Privacy Policy

Last updated: March 26, 2026

Impactly ("we", "us", "our") operates the Impactly application at app.getimpact.ai and the website at getimpact.ai. This policy describes how we collect, use, and protect your personal information.

1. Information We Collect

Account information

When you create an account, we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name, email, and profile picture from Google.

Usage data

We collect information about how you use Impactly, including tasks created, projects managed, and feature interactions. This helps us improve the product.

Content you provide

We store the content you create in Impactly: tasks, comments, project descriptions, file attachments, and AI teammate configurations.

Technical data

We automatically collect browser type, operating system, IP address, and device information when you access Impactly.

2. How We Use Your Information

• Provide and maintain the Impactly service
• Authenticate your identity and manage your account
• Send transactional emails (invitations, password resets, notifications)
• Improve the product based on usage patterns
• Respond to support requests
• Detect and prevent fraud or abuse

3. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — database hosting, authentication, and file storage (data stored in the US)
• Vercel — application hosting and CDN
• Google Analytics — anonymous usage analytics on the marketing site
• Resend — transactional email delivery (invitations, password resets)
• OpenAI — AI teammate features (task content may be sent to OpenAI's API when AI features are used)

We do not sell your personal data to third parties.

4. Cookies

Impactly uses essential cookies for authentication and session management. The marketing site uses Google Analytics, which sets cookies to measure visitor traffic. No advertising cookies are used.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Some data may be retained in backups for up to 90 days.

6. Data Security

We use industry-standard security measures including encrypted connections (TLS), encrypted data at rest, and role-based access controls. Webhook secrets are encrypted using pgcrypto. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing activities

To exercise these rights, contact us at the email below.

8. Children's Privacy

Impactly is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through the application. Continued use of Impactly after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy, contact us at:

Email: help@getimpact.ai