Privacy Policy

Last updated: March 2026

You own your content. Nothing is shared without your permission.

This Privacy Policy describes how Impact Weaver ("we," "us," or "our") collects, uses, and protects information about you when you use our Service.

1. Information We Collect

We collect the minimum information needed to operate the Service:

Account information: Your email address and hashed password when you register.
Content you create: Wins you log, AI-generated bullets, tags, and notes you save to your vault.
Payment information: Processed securely by Stripe. We do not store full card numbers or payment credentials.
Usage data: Basic server logs for security and performance monitoring.

2. How We Use Your Information

We use the information we collect to:

Create and maintain your account
Provide the Service, including AI bullet generation and vault storage
Process your subscription payments
Send transactional emails (account confirmation, trial reminders, password resets)
Improve and secure the Service

We do not use your content to train AI models. We do not sell your data.

3. Your Content is Private

Your vault is private by default. The wins, notes, and bullets you log are visible only to you. We do not read, analyze, or share your content with any third party except as required to operate the Service (e.g., routing AI requests to our model provider).

Nothing in your vault is shared without your explicit permission.

4. AI Processing

When you generate impact bullets, your input is sent to our AI provider (OpenRouter) to generate a response. This content is transmitted securely and is not stored by the AI provider beyond the immediate request. Your vault entry is stored on our servers only.

5. Email Communications

By creating an account, you consent to receiving transactional emails related to your account (welcome, trial reminders, billing, password reset). You can opt out of non-essential emails at any time by replying "unsubscribe" to any email.

6. Data Retention

We retain your account data and vault content for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days.

7. Third-Party Services

We use the following third-party services to operate Impact Weaver:

Stripe: payment processing (governed by Stripe's Privacy Policy)
OpenRouter / Mistral AI: AI model inference for bullet generation
Resend: transactional email delivery

Each provider has their own privacy policy. We share only the minimum data necessary for each service to function.

8. Security

We take security seriously. Your password is stored as a salted hash (bcrypt). Sessions use secure, HTTP-only cookies. All data is transmitted over HTTPS in production.

No system is perfectly secure. If you discover a security issue, please contact us at hello@impactweaverapp.com.

9. Your Rights

You have the right to:

Access the data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Opt out of non-essential email communications

To exercise any of these rights, email us at hello@impactweaverapp.com.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use of the Service after changes take effect constitutes your acceptance.

12. Contact

Questions about this policy? Email us at hello@impactweaverapp.com.