Privacy Policy

1. Introduction

Blue Comet LLC ("Blue Comet," "we," "us," or "our") operates the Blue Comet campaign finance filing application (the "Service") at domains including app.bluecomet.io. This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service. Our Terms of Use also apply.

2. Information We Collect

Account and authentication information

When you create or sign in to an account, we may collect:

• Name and email address
• Authentication identifiers and sign-in metadata provided by our identity provider (Auth0)
• If you choose Google sign-in, basic profile information Google shares with Auth0 (such as email and name), subject to your Google account settings and Google's policies
• Passkeys or other authentication methods you enroll

Committee and filing data

To provide campaign finance reporting tools, we store information you enter or import, which may include committee details, officer and contact information, contribution and expenditure records, donor and payee information, receipt images or OCR-extracted data, report drafts, generated XML, billing and plan status, and related workflow data.

Payment information

Payments are processed by Stripe. We do not store full payment card numbers on our servers. We may retain payment status, plan credits, invoices or receipts metadata, and related billing records.

Technical and usage information

We may collect IP address, browser and device information, timestamps, security and rate-limit logs, and similar technical data needed to operate, secure, and improve the Service.

3. How We Use Information

We use information to:

• Provide, maintain, and improve the Service
• Authenticate users and manage accounts, invitations, and committee membership
• Generate campaign finance reports and related files at your request
• Process payments and manage prepaid report credits
• Communicate about the Service, security, billing, and support
• Detect abuse, prevent fraud, enforce our Terms, and comply with law

We do not sell your personal information.

4. How We Share Information

We may share information with:

• Service providers that help us operate the Service, including Auth0 (authentication), Stripe (payments), ActBlue (when you connect an ActBlue account for imports), Google Cloud (for example, OCR processing), hosting and email providers, and similar vendors under contractual obligations to protect data
• Committee members and invitees you authorize within the Service
• Legal and safety disclosures when required by law, regulation, legal process, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to appropriate confidentiality protections

Blue Comet helps you prepare filings for the Virginia Department of Elections. We do not automatically submit your reports to government agencies; you control download and filing. Information you choose to file with regulators becomes subject to applicable public disclosure rules.

5. Google User Data

If you sign in with Google, we receive limited account information (typically email address and basic profile details) via Auth0 solely to create or authenticate your Blue Comet account. We use that information only to provide sign-in and account management. We do not use Google user data for advertising. You can revoke Google access at any time through your Google Account permissions.

6. Cookies and Similar Technologies

We use cookies and similar technologies as needed for authentication sessions, security (such as CSRF or state parameters), and core Service functionality. Disabling cookies may prevent you from signing in or using the Service.

7. Data Retention

We retain account, committee, and filing-related data for as long as your account remains active or as needed to provide the Service, meet legal and accounting obligations, resolve disputes, and enforce agreements. You may request account deletion by contacting us; some records may be retained where legally required or for legitimate business purposes such as fraud prevention and billing records.

8. Security

We implement administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices

• Update account email and authentication methods where available in the Service
• Disconnect third-party integrations you previously connected (such as ActBlue)
• Request access, correction, or deletion of personal information by contacting us

Depending on your location, you may have additional rights under applicable privacy laws. We will respond to verifiable requests consistent with those laws.

10. Children's Privacy

The Service is intended for adults engaged in political committee administration and related professional activities. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

11. International Users

The Service is designed primarily for Virginia campaign finance filing. If you access the Service from outside the United States, you understand that information may be processed in the United States and other locations where we or our providers operate.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact

Questions about this Privacy Policy may be directed to [email protected].

Blue Comet LLC · Privacy inquiries for the Blue Comet filing application