{"meta":{"publisher":"Impactean","site":"https://www.impactean.com","contact":{"privacy":"privacy@impactean.com","security":"security@impactean.com","legal":"legal@impactean.com","support":"support@impactean.com"},"data_residency":{"primary_data_store":"Supabase, AWS Frankfurt (eu-central-1)","transactional_email":"Resend, AWS Dublin (eu-west-1)","application_compute":"Vercel (Washington, D.C., USA)","ai_inference":"OpenAI (United States) — EU SCCs Module 2","payments":"Stripe Payments Europe, Ltd. (Ireland) with global routing"},"certifications_own":[],"controls_alignment":["GDPR","SOC 2 Trust Services Criteria"],"certifications_inherited":[{"vendor":"Supabase","attestation":"SOC 2 Type 2, HIPAA-ready"},{"vendor":"Vercel","attestation":"SOC 2 Type 2, ISO 27001"},{"vendor":"OpenAI","attestation":"SOC 2 Type 2, CSA STAR"},{"vendor":"Stripe","attestation":"PCI-DSS Level 1, SOC 1+2 Type 2, ISO 27001"},{"vendor":"Resend","attestation":"SOC 2 Type 2"}],"published":"2026-05-19","pack_version":"1.0.5","llms_txt":"https://www.impactean.com/llms.txt","llms_full_txt":"https://www.impactean.com/llms-full.txt","security_txt":"https://www.impactean.com/.well-known/security.txt"},"documents":[{"id":"privacy","title":"Privacy Policy","version":"2026-05-19","url":"https://www.impactean.com/legal/privacy","markdown_url":"https://www.impactean.com/legal/privacy.md","sha256":"360f8ad99f800b9fc48e8fd5a4b9000852afbc4582581c25566a823b98959c87","summary":"UAE controller (Valenyr FZCO); EU-hosted primary stores; published retention schedule (§9) with inactive-account and backup rules; DPIA for AI coaching; account closure via privacy@impactean.com.","applies_to":["all users"],"languages":["en"]},{"id":"terms","title":"Terms of Service","version":"2026-05-19","url":"https://www.impactean.com/legal/terms","markdown_url":"https://www.impactean.com/legal/terms.md","sha256":"45cea5da3ea097fcad2ce6e8512d5e40e86ec69ae046383451bfa68deab7b2eb","summary":"Binding agreement between you and Valenyr (UAE) for the Impactean service at impactean.com and app — UAE governing law/Dubai jurisdiction with carve-outs for mandatory consumer rights.","applies_to":["all users"],"languages":["en"]},{"id":"cookies","title":"Cookie Policy","version":"2026-05-19","url":"https://www.impactean.com/legal/cookies","markdown_url":"https://www.impactean.com/legal/cookies.md","sha256":"ef0307a1032832641919b1e7042e75cf82cdd04a776b43d6abbda5cfd55eb6ed","summary":"Strictly necessary auth cookies plus consent persistence; subdomain tracker posture snapshot; excludes marketing/session-replay trackers on Impactean-deployed bundles.","applies_to":["all users"],"languages":["en"]},{"id":"sub-processors","title":"Sub-processors","version":"2026-05-19","url":"https://www.impactean.com/legal/sub-processors","markdown_url":"https://www.impactean.com/legal/sub-processors.md","sha256":"a037a658b8417be6f895f959123747c9741fd3b8c41959da173cbf4ff2e52e87","summary":"Live list of every vendor that processes Impactean personal data, with hosting region, transfer safeguard, and 30-day change notice.","applies_to":["all users"],"languages":["en"]},{"id":"dpa","title":"Data Processing Addendum (DPA)","version":"2026-05-19","url":"https://www.impactean.com/legal/dpa","markdown_url":"https://www.impactean.com/legal/dpa.md","sha256":"a1aa55d331981be32e762c1dd95209d10936c9d6ecb8df992f949be051b9004e","summary":"GDPR Article 28 Data Processing Addendum for business customers, with EU SCCs Module 2 and 72-hour breach notification.","applies_to":["business customers"],"languages":["en"]},{"id":"security","title":"Trust & Security","version":"2026-05-19","url":"https://www.impactean.com/legal/security","markdown_url":"https://www.impactean.com/legal/security.md","sha256":"bbd6afdf98ac83f8c897549d2c62def08fd3932bf84a9f1fe9f71eda53aa77ac","summary":"EU-resident data plane, TLS + AES-256, retention/deletion controls aligned with SOC 2 TSC (Impactean not independently certified), sub-processor SOC 2/ISO attestations.","applies_to":["all users"],"languages":["en"]},{"id":"ai","title":"AI and Your Data","version":"2026-05-19","url":"https://www.impactean.com/legal/ai","markdown_url":"https://www.impactean.com/legal/ai.md","sha256":"1150713fc8e177b761ffef088a5eacc00da2b93689e3a1b017d389c44cd16fca","summary":"Which AI models we use (gpt-5.1, gpt-4o family, tts-1), retention windows, training opt-out, confidentiality limits, and not-a-crisis-service disclaimers.","applies_to":["all users"],"languages":["en"]}]}