European servers · Based in AmsterdamPrivacy Policy
Last updated: July 2026
The short version
Impacter is built for GDPR compliance by design. All customer data is hosted and processed on servers in the European Union, is never used to train third-party AI models, and can be fully erased on request.
This page is a summary. The complete policy, including our data processing agreement, sub-processor list and retention schedule, is available on request while we finalize the published version.
What we collect
Account data (name, email, workspace settings), content you and your team create in your workspace, and the technical logs needed to run and secure the service, including an audit trail of agent actions and human approvals.
Cookies
Nothing that is not strictly necessary is stored before you allow it. We load Google Tag Manager on every page, but until you choose in the cookie banner Google Consent Mode stays denied for advertising, analytics and personalization, so no tag may place a cookie or read one. Google does receive an anonymous, cookieless signal from that visit, which it uses to estimate traffic it cannot measure directly.
Strictly necessary storage covers your login session, security, the language you picked and the cookie choice itself. Statistics and marketing are separate categories you switch on one by one, and refusing them takes exactly one click. Our own funnel measurement is first-party, aggregated and stores nothing beyond a random id that dies with the browser tab.
Your choice is stored for six months in a cookie named imp_consent. You can change or withdraw it at any time through the “Cookie preferences” link in the footer of every page.
Your rights
You can request access to, correction of, or deletion of your personal data at any time. Workspace deletion cascades through every table, log and index we hold.
For any privacy request or question, contact us at [email protected]. We respond within one business day.
Common questions
The questions we are asked most often about this document.
No. Customer data is never used to train third-party models, and it is not used to train models we host either. Data you put into a workspace is processed to deliver the service you asked for and nothing else.
Inside the European Union. Application data sits in EU-region Postgres and workloads run on EU servers, so personal data stays within EU jurisdiction by default rather than as a paid upgrade.
Email [email protected] from the address associated with your account, or use the deletion option in workspace settings. Deletion cascades across all workspace-scoped records, and the action itself is recorded in the audit log so the erasure is evidenced.
Yes. Impacter acts as a data processor for the content you put into your workspace, and we provide a standard GDPR data-processing agreement covering sub-processors, security measures and breach notification. Ask at [email protected] and we will send the current version.