Impact Alerts ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at impactalerts.io.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Google OAuth Data: When you sign in with Google, we receive your email address, name, and profile information as permitted by your Google account settings
• Contact Information: Phone number if you enable SMS alerts
• Payment Information: Processed securely through Stripe (we do not store your credit card details)
• Preferences: Notification settings, preferred cryptocurrencies and stocks to track

1.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent on the service
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies and Tracking: We use cookies to maintain your session and improve user experience

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide real-time market alerts based on social media activity
• Authentication: To verify your identity and maintain secure access to your account
• Notifications: To send you SMS and push notifications about market-moving events
• Payment Processing: To process subscription payments through Stripe
• Personalization: To customize alerts based on your preferred cryptocurrencies and stocks
• Service Improvement: To analyze usage patterns and improve our AI analysis capabilities
• Communication: To send service updates, security alerts, and support messages
• Legal Compliance: To comply with applicable laws and regulations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who help us operate our service (Stripe for payments, ClickSend for SMS, Google for authentication)
• Google API Services: We use Google OAuth solely for authentication. We do not access, store, or share your Google Calendar, Drive, or other Google services data
• Legal Requirements: When required by law, subpoena, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share information

4. Google API Services Disclosure

Impact Alerts' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google OAuth only for authentication purposes to verify your identity. We do not:

• Access your Gmail, Google Drive, Calendar, or other Google services
• Store Google authentication tokens beyond session requirements
• Share your Google account information with third parties
• Use Google data for advertising or tracking purposes

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.

6. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption of data in transit using SSL/TLS
• Secure authentication through Google OAuth 2.0
• Payment data processed through PCI-compliant Stripe infrastructure
• Regular security audits and updates
• Access controls limiting employee access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Opt-Out: Disable SMS and push notifications in settings
• Data Portability: Request your data in a machine-readable format
• Withdraw Consent: Revoke permission for data processing at any time

To exercise these rights, contact us at support@impactalerts.io

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences and settings
• Analyze service usage and performance
• Provide personalized content

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our service.

9. Third-Party Services

Our service integrates with third-party platforms. These services have their own privacy policies:

• Google OAuth: Google Privacy Policy
• Stripe (Payments): Stripe Privacy Policy
• ClickSend (SMS): ClickSend Privacy Policy
• Coinbase & Robinhood: We provide links to these platforms but do not collect data from them

10. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. By using our service, you consent to the transfer of your information to the United States and other countries where we operate.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

13. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

14. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page and updating the effective date. We encourage you to review this policy periodically. Your continued use of our service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

• Email: support@impactalerts.io
• Website: https://impactalerts.io

We will respond to your inquiry within 5 business days.