Impact CRM

Privacy Policy

Last updated: 12/5/2025

1. Information We Collect

We collect information that you provide directly to us, including:

  • Account information (name, email address, password)
  • Profile information you choose to provide
  • Content you create, upload, or share through the service
  • Communications with us

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments and questions
  • Monitor and analyze trends and usage

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With your consent
  • To comply with legal obligations
  • To protect and defend our rights or property
  • With service providers who assist us in operating our service

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure.

5. Your Rights

You have the right to:

  • Access and receive a copy of your personal data
  • Rectify inaccurate or incomplete data
  • Request deletion of your personal data
  • Object to processing of your personal data
  • Request restriction of processing

6. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Types of Cookies We Use

Essential Cookies (Authentication)

These cookies are necessary for the website to function and cannot be switched off in our systems.

Cookie NamePurposeDuration
next-auth.session-tokenUser session management7 days
__Secure-next-auth.session-tokenSecure user session management (HTTPS)7 days
__Host-next-auth.csrf-tokenCross-site request forgery protection7 days

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalization.

Cookie NamePurposeDuration
theme-currentRemembers user's theme preference (light/dark)1 year

Temporary/OAuth Cookies

These cookies are used during authentication processes and are automatically deleted after completion.

Cookie NamePurposeDuration
next-auth.callback-urlStores OAuth callback URL temporarily1 hour
next-auth.pkce.code_verifierPKCE code verifier for OAuth security10 minutes
next-auth.stateOAuth state parameter for security10 minutes
next-auth.nonceOAuth nonce for replay attack protection10 minutes

Third-Party Cookies

When you authenticate using Microsoft Azure AD, additional cookies may be set by Microsoft services. We do not control these cookies, and they are subject to Microsoft's privacy policy.

Managing Cookies

You can control and/or delete cookies as you wish. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. However, if you do this, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.

7. Third-Party Services

Our service may contain links to third-party websites or services that are not owned or controlled by us. We have no control over, and assume no responsibility for, the privacy practices of these third parties.

8. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us.