Privacy Policy

Vantage is operated by Drutek Ltd ("we", "us"), a company registered in England and Wales. This page sets out what personal data we hold, why, and what you can do about it. It is written in plain English. The Data Processing Agreement (DPA) signed at onboarding is the legally binding version.

Who's the data controller?

For your branch's electoral roll, contact data and canvassing records, you (your branch or party) are the data controller. We are the data processor — we hold and process the data on your instructions.

For your Vantage user account (your name, email, login activity), we are the data controller.

What we hold

• Account data: your name, email, hashed password, the branches you belong to and your role.
• Electoral roll data: anything your branch chooses to upload from the full or open register, kept against ward boundaries.
• Canvassing data: outcomes, voting intention, conversation notes, follow-up flags — recorded by your volunteers.
• Operational data: walking routes, photos taken at the door, leaflet artwork, branch meeting minutes.
• Usage data: minimal access logs (timestamp, IP, request path) for security and debugging — retained 30 days.

What we don't do

• We do not sell your data, ever, to anyone.
• We do not use your canvassing or electoral roll data to train machine learning models.
• We do not run ad networks, behavioural tracking or third-party analytics that profile your users.

Where it lives

Vantage is hosted on UK-based servers. The only data leaving the UK is what's necessary for specific features you enable — for example, news article URLs sent to a language model for summarisation. We will tell you in the DPA exactly which sub-processors are involved and where they sit.

Sub-processors

We use a small number of third-party services to run Vantage. The current list is published in your DPA and updated when it changes. Today these include the hosting provider, our email delivery provider and our language-model provider (used only for the news briefing and address parsing).

Your rights

Under UK GDPR you can request access to, correction of, or deletion of personal data we hold about you. For branch-controlled data (electoral roll, canvassing records), please ask your branch — they're the controller. For your user account, email us at the address below and we'll respond within 30 days.

Export and deletion

Every dataset in Vantage exports as CSV or JSON. If your branch chooses to leave, we will hand you a complete export and delete your data within 30 days of contract end, unless we are legally required to retain it longer.

Cookies

The Vantage app uses a session cookie to keep you logged in. The marketing site (this page) loads Google Fonts and nothing else; no analytics or tracking cookies.

Changes to this policy

If we materially change how we process personal data we will email branch administrators ahead of the change and update the "Last updated" date above.

Contact

For privacy questions, email [email protected]. For a copy of the standard DPA, ask in your demo call.