ImpactForesight PBC

Privacy Policy

 

Last Updated:  September 8th, 2024

​

ImpactForesight PBC exists to help new ventures, investors, customers, employees, government, and all other relevant stakeholders take more informed decisions about the consequences that innovations from organizations have on society, economy, and the planet. A fundamental part of responsible businesses is respecting privacy interests of all stakeholders. However, good sustainability impact management requires the collection and sharing of data with other stakeholders, to create transparency and allow for subjective interpretations. To overcome this challenge, we provide tools to allow data owners and providers share data with full transparency, so that data owners, providers are in full control what information they want to be communicated, by whom and how.

​

This Privacy Policy explains how information about you, or organizations registered on our platform is collected, used and disclosed by ImpactForesight PBC and its subsidiaries, (collectively, “ImpactForesight,” “we,” “us” or “our”) when you access or use our website, including our products and applications offered on our site for free or against subscription fees (collectively, the “Services”). By accessing the Site or using the Services, you agree to our collection, use and disclosure of your information as outlined in this Privacy Policy.

​

​

​1. Information we collect and how we collect it

​

When you access our Site or use the Services, we collect and store certain information about you (“personal information”) and the organizations that you may register on site (“organizational information”). Personal information and organizational information is information that, alone or in combination with other information in our possession, could be used to personally identify you or your organization. We collect the following categories of personal information, organizational information and other information as described below.

 

1.1. Personal Information you provide

​

1.1.1. Personal information required for creating a subscription to our products via our payment provider Stripe (www.stripe.com):

​

Our payment provider Stripe collects information including your name, e-mail address, credit card, bank account or other form of payment information offered for payment, billing address, phone number.. Subsequently, Stripe communicates to ImpactForesight information including your chosen subscription type, partial (but not complete) payment information, country of residence, date of subscription, and e-mail address.

​

1.1.2. Personal profile entered by you on our Site:

 

Following the account creation on our site, you may choose voluntarily complete or update a personal profile, including information such as:

​

• Name, Organization, Job title, Country of residence, e-mail address, password (e-mail and password are the only mandatory personal information on our site), to access your personal account.

• Our team management function allows you to invite other users to one or several organizations, or accept invitations from other users. If an invited user accepts the invitation, a short profile including name, date of last login, organization, profile picture.

​

1.1.3. Other voluntarily personal information you may choose to provide:

 

We may collect information, including personal information, that you voluntarily provide to us when you:

​

• Apply for a job position with us.

• Submit your information to us to allow us to respond to your questions or evaluate potential business opportunities.

• Provide us feedback about our products from within our application.

• Provide us feedback or comment on our blogs or our social media pages.

• Subscribe to our newsletter.

• Register for, attend or participate in conferences, webinars or events.

• Participate voluntarily in surveys.

• Request access to information that requires registration on our site.

​

1.2. Organizational information you provide

​

Following the account creation on our site, you are asked to provide information about one or several organizations for which you intend to work on using our impact management software. Data you may provide to us, if you complete different impact assessment steps include:

​

• Venture profile data, including your organizations name, legal form, date when the legal entity was formed, country the legal entity was formed, internet presence.

• We offer the possibility to import your social media handles from popular social media sites, such as Twitter, LinkedIn, Instagram, YouTube and Facebook. We use this to add these handels in communications that our site can produce for you, such as a pitchdeck for investors. We further offer the option to import the number of social media followers from these sites, through official integrations with the respective companies and in accordance with their privacy policies. 

• We offer the possibility to provide in a structured way detailed information about your organizations key innovations and their impact on society, economy and the planet. Organizational information you can provide on a voluntary basis may include key impact areas related to your organization's innovations, quantification of their impact potential and tracking of actual sales and impact related performance data.

​

1.3. Information we collect automatically

 

We automatically collect certain information when you access the Site or use the Services. This includes communication information such as:

​

• audio, electronic, or visual information, which includes screen sharing views

• any data in any files uploaded, emailed or otherwise provided by customers

• the contents of your communications with us, whether via email, social media, telephone or otherwise and inferences we may make from other Personal Information we collect:

• Electronic & Online Identifiers (IDs), such as:

  • If on a mobile device: mobile carrier, device IDs, and mobile advertising IDs

  • If using a browser: operating system, browser type, and Internet Protocol (IP) address

• Geolocation Information, such as:

  • Approximate location derived from IP address (if using a browser)

  • Precise location (based on the GPS coordinates of your device) only if you have opted into a product feature that includes it (such as a geo-fenced or geo- location time tracking service).

• Internet Activity Information, such as:

  • Your “log-in” and “log- out” information

  • The pages that you visit before, after, and while using our Services

  • Pages you visit, links you click, and the content you view on the Site

• We collect information using Tracking Technologies, such as:

  • Cookies, which are small text files that websites send to your computer or mobile device. This includes session cookies (which are deleted once you close your browser) and persistent cookies (which remain on your computer or device until you delete them or they expire)

  • Pixel tags (also known as web beacons), which are pieces of code embedded in our Services that collect information about engagement on our Site or emails.

  • ​In this document, we call cookies and pixel tags/web beacons “Tracking Technologies.”  We use Tracking Technologies for the following purposes:

• In this document, we call cookies and pixel tags7web beacons "Tracking Technologies". We use Tracking Technologies for the following purposes:

  • When it is operationally necessary for us to provide you access to our Site or Services. This also includes tracking behavior in order to protect against irregular, fraudulent, or possibly illegal behavior on our Site or Services

  • to assess the performance of how you and others use our Site and Services (for more information, read the Analytics section below)​

  • to enhance the functionality of our Site or Services. This includes identifying you when you sign into our Services and keeping track of your preferences, interests, or past items viewed​

  • to target our advertising to you using Tracking Technologies that we or our third- party partners place on our Site or other websites

  • We use the third-party analytics tools such as Google Analytics, FullStory, and Wix Analytics to assist us with analyzing our website traffic and help us improve the performance of our Site and Services. These services may use cookies and other tracking technologies to perform their services.​

    • FullStory. For more information, visit FullStory’s Privacy Policy

    • Wix Analytics. For my information, visit Wix Analytics Privacy Policy

    • Google Analytics. For more information, visit Google Analytics’ Privacy Policy

​​

• Social Media Platforms. Our Services may contain social media buttons such as Facebook, LinkedIn, Twitter, and Instagram (that might include widgets such as the “share this” button or other interactive mini programs). These features may collect your IP address, which page you are visiting on our Services, and may set a cookie to enable the feature to function properly. Your interactions with these platforms are governed by the privacy policy of the company providing it.

​

1.4. Other information

​

• Integration with Google. We offer you the possibility to download google slides and google sheets with information you entered in our app directly into your google drive. ImpactForesight has an official integration with Google via an API. If you wish to use this service, you are asked to provide your consent to give us access to your google drive, necessary to download directly into your account.

​​

2. How we use your information:

​

We use information that we collect about you for the following purposes:

​

• To develop and provide you with the Site and Services, including to:

  • operate the Site, manage accounts and provide the Services.

  • determine your eligibility for our Services.

  • improve, personalize, and enable your use of the Site and Services

  • develop new products and features.

​​

• To operate our business, including to:

  • process payment transactions

  • manage and enforce contracts with you or with third parties.

  • manage our corporate governance, compliance and auditing practices.

  • recruit new hires, if you submit an application for employment with ImpactForesight.

  • generate anonymized or aggregated data, including comparison of anonymized data that allows benchmarking.

​

• To communicate with you as part of your use of Services, including to:

  • respond to requests or questions you submit to our support staff.

  • send you surveys and get your feedback about the Services.

  • otherwise contact you with Services-related notices.

​

• To protect ImpactForesight, our users, and the public, and comply with applicable law, regulation, or legal process, including to:

  • validate user information for fraud and risk detection purposes.

  • resolve disputes and protect the rights of users and third parties.

  • respond to claims and legal process (such as subpoenas and court orders)

  • monitor and enforce compliance with the applicable Terms of Service

  • prevent or stop any activity that may be illegal, unethical, or legally actionable.

​​​

• To advertise and market to you, including to:

  • determine your eligibility for certain programs, events, and offers.

  • inform you of our or our partners’ products, services, features or promotions.

  • provide you with newsletters, articles, reports, and announcements.

  • develop “interest-based” or “personalized advertising,” including through cross-device tracking.

 

 

3. When and with whom we share your information

​

We do not share your information, unless you actively decide to share information through our platform and/or in situations as described below. This means you are in full control of what information you want to share, when and through which channel. Ways that information from our site can be shared are:

​

3.1. Sharing with your consent or at your direction

​

• Social media Integrations: We offer the opportunity for you to share charts and other information related to your organization's impact directly through our app to social media portals such as LinkeIn, Facebook or Twitter, or download to your drive. You have to actively initiate and complete this process, in a way that it is clear what contents you are sharing. Sharing is not mandatory to use our services.

​​

• Pitch deck slides: You have the option to download pre-formatted google slides and google sheets directly into your google drive. See also 1.4 in this privacy policy. Downloading slides to your google drive is not mandatory.

​

• Full-screen pitch deck: We provide the option to share a fullscreen presentation describing your organizations impact with third parties, such as investors, donors, team members. For this, you create a link in our app, that you can share with those individuals you want to provide the link. 

​

• Coaching and feedback: We offer coaching through our platform. You may wish to share information on our Site to coaches, consultants from ImpactForesight, or other individuals you may choose, whether via online conference systems, or full access to your organizations data on our our Site, using the team management functionality below. 

​​

• Team management functionality: We provide the option to invite team members, in order to work collaboratively on a venture. Access level is on the venture level, this means the option exists to invite team members to a single venture, or several ventures, if you have more than one venture subscription in your account. Invited team members get full access to all data related to this venture, but not to other ventures, nor to personal profile data. Invitations can be sent directly via e-mail from your account. Invited team members get full access to your venture and have the possibility to invite other team members.

​

3.2. Other forms of data sharing

​

We further share your information with service Providers that have signed an agreement with us that limits how they use your information and promises to keep your information confidential. Examples include:

 

• companies or organizations that provide services such as website hosting, customer management (ex: Salesforce) or product development.

​​

Finally, we may share data with other parties under the circumstances described below:

​

• ​for legal reasons, including:

  • ​with companies that verify your identity for us and detect fraud

  • with legal and financial advisors, auditors, examiners, and certain (including potential) investors

  • with companies that may acquire us, if we are involved in a merger, acquisition, or sale of assets

• ​​to comply with applicable law, regulation, or legal process, including to:

  • ​comply with law enforcement or national security requests

  • comply with legal process, such as a court order or subpoena (including in a country other than your home country)

• to protect your, our, or others’ rights, property, or safety

• enforce our policies or contracts and collect amounts owed to us

• assist with an investigation or prosecution of suspected or actual illegal activity

• to further public policy goals, including:

  • publishing reports that incorporate aggregated, non-personally identifiable information about customer attributes, transactions, and behavior

  • sharing data containing aggregated and/or non-personally identifiable customer information with non-profit or non-partisan organizations, academic institutions, think tanks, trade associations, consultancies, or similar organizations, only if they have signed an agreement with us that restricts how they can store, access, share, and use the information

  • for any other purpose and to any other person with whom you expressly authorize us to share your information

​

4. Your privacy choices and rights

​

Depending on where you reside and in accordance with applicable law, you may have the following rights with regard to your Personal Information:

• Notice

• Access

• Data Portability

• Erasure

• Correction

• Opt Out of Sales of Personal Information

​

In addition, you may have the right to opt out of targeted advertising and profiling, to the extent that profiling makes decisions that produce legal or similarly significant effects concerning you. To exercise any of these rights please contact us using the resources in the “Contact Information” Section below. If you would like to opt out of targeted advertising, you may contact us using the contact information provided at the end of the privacy policy.

 

Where we collect sensitive Personal Information from you, we will only do so where we have obtained your prior express consent, if required by law. 

 

Your Privacy Choices. The privacy choices you may have about your personal information are determined by applicable law and are described below:

​

• Email and Text Messages. You can opt out of our promotional emails by using the unsubscribe link located at the bottom of our promotional emails, or contacting us as described below.

• “Do Not Track.” Do Not Track (“DNT”) is a privacy setting you can set on some web browsers that signals to websites like ours that you don’t want your online activities to be tracked. At this time, we do not respond to DNT signals sent to us by your web browser.

• Cookies and Interest-Based Advertising. You may stop us from sending Tracking Technologies to your browser by changing the settings on your browser. However, if you block all Tracking Technologies, our Services may not work properly. Please note you must separately opt out in each browser and on each device. You can learn how to manage your cookies on these popular browsers by clicking on the links below.

  • Google Chrome. For more information, visit Google Chrome 

  • Internet Explorer. For more information, visit Internet Explorer 

  • Mozilla Firefox. For more information, visit Mozilla Firefox 

  • Safari – Desktop. For more information, visit Safari (Desktop) 

  • Safari – Mobile. For more information, visit Safari (Mobile) 

  • Android – Browser. For more information, visit Android Browser 

  • ​

You may stop us from personalizing our advertisements to you on some mobile applications by following the instructions for Android, iOS, and others. You may also opt out of receiving targeted ads from advertising partners that participate in self-regulatory programs, such as the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada.

​

​

5. Security

 

We employ administrative, physical and technical measures designed to protect your information from unauthorized access and to comply with applicable privacy laws in the states and countries in which we operate. Your personal information will be kept on our servers or on those of our service providers and only those employees that require it for the purposes of their duties will have access to your personal information. We have also implemented controls which require our third-party service providers and partners to have appropriate safeguards to protect your personal information However, despite these efforts, no security measures are perfect or impenetrable and no method of data transmission can be guaranteed to prevent any interception or other type of misuse. We also depend on you to protect your information. If you become aware of any breach of security or privacy, please notify us immediately. To the fullest extent permitted by applicable law, we do not accept liability for unauthorized disclosure.

​

6. Notice to California consumers:

​

This Section applies to our collection and use of “Personal Information” if you are a resident of California, as required by the California Consumer Privacy Act of 2018 and its implementing regulations, as amended by the California Privacy Rights Act (the “CPRA”). This Section describes (1) the categories of Personal Information, collected and disclosed by us, subject to CPRA, (2) your privacy rights under CPRA, and (3) how to exercise your rights.

​

When we use the term “Personal Information” in the context of the CPRA, we mean information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household. 

 

If you would like to receive a copy of this Section in an alternate format (e.g., printable) or language, please contact us using the information found below in this Privacy Policy.

​

Categories of Personal Information Collected, Used, and Disclosed

 

Category of Personal Information Categories of Third Parties to whom Personal Information is Disclosed for a Business Purpose

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​

​​

​

​

​

​​

We obtain the above Personal Information from the sources identified in Section 1 of this Privacy Policy. We use the above Personal Information for the business purposes set forth in Section 2 of this Privacy Policy. We also disclose the above Personal Information for the purposes set forth in Section 3 above.

​

Retention of Data: We will retain each category of your Personal Information for as long as necessary to fulfill the purposes described in the “How We Use Your Information” section above, unless otherwise required by applicable laws. Criteria we will use to determine how long we will retain your information include whether: we need your information to provide you with products or services you have requested; we continue to have a relationship with you or your employer; you or your employer have requested information, products, or services from us; we have a legal right or obligation to continue to retain your information; we have an obligation to a third party that involves your information; our retention or recordkeeping policies and obligations dictate that we retain your information; we have an interest in providing you with information about our products or services; and we have another business purpose for retaining your information.

​

Your California Privacy Rights: If you are a resident of California, you have the following rights:

​

Privacy Right Description

​

• Notice: The right to be notified of what categories of Personal Information will be collected at or before the point of collection and the purposes for which they will be used and shared.

​

• Access: The right to request the categories of Personal Information that we collected in the previous twelve (12) months, the categories of sources from which the Personal Information was collected, the specific pieces of Personal Information we have collected about you, and the business purposes for which such Personal Information is collected and shared. You may also have the right to request the categories of Personal Information which were disclosed for business purposes, and the categories of third parties in the twelve (12) months preceding your request for your Personal Information.

​​

• Data Portability: The right to receive the Personal Information you have previously provided to us

​​

• Erasure: The right to have your Personal Information deleted. However, please be aware that we may not fulfill your request for deletion if we (or our service provider(s)) are required or permitted to retain your Personal Information for one or more of the following categories of purposes: (1) to complete a transaction for which the Personal Information was collected, provide a good or service requested by you, or complete a contract between us and you; (2) to ensure our website integrity, security, and functionality; (3) to comply with applicable law or a legal obligation, or exercise rights under the law (including free speech rights); or (4) to otherwise use your Personal Information internally, in a lawful manner that is compatible with the context in which you provided it.

​​

• Correction:   You have the right to request that we correct any incorrect Personal Information that we collect or retain about you, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see below), we will correct (and direct any of our service providers that hold your data on our behalf to correct) your Personal Information from our records, unless an exception applies. We may deny your correction request if (a) we believe the Personal Information we maintain about you is accurate; (b) correcting the information would be impossible or involve disproportionate; or (c) if the request conflicts with our legal obligations.

​​

• Automated Decision Making: You have the right to request information about the logic involved in automated decision-making and a description of the likely outcome of processes, and the right to opt out. 

​​

• To Opt Out of Sales or Sharing of Personal Information: We do not sell or share your Personal Information. However, if we did, you would have the right to opt out of the sale or sharing of your Personal Information.

​​​

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf (authorized agent,) may make a request related to your Personal Information. You may also make a request on behalf of your minor child.​

​

You may only make a request for access or data portability twice within a 12-month period. The request must:

​

• provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.

• describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

​

Exercising your individual privacy rights

 

To exercise any of the privacy rights afforded to you under applicable data protection law, please submit a request to us by emailing us at privacy@impactforesight.io

​

California Residents: If you would like to opt out of sharing or the sales of your Personal Information, you may submit your opt-out or if you would like to limit the use of your sensitive Personal Information, you may submit your request by emailing us at privacy@impactforesight.io.

​

We do not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

​

We cannot respond to your request or provide you with Personal Information if we cannot verify your identity and confirm the Personal Information relates to you. Making a verifiable consumer request does not require you to create an account with us.

​

We may deny certain requests, or only fulfill some in part, as permitted or required by law.  For example, if you request to delete Personal Information, we may retain Personal Information that we need to retain for legal purposes.

 

Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights

 

You have the right not to receive discriminatory treatment from ImpactForesight for exercising the privacy rights granted by the CCPA.

​

7. Notice to Nevada residents

​

If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Information to third parties who intend to license or sell that Personal Information. Please note that we do not currently sell your Personal Information as sales are defined in Nevada Revised Statutes Chapter 603A. If you have any questions, please contact us as set forth below.

​

8. Privacy Statement Revisions

​

This Privacy Statement was last revised on the date mentioned at the top of this Privacy Statement. We may change this Privacy Statement at any time and for any reason. We encourage you to review this Privacy Statement each time you visit the Site or use our Services. If we make a significant change to our Privacy Statement, we will post a notice on the Site for a period of time after the change is made and inform users with an active account on our Site via e-mail about these change.

 

 

9. Responsibility for External Sites

​

This website may contain links to other web sites. Some of those web sites may be operated by third parties. We provide the links for your convenience, but we do not review, control, or monitor the privacy practices of web sites operated by others.

We are not responsible for the performance of web sites operated by third parties or for your business dealings with them. Therefore, whenever you leave our Site, we recommend that you review each web site's privacy practices and make your own conclusions regarding the adequacy of these practices.

​

​

10. Contact information

​​

If you have any questions about our privacy practices or this Privacy Policy, or to exercise your privacy rights as detailed in this Privacy Policy, please contact us at:

ImpactForesight PBC

​

Attn: Privacy Program Director

1 Broadway, 14th floor

Cambridge, MA 02142

privacy@impactforesight.io