1. Information We Collect
We collect information you provide directly to us — your email address, name, job title, target seniority levels, and the contents of the weekly work logs and AI-generated appraisals you create inside Impactly AI. This includes accomplishments, project metrics, hurdles overcome, and team contribution summaries.
We also collect automated telemetry and system data when you interact with the app. This includes cookies, local browser storage, anonymized usage logs, browser type, device information, and referral sources to help optimize performance and user experience.
2. How We Use Your Information
Your work-log entries are processed by Mistral-hosted AI models to generate structured, STAR-formatted self-appraisals scoped to your account. We use this data strictly to provide, maintain, and support the application.
We enforce a strict privacy boundary: we do not use your private work logs, goals, metrics, or generated evaluations to train large language models — neither ours nor any third-party providers. Your data remains strictly isolated.
3. Information Sharing
We do not sell, rent, or trade your personal data. Data is shared only with trusted third-party service providers strictly required to host and operate the Impactly AI infrastructure:
- Supabase: For cloud database storage, authentication routing, and Row-Level Security containment.
- Mistral AI: For processing work logs into structured appraisal drafts via secure API channels.
- Resend: For transactional emails, account notifications, and weekly check-in reminders.
- Vercel and Render: For hosting web application servers and front-end assets.
- PostHog and Google Analytics: For tracking anonymized user flows and interaction telemetry.
4. Google AdSense & Advertising Cookies
We use Google AdSense to serve advertisements on our website. Google, as a third-party vendor, uses cookies to serve ads on our site. Google’s use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the Internet.
Users may opt out of personalized advertising by visiting Google's Ads Settings. Alternatively, users can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.
5. Data Security
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 standards. We enforce database-level Row-Level Security (RLS) so that every backend database query is cryptographically filtered to return only the rows owned by the currently authenticated user session.
While we implement state-of-the-art protections, no database or network is entirely impenetrable. You accept that Impactly AI is not liable for breaches outside our reasonable control. Please exercise discretion and avoid entering classified company secrets.
6. Data Retention & Deletion
We retain your data for as long as your account is active to provide you with historical log features. You can request deletion of your account and associated data at any time.
Upon requesting deletion via support channels, your database entries will be wiped from active database tables, and backup logs will cycle out within a standard 30-day window.
7. Contact
For any questions regarding this Privacy Policy, your data, or the services, please email us directly at impactlyai@zohomail.in.