answers and presses 1 does it call the voter, from the campaign’s number, and join the two. The voter hears “This call is recorded.” as soon as they answer.
These calls are recorded from the moment the voter answers: both voices, the volunteer’s and the voter’s. After the call, OpenAI turns the recording into text, and that transcript of both sides is kept with the campaign’s other records and deleted with them, or sooner on request. The audio itself is held by Twilio only until it has been turned into text, then deleted. If that fails, Twilio keeps the audio until it is turned into text or deleted. Either way, the audio is deleted no more than 30 days after the call, even if it was never turned into text, and a voicemail left for the campaign is kept as audio for 30 days, then deleted.
Robocalls
A campaign may send a recorded message by automated call to phone numbers on its own list. Each call opens by saying who it is for and how to reach them, and pressing 9 on any call stops further automated calls to that number from this service. The software records how each call ended (answered, voicemail or no answer) and, on a call that asks a question, the key pressed (1, 2 or 3).
Unless the campaign switches it off, after the campaign’s recording a person who answers is invited to leave a message for the campaign, in these words: “If you'd like to leave a message for the campaign, record it after the tone.” Only what is said after the tone is recorded, never the rest of the call, and an answering machine is never invited or recorded. The recording is held in the campaign’s database in Canada, and Twilio’s copy is deleted once it has been saved.
After the call, OpenAI turns the recording into text, and Anthropic reads that text to sort the message for the campaign: where the person says they stand, whether they ask for a ride or a call back, any question they ask, and a one-sentence summary. Anthropic receives the text of the message, the words of the campaign’s recording and any key pressed, never the audio, the person’s number or anything else from the campaign’s records. When the message says where the person stands, the reading may be noted on the campaign’s record of them, but it never replaces a level someone on the campaign recorded or its list supplied, and where the campaign offers rides, a request for one goes on its list of rides to arrange. A reading never sends anything to anyone. The recording, its text and the reading are kept with the campaign’s other records and deleted with them, or sooner on request.
Where the information is held
The database is stored in Canada, in Montréal, and the application itself runs in Canada, in Montréal. The providers that send texts and email, carry calls, generate the assistant’s replies and voice, and transcribe and read messages left for the campaign process information in the United States. So information held in Canada is processed in the United States whenever one of those providers acts on it, and some providers may process it elsewhere.
Information processed in another country is subject to that country’s laws, including lawful access by its authorities. We say this plainly because a Canadian campaign contacting Canadian voters should know it.
How long it is kept
For as long as the campaign keeps its account, and then for as long as the campaign directs. Opt-out records are the exception and are kept indefinitely, because deleting the record that someone asked not to be contacted is how they end up contacted again.
Accounts are kept until they are deleted. A campaign’s sign-in log is part of its records and is kept with them. The counters used to slow down password guessing are deleted automatically after 30 days.
Access, correction and deletion
You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Contact the campaign that reached you. If you cannot reach them, or you do not know which campaign it was, write to us at greg@oldmanaisolutions.com and we will identify the campaign and pass the request on. We keep the opt-out record itself for the reason above.
If you have an account, you can have it deleted: see Delete your account for the steps and for what is deleted and what is kept. A campaign’s administrator can also remove you from that campaign at any time.
Security
Access to the campaign console requires authentication, traffic is encrypted in transit, and provider credentials are held as server-side secrets that are never sent to a browser. Inbound requests from the telephone network are verified as genuine before anything acts on them.
Changes
If this policy changes materially we will update the effective date above and tell operators before it takes effect.
Contact
Oldman AI Solutions Inc., Coaldale, Alberta, Canada.
greg@oldmanaisolutions.com