Your privacy is our promise.

Welcome to the official website (the "Site") of MAHA Action, Inc. ("MAHA Action," "we," "us," or "our"). MAHA Action is a Delaware-incorporated 501(c)(4) social welfare organization.

This Privacy Policy explains how we collect, use, share, and protect personal information when you use the Site, sign up for communications, make a contribution, or otherwise interact with us. By using the Site, you agree to this Privacy Policy. If you do not agree, please do not use the Site.

This policy is separate from our Terms of Service.

Information You Provide Directly

• Identity and contact information: name, email address, postal address, phone number, mobile number
• Demographic information: occupation, employer, ZIP code, age range, gender (when relevant to our work)
• Communications: the content of messages you send to us
• Contribution information: payment details (processed by our PCI-compliant payment processor) and any information required by federal or state campaign finance or tax law
• Volunteer and program information: when you sign up to volunteer, attend an event, or participate in a program

Information Collected Automatically

• IP address and approximate geographic location
• Device type, browser, operating system, and unique device identifiers
• Pages visited, links clicked, time spent on pages, referring URLs
• Date and time of visit

Information From Third Parties

• Service providers who help us operate the Site, send communications, or process contributions
• Public records and lists used for advocacy outreach
• Affiliated MAHA entities and partner organizations, where lawful and consistent with applicable law
• Social media platforms when you interact with us there

This section is required by federal law (TCPA) and U.S. wireless carrier policies. Read it carefully if you sign up for our text messages.

How You Opt In

You opt in to receive text messages from MAHA Action only when you affirmatively provide your mobile phone number to us through one of the following methods:

• Submitting a form on our website that includes a mobile phone number field and a clearly displayed SMS consent disclosure
• Texting an opt-in keyword (such as "JOIN") to one of our published phone numbers
• Providing your mobile number on a paper form, petition, or in-person sign-up that includes the consent disclosure

By opting in, you consent to receive recurring marketing, advocacy, and informational text messages from MAHA Action at the mobile number you provide, including messages sent using an automatic telephone dialing system or prerecorded voice technology where applicable. Consent is not a condition of any donation, membership, or other transaction.

Types of Messages You May Receive

• Legislative alerts and "tell your senator" or "call your representative" action requests
• Event invitations and reminders
• Volunteer recruitment and assignments
• Contribution requests in support of MAHA Action's issue advocacy
• Updates about our policy work, reports, and educational content
• Confirmations and receipts

Message Frequency

Message frequency varies. You can typically expect 4 to 8 messages per month, but frequency may be higher during legislative pushes, near elections, or in response to major policy developments.

Message and Data Rates

Message and data rates may apply. Charges are determined by your wireless carrier and are not controlled by MAHA Action.

How to Opt Out

• Reply STOP to any text message you receive from us to unsubscribe.
• You may also reply with END, QUIT, CANCEL, UNSUBSCRIBE, or similar terms.
• After you opt out, we may send a single confirmation message acknowledging your unsubscribe request.
• If you change your mind, you may opt back in by texting START or by signing up again on our website.

How to Get Help

Reply HELP to any text message for assistance, or contact us at privacy@mahaaction.org.

Mobile Information Sharing, Important

We do not sell, rent, lease, transfer, or otherwise share your mobile phone number or SMS opt-in data with any other party for that party's own marketing or promotional purposes. This restriction applies to all third parties and to other entities in the MAHA ecosystem. If you wish to receive text messages from another MAHA entity, you must separately opt in to that entity's program.

Your mobile information is shared only with our SMS service provider and other vendors strictly to deliver the text messages you have requested, and as required by law.

Carriers and SMS Service Providers

We deliver text messages through our SMS service provider and your wireless carrier. The identity of our current SMS service provider is available on request to privacy@mahaaction.org. Carriers are not liable for delayed or undelivered messages. We may also work with other technology vendors that assist us in operating our text messaging program; those vendors are contractually required to protect your information and use it only to provide services to us.

Compatible Carriers

Our text messaging program is compatible with all major U.S. wireless carriers, including AT&T, T-Mobile, Verizon, US Cellular, and others.

Records of Consent

We retain records of your opt-in (date, time, source, and IP address where applicable) for the duration of our relationship with you and for a reasonable period thereafter, in order to comply with applicable laws and respond to carrier inquiries.

When you provide your email address, we may send you email communications about our advocacy work, events, contribution opportunities, and other matters relating to MAHA Action's mission. All marketing emails comply with the federal CAN-SPAM Act and include a working unsubscribe link.

You may opt out of marketing email at any time by clicking the "unsubscribe" link in any email or by emailing privacy@mahaaction.org. We may continue to send transactional emails (donation receipts, contribution confirmations, responses to your inquiries) after you unsubscribe from marketing.

You will receive marketing or advocacy phone calls from MAHA Action only if you have separately opted in to receive such calls by providing your phone number through a form, sign-up, or other intake method that includes a clear consent disclosure for telephone outreach.

By opting in, you consent to receive calls from MAHA Action and our agents at the number you provide, which may include calls placed using an automatic telephone dialing system, an artificial voice, or a prerecorded voice. Consent is not a condition of any donation, membership, or other transaction.

To opt out of marketing calls, email privacy@mahaaction.org or follow the opt-out instructions provided in any voice message. To opt out of texts, see the SMS section above. Standard call rates from your carrier may apply.

• Provide, operate, and improve the Site and our services
• Send you communications you have requested or that relate to your relationship with us
• Process contributions and comply with campaign finance and tax reporting requirements
• Conduct advocacy programs (legislative alerts, volunteer mobilization, events, education)
• Personalize content and offers
• Conduct analytics, research, and internal business operations
• Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity
• Comply with legal obligations and respond to legal process
• Establish, exercise, or defend legal claims

We may use automated tools, including AI-assisted systems, to analyze data, segment audiences, prioritize outreach, and personalize content. We do not use automated decision-making to make decisions that produce legal or similarly significant effects on you.

Service providers and vendors. We share information with companies that help us operate the Site, send communications, process contributions, host data, perform analytics, or provide other services. They are contractually required to protect your information and use it only for the services they provide to us.

Affiliated MAHA entities. MAHA Action operates as part of the MAHA ecosystem of affiliated organizations. Personal information you provide to one MAHA entity may be shared with other MAHA entities for purposes consistent with our common mission, including advocacy outreach, event coordination, and supporter engagement.

*Important exception for SMS: Mobile phone numbers and SMS opt-in data are not shared with other MAHA entities or any other party for marketing or promotional purposes. If you wish to receive text messages from another MAHA entity, you must separately opt in to that entity's program

Required reporting. Information may be disclosed to government agencies and regulators as required by federal or state law, including campaign finance, tax, and other applicable reporting obligations.

Legal process. We may share information in response to a subpoena, court order, lawful request from law enforcement, or other legal obligation.

Business transactions. We may share information in connection with a merger, acquisition, dissolution, sale of assets, or restructuring of any MAHA entity.

With your consent. We may share information for any other purpose disclosed when we collect the information, with your consent.

Aggregated or de-identified information. We may share information that does not identify you for any lawful purpose.

We do not sell or share your personal information with non-affiliated third parties for monetary or other valuable consideration in exchange for their use of your information for their own marketing purposes.

We and our service providers use cookies, pixel tags, web beacons, software development kits, and similar technologies to operate the Site, analyze usage, and personalize your experience.

Types of Technologies We Use

• Essential cookies: required for Site functionality.
• Analytics cookies: help us understand how visitors use the Site.
• Functional cookies: remember preferences and settings.
• Advertising and targeting cookies: used by us and our advertising partners to deliver relevant advertising and measure campaign effectiveness.
• Pixel tags and web beacons: small image files in emails and pages to track opens, clicks, and other interactions.

Your Choices

• Browser controls: Most browsers allow you to block or delete cookies.
• Global Privacy Control (GPC): If your browser sends a GPC signal, we treat it as an opt-out of "sales" or "sharing" of personal information for cross-context behavioral advertising under applicable state laws.
• Industry opt-outs: aboutads.info/choices (DAA) or optout.networkadvertising.org (NAI).
• Mobile devices: iOS and Android offer device-level controls to limit ad tracking.

Do Not Track

Our Site does not currently respond to "Do Not Track" browser signals, but we do honor Global Privacy Control (GPC) signals as described above.

We may work with third-party advertising vendors (such as social media platforms and ad networks) to deliver advertising about our advocacy work. These vendors may use cookies, pixels, and other technologies to collect information about your activity on our Site and other sites in order to serve relevant advertising. Some of this activity may be considered a "sale" or "sharing" of personal information under certain U.S. state privacy laws. See the Privacy Rights section for opt-out information.

When you make a contribution to MAHA Action, federal and state campaign finance and tax laws may require us to collect and report certain information, including your full legal name, mailing address, occupation and employer (for contributions over certain thresholds), contribution amount, and date.

To the extent any contribution to MAHA Action or any affiliated entity triggers reporting obligations under federal or state law, the required contribution information may be disclosed to the relevant regulator and may appear in publicly available filings. Contributions to a 501(c)(4) social welfare organization are not deductible as charitable contributions for federal income tax purposes and are generally not reported to the Federal Election Commission. Contributions made to affiliated political committees are subject to separate reporting requirements set forth in those committees' own privacy notices and disclosures.

Payment card information is processed directly by our PCI-compliant third-party payment processor; we do not store full payment card numbers on our systems.

Contributions are non-refundable except as required by law or where the contribution does not comply with applicable law.

• Subscriber and contact records (email/SMS opt-ins): for the duration of your relationship with us, plus a reasonable period thereafter to maintain records of consent
• Contribution records: as required by federal and state campaign finance and tax law (typically at least 7 years)
• Volunteer and event records: for the duration of program activity plus a reasonable archival period
• Job applicant records: as long as needed to evaluate your application and as required by employment law
• Site analytics and log data: typically up to 26 months in identifiable form
• Records of legal or compliance significance: as required by applicable law

When personal information is no longer needed, we will delete or de-identify it, except where retention is required by law.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. No system is perfectly secure, and we cannot guarantee the security of any information you transmit to us.

If we experience a data breach affecting your personal information, we will notify you and applicable regulators as required by law.

The Site and our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it. Parents or guardians who believe their child has provided us with personal information may contact us at privacy@mahaaction.org.

You must be at least 18 years old to use the Site, make a contribution, or sign up for our text messaging program.

Depending on your state of residence, you may have certain rights regarding your personal information. We honor these rights for residents of all states with comprehensive privacy laws, including:

California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Delaware (DPDPA), Indiana (INCDPA), Iowa (ICDPA), Kentucky (KCDPA), Maryland (MODPA), Minnesota (MCDPA), Montana (MTCDPA), Nebraska (NDPA), New Hampshire (NHPA), New Jersey (NJDPA), Oregon (OCPA), Rhode Island (RIDPPA), Tennessee (TIPA), Texas (TDPSA), Utah (UCPA), and Virginia (VCDPA). We also honor Nevada residents' rights under Nevada SB 220.

Rights Available

• Know and Access: request information about the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and categories of third parties with whom we share it.
• Delete: request deletion of personal information we have collected from you (subject to legal exceptions, including campaign finance recordkeeping).
• Correct: request that we correct inaccurate personal information.
• Portability: obtain a copy of your personal information in a portable, machine-readable format.
• Opt out of sale or sharing: opt out of any "sale" of personal information or "sharing" for cross-context behavioral advertising. MAHA Action does not sell personal information.
• Opt out of targeted advertising or profiling: opt out of processing for targeted advertising or for profiling that produces legal or similarly significant effects.
• Limit use of sensitive information: limit our use of sensitive personal information to purposes necessary to provide services you have requested.
• Non-discrimination: not be discriminated against for exercising your privacy rights.
• Appeal: appeal a denial of a privacy rights request (where applicable under your state's law).

Sensitive Personal Information

We may collect categories of "sensitive personal information" under state law, including geolocation, contents of messages, and information about your political beliefs as inferred from your engagement with our advocacy work.

Where state law requires consent or limits processing of sensitive personal information, we rely on the following bases: (i) processing of political-belief inferences is necessary to provide the advocacy services and communications you have requested; (ii) other sensitive information is processed only for purposes you have authorized or that are otherwise permitted by law. You may at any time limit our use of sensitive personal information to purposes strictly necessary to provide the services you have requested by emailing privacy@mahaaction.org. Exercising this right may limit your ability to receive personalized advocacy communications.

How to Exercise Your Rights

• Email: privacy@mahaaction.org
• Online form: [link to privacy request form on Site]
• Mail: MAHA Action, Inc., Attn: Privacy Officer, 101 Constitution Ave NW, Suite 650W, Washington, D.C. 20001
• Opt out of sale or sharing: use the "Do Not Sell or Share My Personal Information" link on our Site, or set a Global Privacy Control (GPC) signal in your browser.

We will acknowledge receipt of your request within 10 business days and respond substantively within 45 days. We may extend this period by an additional 45 days when reasonably necessary, and will notify you of any extension.

Verification

To protect your privacy, we may need to verify your identity before processing your request.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. We may require proof that the agent is authorized.

Appeal

If we decline to act on your request, you may appeal by emailing privacy@mahaaction.org with subject line "Privacy Request Appeal" within 30 days of receipt of our decision.

California-Specific Disclosures

In the prior 12 months, we have collected the following categories of personal information: identifiers, customer records, commercial information, internet and network activity, geolocation data, professional information, inferences, and sensitive personal information (as described above). We collect this from you directly, from your interactions with our Site, from service providers, and from publicly available sources. We use it for the purposes described in How We Use Information. We disclose it to the categories of recipients described in How We Share Information.

"Shine the Light": We do not share personal information with third parties for their direct marketing purposes (and as noted, mobile and SMS opt-in data is never shared for any other party's marketing).

Nevada-Specific Disclosures

Nevada residents may request that we not "sell" their personal information. Email privacy@mahaaction.org with subject "Nevada Opt-Out."

The Site may include links to third-party websites and social media platforms. We are not responsible for the privacy practices of those third parties. If you interact with us on a social media platform, the platform's privacy policy and your account settings govern that interaction.

The Site is operated in and intended for users in the United States. We do not target users in the European Economic Area, the United Kingdom, or other foreign jurisdictions. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

If you apply for a position with MAHA Action, we use the information you provide solely to evaluate your application and comply with employment-related legal obligations. We may share your information with service providers that assist with hiring and background screening.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top. Material changes will be communicated through additional notice (such as a banner on the Site or email to subscribers) where required by law.

• Email: privacy@mahaaction.org
• Mail: MAHA Action, Inc., Attn: Privacy Officer, 101 Constitution Ave NW, Suite 650W, Washington, D.C. 20001

This Privacy Policy was originally effective November 19, 2024. The current version takes effect on the date listed at the top of this policy and applies prospectively to information processing on or after that date. For information collected prior to this version, the prior version of the policy in effect at the time of collection governs except where this version provides equal or greater protection.