Privacy Policy
Last updated October 15, 2026
The short version
Your local’s data belongs to your local, and your local decides how it is used — we process it on the local’s behalf, only to run the Service. We keep each local’s data separate, we never sell it (phone numbers least of all), we don’t use it for advertising, and our AI providers can’t keep it or train on it. Members with questions about their information should start with their local; we help locals answer them.
This Privacy Policy explains what information labor.dog collects, how we use and protect it, who helps us process it, and the choices people have. labor.dog is operated by Keogan Industries LLC ("labor.dog", "we", "us"). Please also read our Terms of Service.
Who this policy covers
This policy applies to union locals that use labor.dog and to the people whose information is in the Service: officers, staff and members who sign in; members and others in a local's records; voters; survey respondents; people who receive a local's emails and texts; people in meetings a local records; visitors to union websites we host; and visitors to labor.dog itself.
Your local and labor.dog
Each union local decides what information about its members and others it puts into labor.dog and what it is used for. For that information, the local is in charge (under some privacy laws, the "business" or "controller"), and labor.dog processes it on the local's behalf and on its instructions as its service provider (or "processor"). We do not use a local's information for our own purposes, except as this policy describes for running, securing and supporting the Service.
If you are a member and have a question or request about your information, please contact your local first; we help locals respond. labor.dog is in charge of the information we handle for our own business, such as account and billing contacts, support requests, and visits to labor.dog.
Information we collect
Information locals and their users put in
- Accounts: name, email address, phone number, union local, roles and permissions, password (stored only as a secure hash), and two-factor authentication settings.
- Membership records: contact details, member status, dates, classifications, committee and position assignments, and other details the local keeps.
- Union work: documents, messages and chat, tasks, questions, meeting agendas and minutes, attendance, grievances and their files, surveys, and website content.
- Payroll and dues: time entries, pay rates and schedules where a local uses payroll, dues balances, deductions and payment history, and political-contribution authorizations a member signs.
- Elections: voter rolls, credential delivery, and ballots, which are stored separately from voters (see Ballots and anonymous surveys).
- Meeting recordings: if a local uses the meeting notetaker, the audio of an online meeting, the transcript, and who spoke.
Information collected as the Service is used
- Security and activity records: sign-ins, IP address, browser and device type, and an audit log of changes people make, which locals can review.
- Pages viewed and presence: which pages of the Service a signed-in person viewed and when, and whether they are currently online, which a local's administrators can see with the right permission.
- Devices: push-notification tokens for the labor.dog mobile apps.
- Messaging records: whether emails and texts were delivered, bounced, opened or clicked, and text-message consent and STOP/START history.
- Usage of paid features: usage and dollar charges for email, texts, AI and storage, for billing.
Information from others
- Sign in with Google or Apple: see Signing in with Google below.
- Payments: Stripe processes card and bank payments. We receive confirmation of payments and limited details such as the card brand and last four digits, never full card or bank numbers.
Union website visitors
Union websites we host count visits without cookies and without storing visitors' IP addresses or browser details. Each visit is reduced to the page, the referring site, the country (when known), and a coarse device and browser type, plus an anonymous code that changes every day and cannot be traced back to a person, even by us. If a visitor fills in a form on a union website, what they submit goes to that local.
Signing in with Google
If your local turns it on, you can sign in to labor.dog with your Google account. When you do, Google shares your name, email address and profile photo with us (Google's basic "openid", "email" and "profile" permissions). We use only your Google account ID and your verified email address, and only to sign you in to your existing labor.dog account; we keep that email address so it can be shown in your sign-in settings. We do not store your profile photo, and we never request access to Gmail, Google Drive, your contacts, your calendar or any other Google data. Signing in with Google never creates a new account, we do not share your Google data with anyone, and we do not use it for advertising or to train AI models. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect Google in your sign-in settings at any time and sign in with your email and password instead.
Signing in with Apple works the same way: Apple shares your name (only the first time you sign in) and your email address, or a private relay address if you choose to hide it. We use only your Apple account ID and verified email address to sign you in to your existing account, and nothing else.
How we use information
- To provide the Service to each local, following its instructions and settings;
- To keep the Service and its users secure, prevent fraud and abuse, and keep a reliable audit trail;
- To deliver the emails, texts and notifications a local or the Service sends;
- To bill locals and process payments;
- To provide support and tell administrators about their account, security, and changes to the Service;
- To monitor performance and fix problems, using information about how the Service performs with people and locals removed where possible;
- To meet legal obligations and enforce our Terms of Service.
We do not sell personal information, we do not share it for targeted advertising, and we do not use it to build advertising profiles.
Union membership and other sensitive information
Some laws treat union membership as sensitive personal information. Because labor.dog exists to serve union locals, the information in it often shows that a person belongs to a union. We use that information only to provide the Service to the person's own local, and never to infer things about people or for any other purpose. Grievances, payroll, dues and other records may also be sensitive; locals control who can see them through roles and permissions, and confidential records are limited to the people a local authorizes.
Ballots and anonymous surveys
For online voting, the Service keeps who voted separate from how they voted: ballots are stored without any link to the voter, so the local, its election committee, and labor.dog cannot see an individual's choices. The voter roll records only whether someone has voted. A vote-confirmation email says only that a vote was recorded. Election activity is kept in a tamper-evident audit log.
When a local runs an anonymous survey, the answers are stored without any link to who gave them, or when.
AI processing
When someone uses an AI feature, the information needed for the task (for example, a question, a document or part of one, a meeting transcript, or a picture of a web page) is sent to an AI model to produce the answer. These requests go through OpenRouter, which we have set up to use only model providers that do not keep the data or use it for training. The models we use today come from companies including Anthropic, OpenAI, Google and Alibaba (Qwen), served by providers OpenRouter selects under those rules. Neither we nor our AI providers use a local's information to train AI models, and one local's information is never used to answer another local's questions. AI features are optional, and locals can choose which models their people may use.
How we share information
We share personal information only:
- With the local it belongs to, and with the people the local authorizes in the Service;
- As the local directs, for example when it emails or texts its members, publishes its website, or connects a payment account;
- With service providers who help us run the Service, listed below, under contracts that limit their use of the information to providing their service to us;
- For legal reasons: when we believe in good faith that the law, a valid legal process, or the protection of someone's safety or of our rights requires it. Where the law allows, we will tell the affected local before disclosing its information in response to a legal demand;
- In a business transfer: if labor.dog is merged, acquired or sells its assets, information may transfer to the new owner, who must continue to protect it as this policy describes.
Service providers
These companies process personal information for us, only to provide their service:
| Provider | What it does for us |
|---|---|
| Laravel (Laravel Cloud, Nightwatch) | Application hosting, database, queues and realtime updates (on Amazon Web Services and Neon in the United States); error and performance monitoring |
| Cloudflare | File storage, network security and DNS, bot protection (Turnstile), and page rendering for PDFs and website screenshots |
| Postmark (ActiveCampaign) | Email delivery |
| Telnyx | Text message delivery |
| OpenRouter and the AI model providers it routes to | AI features, using only providers that keep no data and do not train on it |
| Recall.ai | Joining and recording online meetings for the meeting notetaker |
| Stripe | Subscription billing, and online dues payments into each local's own Stripe account |
| Apple and Google | Sign in with Apple and Google, and mobile push notifications |
| Bunny Fonts | Typefaces on labor.dog's own marketing pages |
We may change service providers at any time. We keep this list current, and we will tell locals about material changes as described in Changes to this policy.
SMS / Text Messaging
Union locals using labor.dog may send text messages (SMS) to their members through the Service. Messages members may receive include alerts, announcements, meeting notices, voting and event reminders, and other communications from their union local. Members opt in themselves from their account and confirm by replying YES; a phone number on file with a local is not consent.
No mobile information (including phone numbers) collected for the purpose of sending text messages will be sold, rented, or shared with any third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent are never shared with any third party. Phone numbers are used solely to deliver messages from the member's own union local through our messaging provider (Telnyx), which processes the messages on our behalf and is contractually prohibited from using the data for any other purpose.
Message frequency varies. Message and data rates may apply. Recipients can opt out at any time by replying STOP to any message, and can reply HELP for assistance. Carriers are not liable for delayed or undelivered messages. For full details on the messaging program, see our Terms of Service.
Locals use labor.dog to email their members. Campaign emails can include a small image and tracked links so the local can see whether its emails are opened and clicked; we handle this ourselves rather than through an advertising or analytics company. Every campaign includes an unsubscribe link, and we honor unsubscribes, bounces and spam complaints across the local's campaigns. Messages about your account, such as sign-in codes, invitations and voting credentials, are sent whether or not you unsubscribe from a local's campaigns.
Cookies and union websites
labor.dog uses only the cookies it needs to work: to keep you signed in, to protect forms against forgery, and to remember preferences such as dark mode. We do not use advertising cookies or third-party analytics cookies. Our own marketing pages load typefaces from Bunny Fonts, which receives visitors' IP addresses to deliver them.
Union websites we host do not set cookies for analytics. A local may embed content from other services in its website, such as videos, maps, calendars or donation forms; those services may set their own cookies and collect information under their own privacy policies when a visitor loads that content.
How long we keep information
We keep a local's information while its account is open and as needed to provide the Service. Some records are kept for set periods or deleted automatically:
| Record | How long |
|---|---|
| Audit log of changes | 7 years (sign-in and security events: 2 years) |
| Email delivery log | 2 years |
| Pages viewed in the Service | 365 days after the last view |
| Union website visits (raw) | 35 days; afterwards only daily totals are kept |
| Union website form submissions | 365 days, or the period the local chooses (30 days to 10 years) |
| Meeting transcripts | 30 days, or the period the local chooses (1 to 90 days); our recording provider deletes its copy within 72 hours |
| Screenshots taken by the website assistant | 30 days |
| Email content held by our email provider | 45 days |
Elections, dues, payroll and other union records are kept until the local deletes them, because locals often must keep them for legal and bylaw reasons. For 30 days after a local's account closes, the local can ask us for a copy, and we will send it a .zip file containing all of its data. After that, we delete its information from the Service, except where the law requires us to keep it. Backups are kept for a limited period on a rolling basis and are then overwritten, so deleted information also leaves our backups over time.
Security
We protect information with technical and organizational measures, including encryption in transit, encryption of stored data by our hosting providers, separation of each local's data, role-based access, two-factor authentication, audit logging, secure hashing of passwords, and the ballot separation described above. No system is perfectly secure, so we cannot guarantee absolute security. If a security incident affects personal information, we will notify affected locals and others as the law requires.
Where information is stored
labor.dog is operated from Reno, Nevada and serves union locals in the United States. Information in the Service, including stored files, is stored and processed in the United States. The Service is not directed to people outside the United States.
Your rights and choices
Depending on where you live, privacy laws (including California's and other states' privacy laws) may give you the right to know what personal information is held about you, to get a copy of it, to correct it, and to have it deleted, and the right not to be discriminated against for using these rights.
- Members and others in a local's records: your local controls this information. Ask your local, which can view, correct, export and delete it in the Service. If you contact us, we will pass your request to your local and help it respond.
- Account holders: you can see and update much of your own information in your profile, and you can turn off text alerts, unsubscribe from campaign emails, and remove push notifications at any time.
- Requests to us: for information labor.dog is in charge of, email support@labor.dog. We will confirm your identity before acting, may accept requests from an agent you authorize, and will respond within the time the law requires. If we decline your request, you may appeal by replying to our decision.
We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about people.
Children
The Service is meant for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child's information has been added, contact the local or us and we will help remove it.
Changes to this policy
We may update this policy as the Service changes. If a change is material, we will tell locals' administrators by email or in the Service before it takes effect. The date at the top shows when this policy last changed.
Contact
Questions about this Privacy Policy or a privacy request? Reach us at support@labor.dog.
Keogan Industries LLC, a Nevada limited liability company based in Reno, Nevada.