How we collect, use, and protect your personal information
Impact Driven AI is committed to protecting your privacy and handling your personal data with care. This policy explains what we collect, why we collect it, and the rights you have — whether you're in the US, California, or the EU. By using our website or services, you acknowledge that you've read and understood this policy.
We may collect and process the following types of personal data:
We do not intentionally collect sensitive personal data (such as government ID numbers, financial passwords, or health information) unless it is necessary for a specific service and provided by you with consent.
Directly from you — when you:
Automatically — as you interact with our website, we use cookies and tracking technologies to collect device and browsing data (see Section 04).
From third parties — in limited situations, including:
We use your personal data only for clear, legitimate purposes and always with a valid legal basis under applicable law:
We will only use your data for the purposes it was collected for. If we need to use it for a materially different purpose, we will notify you and obtain any required consent.
Our website uses cookies and similar tracking technologies to operate our site, understand how it's used, and improve your experience. A cookie is a small text file stored on your device when you visit a site, allowing it to recognize your device and remember certain preferences.
Types of cookies we use:
Your choices: When you first visit, you'll see a cookie notice requesting consent for non-essential cookies (where required by law). You can manage cookies by:
We honor the Global Privacy Control (GPC) signal as a valid opt-out of the sale/sharing of personal information under CCPA. If your browser sends this signal, we will treat it accordingly. Note that Do Not Track (DNT) is a separate signal without an established legal standard; our site may not respond to DNT signals.
We do not sell your personal information to third parties. We may share your data in the following limited circumstances:
For data transfers outside the EEA, we rely on approved mechanisms such as the European Commission's Standard Contractual Clauses to ensure an adequate level of protection.
Personal data is stored on secure servers in the United States and/or other jurisdictions where we or our service providers operate. Where data is transferred internationally, we ensure appropriate legal safeguards are in place.
Security measures include:
No method of internet transmission or electronic storage is 100% secure. We take reasonable measures to protect your data but cannot guarantee absolute security.
Retention: We retain personal data only as long as necessary for the purpose it was collected, or as required by law. In general:
Once the retention period expires, data is deleted or anonymized so it can no longer be associated with you.
If you are in the European Economic Area (or a jurisdiction with equivalent data protection laws), you have the following rights under the GDPR:
Right of Access: Request confirmation of whether we process your data and obtain a copy of it along with information about how it's used.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data in certain circumstances (the "right to be forgotten"). Exceptions apply where we are required by law to retain the data.
Right to Restrict Processing: Ask us to limit processing in certain situations, such as while verifying accuracy of contested data.
Right to Data Portability: Receive your data in a structured, machine-readable format and have it transferred to another controller where technically feasible.
Right to Object: Object to processing based on legitimate interests, and object at any time to processing for direct marketing purposes.
Right Not to Be Subject to Automated Decisions: Not be subject to decisions made solely by automated processing that produce significant legal or similar effects. (We do not currently engage in such automated decision-making.)
Right to Withdraw Consent: Withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: File a complaint with your national Data Protection Authority. We encourage you to contact us first so we can address your concerns directly.
To exercise any of these rights, contact us using the details in Section 11. We may ask you to verify your identity to protect your data. We will respond within one month of receiving your request (with a possible two-month extension for complex cases, with notice).
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
Right to Know (Access): Request disclosure of the personal information we've collected about you in the preceding 12 months — including categories, sources, purposes, and specific pieces of information.
Right to Delete: Request deletion of personal information we've collected from you, subject to legal exceptions.
Right to Correct: Request correction of inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing: Direct us not to sell or share your personal information. Impact Driven AI does not sell personal information, and we do not share it for cross-context behavioral advertising. If our practices change, we will update this policy and implement appropriate opt-out mechanisms. We honor the Global Privacy Control (GPC) signal as a valid opt-out request.
Right to Limit Use of Sensitive Personal Information: Limit our use of sensitive personal information to what is necessary to perform the requested services. We do not currently collect sensitive personal information as defined under California law.
Right to Non-Discrimination: You will not receive discriminatory treatment — such as a different price, reduced service level, or denial of service — for exercising any of your CCPA rights.
To exercise your California rights, contact us as described in Section 11. Please specify which right you are invoking and provide enough information for us to verify your identity. We will confirm receipt within 10 business days and respond within 45 calendar days (with a possible 45-day extension with notice).
Only you or an authorized agent may make a verifiable consumer request. If using an authorized agent, we may require written proof of their authorization.
Marketing Communications: You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email or by contacting us directly. You may still receive transactional or service-related communications even after opting out of marketing.
Third-Party Websites: Our website may contain links to third-party sites or services. This Privacy Policy does not apply to those sites. We encourage you to read their privacy policies. We are not responsible for the content or data practices of sites we do not operate.
Children's Privacy: Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If we learn that a child has provided us with personal data, we will delete it promptly. If you believe a minor has submitted information to us, please contact us immediately.
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or for other operational reasons. When we do, we will revise the "Last Updated" date at the top of this page.
If we make material changes, we will notify you via a notice on our website or by email, and obtain any required consents. We encourage you to review this policy periodically to stay informed about how we protect your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, we're here to help.
We respond Monday through Thursday.
Impact Driven AI
Long Family Media LLC
For EEA residents, you may also contact your national Data Protection Authority. For California residents, you may contact the California Attorney General's Office.