Privacy Policy

Last updated: February 11, 2026

1. General Information

Impactean ("Impactean," "Company," "we," "us," "our") is committed to protecting and respecting your privacy. This Privacy Policy describes our privacy practices in relation to the information we collect from you when you:

  • Visit our website at impactean.com or app.impactean.com
  • Complete an Impactean Impact Capacity Assessment
  • Receive your personalized Impact Capacity Report
  • Interact with your AI Executive Coach
  • Use our commitment tracking and progress features
  • Access any applications, features, or services provided by us

Collectively, these are referred to as the "Services." Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with this policy, please do not access or use our Services.

2. Data Controller

Impactean is the Data Controller of your personal data collected through the Services. This means we determine the purposes and means of processing your personal data and are responsible for ensuring it is handled in compliance with applicable data protection laws.

If you are using Impactean through an organizational (business) plan provided by your employer, your employer may also act as a Data Controller or Joint Controller for certain categories of data. In such cases, your employer's own privacy policy will also apply.

You can address any privacy-related queries to us by emailing privacy@impactean.com or by using the contact details in Section 18 below.

3. What Categories of Personal Data Do We Collect?

Personal data includes any information relating to an identified or identifiable natural person. It does not include data that cannot be linked to an individual (such as anonymous or aggregated data). We collect, use, store, and transfer the following categories of personal data:

a. Identity Data Your first name, last name, and any profile photo you choose to upload.

b. Contact Data Your email address, and optionally your phone number and mailing address.

c. Account Data Your username, password (stored in hashed form), account preferences, subscription plan, and billing history.

d. Assessment Data Your responses to the Wheel of Impact™ assessment, your Impact Capacity Score, pillar scores (Purpose, Passion, Persistence), sub-dimension scores, and your personalized development report content.

e. Coaching Data Conversations, messages, and interactions with your AI Executive Coach, including goals discussed, commitments made, and coaching session history.

f. Commitment & Progress Data Weekly commitments you set, progress check-in responses, and reminders.

g. Payment Data Payment card details (processed securely by our third-party payment processor — we do not store full card numbers), billing address, transaction history, and subscription status.

h. Usage Data Information about how you use our website, application, and Services, including features accessed, pages viewed, assessment completion rates, and coaching engagement metrics.

i. Technical Data Your IP address, browser type and version, device information, operating system, time zone setting, cookie data, login timestamps, and other technical information collected when you access our Services.

j. Marketing Communications Data Your preferences regarding marketing content, communication frequency, and preferred channels.

4. How Do We Collect Your Personal Data?

We use different methods to collect data from and about you, including:

Direct Interactions

You provide us with personal data directly when you:

  • Create an account on our platform
  • Complete the Wheel of Impact™ assessment
  • Interact with your AI Executive Coach
  • Set and track weekly commitments
  • Subscribe to a paid plan or make a purchase
  • Fill in forms on our website (e.g., contact forms, newsletter sign-up)
  • Contact us by email, chat, or other communication channels
  • Participate in surveys, feedback requests, or promotions

Automated Technologies

As you interact with our Services, we automatically collect Technical Data and Usage Data about your equipment, browsing actions, and engagement patterns. We collect this data using:

  • Cookies and similar tracking technologies
  • Server logs and analytics tools

Third-Party Sources

We may receive personal data about you from third parties, including:

  • Your employer, if they have enrolled you in an organizational Impactean plan
  • Authentication providers if you sign in using a third-party service (e.g., Google)
  • Payment processors for transaction verification

Note: The provision of your personal data is voluntary. You may choose not to provide certain information; however, this may limit your ability to use the full functionality of the Services.

6. AI Coaching & Assessment Data

Given the sensitive nature of coaching conversations and assessment results, we want to be transparent about how this data is handled:

Assessment Data

  • Your individual assessment responses are used solely to generate your personalized Impact Capacity Score, pillar breakdowns, and development report.
  • Assessment data is encrypted both in transit and at rest using industry-standard encryption (AES-256).
  • If you are part of an organizational plan, your employer receives only aggregated, anonymized team-level insights — never your individual assessment responses or scores, unless you explicitly consent to sharing them.

AI Coaching Conversations

  • Your conversations with the AI Executive Coach are private and confidential.
  • Coaching conversations are stored securely and are accessible only to you.
  • We do not share individual coaching conversations with your employer, even on organizational plans.
  • Coaching data is used to personalize your experience, provide contextual guidance, and track your commitments and progress over time.
  • We may use anonymized and aggregated coaching interaction patterns (not content) to improve the quality of our AI coaching models.

Commitment & Progress Data

  • Weekly commitments, progress check-ins, and accountability data are visible only to you.
  • On organizational plans, employers may see aggregated engagement metrics (e.g., completion rates) but not the content of your commitments or coaching sessions.

7. Use of Artificial Intelligence

Impactean uses artificial intelligence as a core part of our Services. Here is how AI is used and the safeguards we have in place:

How We Use AI

  • AI Executive Coach: Our AI coach provides personalized coaching guidance based on your assessment results, coaching history, and stated goals. The AI is designed following ICF-aligned coaching competencies and behavioral science principles.
  • Report Generation: AI assists in generating personalized insights and development recommendations within your Impact Capacity Report.
  • Commitment Suggestions: AI may suggest commitments and action items based on your development areas and coaching conversations.

AI Safeguards

  • Our AI does not make automated decisions that have legal or similarly significant effects on you.
  • AI coaching is designed as a development tool — it is not a substitute for professional therapy, medical advice, or crisis intervention.
  • We regularly review and audit our AI systems for bias, accuracy, and alignment with coaching best practices.
  • Your coaching data is not used to train third-party AI models. Any model improvement uses only anonymized, aggregated data.

8. Do We Share Your Data with Third Parties?

We do not sell, trade, or rent your personal information. We share personal data only with carefully selected partners as necessary to provide our Services and fulfill our obligations. We will obtain your consent where required by law.

RecipientReason for Sharing
Cloud Infrastructure ProvidersTo securely host our platform, databases, and application infrastructure. Data is stored with encryption at rest and in transit.
Payment ProcessorsTo securely process your payments. We use PCI-DSS compliant payment processors and do not store full payment card details on our servers.
AI Service ProvidersTo power the AI Executive Coach functionality. Data shared with AI providers is subject to strict data processing agreements and is not used to train their general models.
Analytics ProvidersTo help us understand how our Services are used and improve the user experience. Data shared is anonymized or pseudonymized where possible.
Email & Communication ProvidersTo send transactional emails (e.g., account verification, password resets, coaching reminders) and, where you have opted in, marketing communications.
Your Employer (Organizational Plans Only)If you are on an organizational plan, your employer may receive aggregated, anonymized team analytics and engagement metrics. Individual assessment scores, coaching conversations, and commitment details are never shared without your explicit consent.
Government Authorities or Law EnforcementIf we in good faith believe we are compelled by applicable law, regulation, legal process, or government authority, or where necessary to exercise, establish, or defend legal rights.
Corporate Transaction PartnersIn connection with a merger, acquisition, reorganization, or sale of all or part of our business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

9. International Data Transfers

Impactean operates globally, and your personal data may be transferred to and processed in countries outside of your country of residence, including countries that may not have data protection laws equivalent to those in your home country.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data Processing Agreements with all service providers
  • Ensuring recipients maintain adequate security measures
  • Compliance with applicable adequacy decisions

You may request additional information about the safeguards we use for international transfers by contacting us at privacy@impactean.com.

10. Data Retention

We retain your personal data only as long as necessary to provide you with our Services and for legitimate business purposes. The specific retention periods depend on the type of data and the purpose for which it was collected:

Data TypeRetention Period
Account & Identity DataFor the duration of your active account, plus up to 12 months after account deletion for backup and legal compliance purposes
Assessment Data & ReportsFor the duration of your active account. You retain access to your report even after canceling a subscription. Deleted upon account deletion request.
AI Coaching ConversationsFor the duration of your active account. Deleted within 30 days of account deletion request.
Payment & Billing DataAs required by applicable tax and financial regulations (typically 7 years)
Technical & Usage DataUp to 24 months, then anonymized or deleted
Marketing Consent RecordsFor as long as the consent is valid, plus records retained for compliance

In some circumstances, we may anonymize your personal data so that it can no longer be associated with you. We may use such anonymized data indefinitely without further notice for research and product improvement purposes.

11. Data Security

We maintain commercially reasonable and industry-standard security safeguards to protect your personal data. Our security measures include:

  • Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Assessment data and AI coaching conversations receive additional encryption.
  • Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data, on a need-to-know basis.
  • Infrastructure Security: Our platform is hosted on enterprise-grade cloud infrastructure with SOC 2 compliance, automated backups, and disaster recovery capabilities.
  • Regular Audits: We conduct regular security assessments and vulnerability testing of our systems.
  • Employee Training: All team members undergo data protection and security awareness training.
  • Incident Response: We maintain an incident response plan to promptly address any potential data breaches.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. If you have reason to believe that your interaction with us is not secure or that data has been compromised, please immediately notify us at support@impactean.com.

12. Your Rights Regarding Your Personal Data

Under applicable data protection laws (including GDPR, CCPA, and other regional regulations), you may have the following rights. You are not required to pay to exercise these rights.

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This Privacy Policy serves as the primary means of providing this information.

Right of Access

You have the right to request access to the personal data we hold about you and to receive a copy of it. You can access most of your data directly through your account dashboard.

Right to Rectification

If you believe any personal data we hold about you is inaccurate or incomplete, you can request that it be corrected or updated. You can update most information directly in your account settings.

Right to Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal data in certain circumstances. Upon request, we will delete your account, assessment data, coaching conversations, and all associated personal data, subject to any legal retention obligations.

Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal data (e.g., while we verify the accuracy of data you have disputed).

Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, including objecting to direct marketing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transfer it to another service provider where technically feasible. This includes your assessment results and report data.

Right to Withdraw Consent

Where we rely on your consent to process personal data, you can withdraw consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe your personal data has been handled unlawfully.

How to exercise your rights: You can exercise most rights directly through your account settings. For requests that require our assistance, please email privacy@impactean.com. We will respond to your request within 30 days (or sooner as required by applicable law).

13. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver relevant content. Below is a summary of the types of cookies we use:

Cookie TypePurposeRequired?
Strictly NecessaryEssential for the website and application to function (e.g., authentication, session management, security)Yes
Performance & AnalyticsHelp us understand how visitors use our website and improve performance (e.g., Google Analytics)No — opt-out available
FunctionalRemember your preferences and settings (e.g., language, display preferences)No — opt-out available
MarketingUsed to deliver relevant advertisements and measure campaign effectivenessNo — opt-out available

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

  • View what cookies are stored and selectively delete them
  • Block third-party cookies
  • Block cookies from specific sites
  • Block all cookies
  • Delete all cookies when you close your browser

Please note that disabling cookies may affect the functionality of our Services. Strictly necessary cookies cannot be disabled as they are essential for the platform to operate.

14. Marketing Communications

When We Send Marketing

We will only send you marketing communications if you have opted in to receiving them, or where permitted by law (e.g., if you are an existing customer and we are marketing similar services). Marketing communications may include:

  • Product updates and new feature announcements
  • Tips and insights related to personal and professional development
  • Newsletters and educational content
  • Special offers, events, or promotions

How to Unsubscribe

You can opt out of marketing communications at any time by:

  • Clicking the "unsubscribe" link at the bottom of any marketing email
  • Updating your communication preferences in your account settings
  • Contacting us at privacy@impactean.com

Please note that even after opting out of marketing, you will continue to receive transactional and service-related communications (such as assessment completion confirmations, coaching reminders, payment receipts, and security alerts), as these are necessary for the operation of your account.

15. Children's Privacy

Our Services are designed for and directed at adults (individuals 18 years of age or older). We do not knowingly collect personal data from children under the age of 16 (or the applicable age of digital consent in your jurisdiction).

If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information as soon as possible. If you believe that a child has provided us with personal data, please contact us immediately at privacy@impactean.com.

16. US State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a comprehensive privacy law, you may have additional rights, including:

  • Right to Know: You can request information about the categories and specific pieces of personal data we have collected about you, the sources of that data, the purposes for collection, and the categories of third parties with whom we share it.
  • Right to Delete: You can request that we delete personal data we have collected from you, subject to certain exceptions.
  • Right to Opt Out of Sale/Sharing: Impactean does not sell your personal data or share it for cross-context behavioral advertising purposes.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
  • Right to Correct: You can request correction of inaccurate personal data.

To exercise these rights, please contact us at privacy@impactean.com. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

California Residents: Under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), you have specific rights regarding your personal information. We do not sell personal information. For more information, you can submit a verifiable consumer request by emailing us.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

  • We will update the "Last updated" date at the top of this page
  • For significant changes, we will notify you by email or through a prominent notice within our Services
  • Where required by law, we will seek your consent before applying material changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

18. Contact Us

If you have questions about this Privacy Policy, want to exercise your data protection rights, or have concerns about how we handle your personal data, please get in touch:

General Privacy Inquiries

privacy@impactean.com

Security Concerns

support@impactean.com

General Support

support@impactean.com

Contact Form

Visit our Contact page

We aim to respond to all privacy-related inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.