Legal
Privacy Policy
Last updated: July 8, 2026
1. Scope of this policy
This Privacy Policy explains how Impressly collects, uses, stores, and shares personal information when you visit our website, create an account, receive a workspace invite, use our software, or otherwise interact with our services. It applies to customer workspaces, pilot users, website visitors, and individuals who contact us about the service.
This policy is intended to describe our general practices for pilot customers. Additional terms in an order form, data processing addendum, or other written agreement may apply to a specific customer relationship. If those written terms conflict with this policy, the written agreement controls for that customer.
2. Information we collect
We collect information you provide directly, including your name, email address, workspace or company name, billing details, support messages, and other contact information you submit through onboarding, account management, or direct communication with us. If a workspace owner invites you, we collect the invite email address and related administrative metadata.
We also collect service data generated through use of Impressly. That may include prompt inputs, prompt outputs, saved knowledge-base items, role or department selections, workflow history, usage metrics, device/browser information, and IP address or similar network identifiers used for security, fraud prevention, and abuse monitoring. We may collect event logs, feature engagement data, and diagnostics necessary to operate and improve the service.
3. How we use information
We use personal information to provide and maintain the service, create and administer workspaces, process logins and invites, respond to support requests, operate billing, secure the platform, and communicate with customers about product or account matters. We also use information to understand product usage, prioritize improvements, debug issues, and monitor performance and reliability.
We may use service and usage information to detect misuse, enforce our terms, protect customer data, and investigate suspicious behavior. Where permitted by law, we may also use contact information to send service updates, pilot communications, and relevant operational notices. We do not sell personal information to third parties.
4. How we share information
We share information with service providers that help us operate Impressly. Our hosting and application infrastructure providers include Vercel and Supabase. We also share request content with large language model providers that power the product, including Anthropic, OpenAI, Google, and Groq, only as needed to complete a given request. For AI processing, the relevant request content is sent for the duration of that single request only.
We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect the rights or safety of Impressly, our users, or others, or in connection with an actual or proposed corporate transaction such as a merger, financing, acquisition, or sale of assets. We do not share or sell customer data to data brokers, ad networks, or unrelated third parties for their own marketing use.
5. Retention
We keep active tenant and workspace data for as long as the customer relationship remains active and the data is needed to provide the service, maintain records, or support legitimate business and legal needs. If a tenant is deleted, we aim to purge deleted tenant data within 90 days, except where a longer retention period is required by law, needed for security investigations, or preserved in limited backups that are cycled out in the ordinary course.
We may retain aggregated or de-identified analytics information for a longer period where it no longer reasonably identifies an individual. Retention decisions may vary based on the type of data, system role, and legal obligations that apply.
6. Cookies and analytics
We use essential technologies needed to operate the website and product, such as session handling, authentication, security controls, and basic preference storage. We may also use analytics tools provided through Vercel to understand site performance, traffic, and feature usage patterns.
If we add additional non-essential analytics or marketing tools in the future, we may update this policy and any required notices or consent mechanisms. You can also manage many cookie settings through your browser controls, though blocking essential technologies may limit service functionality.
7. Data residency, transfers, and security
Impressly’s primary data environment is in the United States, with service operations centered in US-East-2, Ohio. If you access the service from outside the United States, your information may be transferred to, stored in, or processed in the United States or other jurisdictions where our providers operate. International transfers may therefore occur as part of delivering the service.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures include encryption in transit, encryption at rest where supported by our infrastructure, and row-level security enforced at the database layer to isolate tenant data. No system can be guaranteed perfectly secure, and you are responsible for using strong credentials and maintaining the security of your own devices and accounts.
8. Your rights and choices
Depending on where you live, you may have rights to request access to personal information, correction of inaccurate information, deletion of certain information, or restriction of particular processing. To make a request, email support@impressly.co. We may need to verify your identity and authority before completing a request.
Workspace administrators may also be able to update or delete certain account information directly through the service. We will not discriminate against you for exercising applicable privacy rights, subject to the limits permitted by law and the practical requirements of providing the service.
9. Children and third-party content
Impressly is intended for business use and is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information, contact us so we can review and take appropriate action.
The service may contain links or integrations involving third-party services. Their privacy practices are governed by their own notices, not this policy. We encourage customers to review the privacy terms of any third-party services they choose to use alongside Impressly.
10. Changes and contact
We may update this Privacy Policy from time to time to reflect product changes, legal developments, or operational updates. When we do, we will revise the “last updated” date above and, where appropriate, provide additional notice.
Questions, requests, or concerns about this policy or our privacy practices may be sent to support@impressly.co. Sales and general commercial questions may be sent to sales@impressly.co.