Privacy Policy

Impactt provides a marketplace and workflow platform where brands manage creator campaigns, creators submit content, approved creative can be launched into paid advertising, and performance data can be used for reporting and creator payouts.

This Privacy Policy explains what information we collect, how we use it, and the choices available to users of Impactt.

We collect information that users provide directly, information generated through use of the platform, and information received from connected services that users authorize.

• Account and workspace information, including names, email addresses, organization names, roles, profile details, and authentication records.
• Brand campaign information, including briefs, budgets, campaign settings, review decisions, approved creative, assets, landing page URLs, and internal notes.
• Creator information, including profile details, niche, portfolio samples, campaign applications, submissions, captions, hooks, media files, performance summaries, payout status, and support requests.
• Payment and payout information processed through Stripe, including customer IDs, subscription records, checkout session IDs, connected account IDs, payout readiness, transfer references, and transaction metadata. Impactt does not store full payment card numbers.
• Meta integration data authorized by a brand, including ad account IDs, Page information needed to create ads, campaign/ad set/ad IDs, creative IDs, spend, impressions, clicks, conversion actions when available, and access tokens stored for API access.
• Usage, device, and diagnostic information, including log data, timestamps, browser details, IP-derived location, error messages, security events, and similar operational data.

• Provide, secure, and maintain Impactt accounts, workspaces, campaigns, submissions, billing, and creator payout workflows.
• Connect brand ad accounts, sync advertising structures, create ads from approved creative, retrieve performance metrics, and attribute spend to creators and campaigns.
• Calculate platform fees, creator earnings, campaign balances, subscription state, and payout readiness.
• Review content, enforce platform rules, prevent fraud, protect users, and comply with payment processor, advertising platform, and legal requirements.
• Send service messages, product updates, support responses, billing notices, security alerts, and other operational communications.
• Improve reliability, analytics, product quality, onboarding, and user experience.

When a brand connects a Meta account, Impactt requests only the permissions needed to read advertising data, resolve Page advertising identity, and create or manage ads from approved Impactt creative. Impactt does not use Meta data to build unrelated profiles, sell personal information, or disclose Meta platform data for unrelated advertising products.

Meta access tokens and integration secrets are stored with restricted access and are used only to operate the connected brand workspace. Brands can disconnect Meta access by removing the integration in Impactt or by removing Impactt from their Meta account settings.

We share information only as needed to operate the platform, fulfill user instructions, comply with law, or protect Impactt and its users.

• With brands and creators in the same campaign or workspace, based on each user's role and permissions.
• With service providers that host, secure, process payments, store media, deliver email, analyze logs, or otherwise help operate Impactt.
• With Stripe for billing, checkout, subscriptions, connected accounts, and creator payouts.
• With Meta when a brand connects a Meta account and uses Impactt to sync ad data or create ads.
• With professional advisors, authorities, or counterparties when required for legal compliance, dispute resolution, safety, security, or business transfers.

Brands may see creator profile information, niche, campaign fit information, portfolio examples, submitted content, approved creative, and performance records needed to manage their campaigns. Impactt does not require brands to see a creator's personal social media accounts unless the creator chooses to share them or a campaign specifically requires that information.

We retain information for as long as needed to provide the platform, maintain accurate campaign and payout records, comply with legal, tax, accounting, fraud-prevention, and advertising platform obligations, and resolve disputes. We may retain aggregated or de-identified information that no longer identifies a user.

We use administrative, technical, and organizational safeguards designed to protect account, campaign, payment, payout, media, and integration data. No system can be guaranteed to be completely secure, but we limit access to sensitive data based on role and operational need.

• You can update account and workspace information through the platform where available.
• You can disconnect third-party integrations, including Meta, through Impactt or the third-party account settings.
• You can request access, correction, deletion, or restriction of your personal information by contacting Impactt.
• You can request deletion using the Data Deletion Instructions page linked from this policy.

Impactt is not intended for children under 13, and users must have the legal capacity and authority required to use the platform for their business, brand, or creator work.

We may update this Privacy Policy as the platform, integrations, or legal requirements change. The effective date above shows when this policy was last updated.