Privacy Policy

Last Updated date: 11/30/2022

Impact Local, Inc. (“we,” “us,” “ours” or “Impact Local”) provides a platform that helps users discover and support nonprofit organizations through our applications and websites, including getimpactlocal.com (collectively, the “Platform”), and related services (together with the Platform, the “Services”).  

This privacy policy (“Privacy Policy”) explains how we collect, process, store and share personal information. It also provides you with important information about your personal information rights and how to exercise them. 

By using or accessing our Services, or by providing your personal information to us, you acknowledge that you accept our privacy practices and policies outlined below, and you consent that we may collect, process, store and share your information as described in this Privacy Policy.

1. Notice at Collection of Personal Information 

Definition of Personal Information

We collect, process, store and share information that identifies, relates to, or could reasonably be linked, directly or indirectly, with a particular individual or household (“personal information”). Personal information does not include information publicly available from government records, or which is not personal, like anonymous, deidentified or aggregated data (even if it originally comes from personal information).

Categories of Personal information We Collect

We collect, process and store, and may share with third parties, the following categories of personal information. 

  • Contact information, such as full name, postal address, email address and phone number
  • Account information, including username and password
  • Payment information, including bank account and credit card information, billing address and information to conduct identify verification
  • Payment information is collected by our third-party payment processor, Stripe, Inc. (“Stripe”); please see Stripe's privacy policy at [https://stripe.com/privacy] for information on its collection and processing of personal information
  • Transaction information, including donation amounts and recipients and any information provided in connection with donations (such as reason for the donation) 
  • Precise geolocation data to connect donors with nearby nonprofits 
  • Device information, such as type of device, operating system, device settings, application IDs, unique device identifiers and crash data 
  • Internet identifiers, such as domain name, Internet Protocol (IP) address and browser type and settings 
  • Internet activity and analytics, such as cookie data, webpage interactions, referring webpage/source through which you accessed the Services, non-identifiable request IDs and statistics associated with the interaction between your device or browser and the Services
  • Services data, for example, nonprofits, people, features, content and links you interact with when using the Services 
  • Inferences drawn from any of the personal information listed in this section; for example, to create a profile of an individual’s preferences and characteristics
  • Preference information, including preferences related to marketing, privacy, communications and participation in our programs
  • Other information you choose to provide, such as when you submit a customer service query, provide feedback or otherwise communicate with us 

Our Business Purposes for Collecting and Sharing Personal information

This section details the business purposes for which we collect, process, store and/or share your personal information. 

When we use the word “share” anywhere in this Privacy Policy we mean disclose or transfer to any third party for any of the purposes in this section unless stated otherwise. Depending on laws that may be applicable to you, when we share your personal information for these purposes, it may constitute a sale of your personal information (for example, when we share your personal information in exchange for money or other valuable consideration).  

  • Provide, improve and protect our Services, including to deliver the Services; improve or customize the Services; develop new services or products; prevent or address service errors, security or technical issues; analyze and monitor usage, trends or other activities; or respond to user or third-party requests or inquiries
  • Connect nonprofit organizations with you in order for nonprofit organizations to process donations and other transactions with you; send you solicitations, marketing or promotional communications; carry out nonprofit operations, such as accounting and tax matters; detect, prevent or investigate security incidents or fraud; perform identity verification; or in accordance with, or as required by applicable law, legal process or governmental requests  
  • Improve your user experience, for example, we use cookies and other device and internet information to track your search criteria or other usage data to provide content of interest to you or to store your information so that you do not need to re-enter it each time that you login
  • Market to you, including through profiling and targeted advertising, for example, to market and advertise our Services or third-party services or products to you, including through cross-contextual behavioral advertising and targeted advertising; and to create a profile of you (including “profiling,” meaning the automatic processing of your personal information to identify your preferences and interests)
  • Deidentify personal information, including aggregating and anonymizing personal information so that it is no longer personal information 
  • Support our everyday operations, including accounting and tax matters and using third-party vendors and service providers for business purposes (such as hosting, technology and communications) 
  • Meet legal and compliance requirements, including to perform audits, monitoring and reporting; support information security and anti-fraud operations; investigate and respond to disputes; exercise and defend legal claims; protect the rights, property or safety of you, us or a third party; respond to legal process (including subpoenas) and governmental, court or law enforcement requests, investigations or orders; and comply with and enforce applicable laws, regulations, policies, procedures and agreements  
  • Evaluate or conduct business changes, including a merger, acquisition, sale, equity or debt financing, bankruptcy or other transaction in which a third party invests in or acquires control of our business or assets (in whole or in part) 

Opt-Out of Our Selling or Sharing of Your Personal information for Targeted Advertising  

You have the right to opt-out of our sale of your personal information or our sharing of your personal information for cross-contextual behavioral advertising or targeted advertising. For more information, see the section below called, Notice of Your Personal information Rights; Notice of Right to Opt-Out of Sale/Sharing. 

To opt out, click Do Not Sell or Share My Personal Information. 

Categories of Third Parties with Whom We Share Your Personal information

We may share your personal information with the categories of parties listed in this section. Depending on laws that may be applicable to you, when we share your personal information with these third parties, it may constitute a sale of your personal information (for example, when we share your personal information in exchange for money or other valuable consideration). 

  • Our Vendors who help us provide the Services or perform business functions on our behalf, including hosting, technology and communication providers; analytics providers; support and customer service vendors; our attorneys, advisors, auditors and accountants; and payment processors 
  • Nonprofits, including nonprofits who don’t have a relationship with you  
  • Advertising Providers who market our Services or third-party products and services, including ad networks, data brokers, marketing providers and cooperative databases
  • Parties You Access, Authorize or Authenticate, including third parties you access through the Services, such as, nonprofits and other users
  • Parties for Legal Purposes, including governmental authorities, law enforcement or other third parties in connection with any of the activities set forth in the bullet beginning with "Meet legal and compliance requirements” in the above section called, Our Business Purposes for Collecting and Sharing Personal information
  • Parties for Business Changes, for example, your personal information that we collect may be transferred to a third party if we undergo a merger, acquisition, sale, equity or debt financing, bankruptcy or other transaction in which a third party invests in or acquires control of our business or assets (in whole or in part) 

Retention of Personal information

We retain personal information about you for as long as we deem to be necessary or advisable for the purposes described in the above section called, Our Business Purposes for Collecting and Sharing Personal information (such as providing the Services to you). This may include keeping your personal information after you have stopped using our Services; for example, we may retain your personal information to advertise to you (unless you opt-out), comply with legal obligations or resolve disputes or collect fees owed. 

2. Applicability of this Privacy Policy 

This Privacy Policy covers how we treat personal information that we acquire from you or third parties related to our Services or other interactions with us. This Privacy Policy does not cover the policies or practices of nonprofits or other third parties that you may access or be connected with through the Services.

Sources of Personal information

We collect personal information about you from the following categories of sources:

  • Directly from you, such as when you access or use our Services or when you communicate or interact with us in any way, including mail, email, phone, chat, QR code or social media
  • Indirectly from you, for example, we collect cookie data and other information from your device, browser or activity on the internet or in our Services 
  • From our third-party vendors, for example, from our analytics providers and payment processors
  • From other users, for example, nonprofits and other users of our Services  

Nonprofits and Third-Party Services 

This Privacy Policy does not apply to nonprofits or any other third-party websites, applications or services that you access or connect with through the Services. We do not have control over the privacy practices or the content of nonprofits or third parties, or their websites, applications, products or services. As such, we are not responsible for the privacy practices employed by or content provided by nonprofits or third parties, including, websites, applications or services linked to or accessible from or in connection with our Services. Please check the applicable nonprofit or other third-party privacy policy and terms of service when visiting any other websites, applications or services, and before providing any personal information to them. Please also make any privacy requests directly to nonprofits or third parties with respect to personal information in their control. 

Personal Information of Others You Share with Us 

You may not disclose the personal information of another individual to us, or make it available on the Services, unless you have the prior written consent of person who is the subject of the information and such person is 18 years of age or older. To the extent that you provide another individual’s personal information to us or use it in the Services, you acknowledge and agree that you are responsible for compliance with all applicable laws concerning such personal information, including: 

  • providing all applicable notices 
  • receiving the proper authority or consent to allow us to collect, store, process and share such personal information 
  • responding to data subject requests

Personal information of Children

As noted in the User Terms, we do not knowingly collect, process, store or share personal information about children under 18 years of age. If you are a child under the age of 18, please do not attempt to register for or otherwise use the Services or send us any personal information. If we learn we have collected personal information from a child under 18 years of age, we will delete that data as quickly as possible. If you believe that a child under 18 years of age may have provided personal information to us, please contact us at info@getimpactlocal.com

To our knowledge, we do not sell or share for cross-contextual behavioral advertising or targeted advertising purposes the personal information of children under the age of 18. 

3. Your Privacy Rights and Choices 

Notice of Your Personal information Rights; Notice of Right to Opt-Out of Sale/Sharing  

Subject to exemptions and limitations provided by applicable law, you have the right to: 

(1) Request that we disclose certain information to you about our collection and use of your personal information (collectively, the following constitute the "right to know"):

  • Whether or not we are processing your personal information 
  • The categories of your personal information we have collected
  • The categories of sources for your personal information we have collected 
  • Our business purposes for collecting or sharing that personal information
  • The categories of third parties with whom we shared your personal information, identifying the personal information categories that each category of recipient obtained and the purposes for sharing your personal information
  • The types of personal information we shared with third parties for third parties’ direct marketing purposes and the identities of such third parties (the “right to know third-party marketing”);
  • The specific pieces of personal information we collected about you and access to that personal information (the “right to access”)  

(2) Request a copy of the personal information you provided to us in a portable, and, if feasible, readily usable format (the “right to data portability”)

(3) Request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions under applicable privacy law (the "right to delete")

(4) Correct inaccurate or complete incomplete personal information (the “right to correct”) 

(5) Direct us to not sell your personal information at any time (the "right to opt out of sale")

(6) Direct us to not share your personal information for cross-contextual behavioral advertising or targeted advertising purposes (the “right to opt out of behavioral advertising”)

(7) Direct us to not share your personal information with third parties for third parties’ direct marketing purposes (the “right to opt-out of third-party marketing”)

(8) Direct us not to share your personal information for the purposes of making automated decisions, including profiling, that produce legal or similarly significant effects concerning you (the “right to opt out of profiling with legal effects”)

  • We do not share your personal information for the purpose of making automated decisions, including profiling, that produce legal or similarly significant effects concerning a consumer, such as, denial of financial or lending services or access to essential goods or services

(9) Limit the use or disclosure of your sensitive personal information to just those actions necessary to perform specific purposes outlined by law (the “right to limit use of sensitive information”)

  • We do not use or disclose sensitive personal information (for example, your precise geolocation data or Impact Local account username and password) for purposes other than purposes that would continue to be allowable after the receipt of a limitation request, including to provide Services and ensure the security of your account

(10) Be free from unlawful discrimination for exercising your rights under applicable privacy law 

How to Exercise Your Personal Information Rights 

To exercise the rights described above, you or your Authorized Agent (defined below) must send us a written request (via one of the methods described below) that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected personal information, and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may ask for information to verify your identity, such as name, phone number, email and address. We will only use personal information provided in a Valid Request to verify your identity and complete your request. You do not need an account to submit a Valid Request.

We will work to respond to your Valid Request promptly within the timeframes required by applicable privacy law (usually between 15 to 45 days depending on the type of Valid Request, with the right for us to extend the response time as necessary). We will not charge you a fee for making a Valid Request unless your Valid Request is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may submit a Valid Request using the following methods:

You may also authorize an agent (an "Authorized Agent") to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf. 

In some instances, we may not be able to honor your request. For example, we will not honor your request if we cannot verify your identity or if we cannot verify that you have the authority to make a request on behalf of another individual. Additionally, we may not honor your request where not required to do so under applicable privacy laws. For example, we may deny a deletion request if the information is necessary for us to provide the Services to you or comply with our legal obligations and compliance policies. We may deny a right to know request made more than twice in a 12-month period or for information collected and disclosed more than 12 months ago. We will advise you in our response if we are not able to honor your request.  

You have the right to appeal our decision to not honor your request or our refusal to take action on a request within a reasonable period of time by contacting us at the email listed above and clearly stating that the purpose of the contact is an “appeal of privacy rights.”   Within 60 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. 

4. Our Use of Cookies 

Our Use of Cookies and other Tracking Technology 

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own cookies on your devices.  

We use the following types of cookies:

  • Essential cookies are required for providing you with features or services that you have requested. For example, certain cookies enable you to log into secure areas of our Services. Disabling these cookies may make certain features and services unavailable.
  • Functional cookies are used to record your choices and settings regarding our Services, maintain your preferences over time and recognize you when you return to our Services. These cookies help us to personalize our content for you.
  • Performance cookies allow us to understand how users use our Services. They do this by collecting information about the number of visitors to the Services, what pages visitors view on our Services and how long visitors are viewing pages on the Services. Performance cookies also help us measure the performance of our advertising campaigns in order to help us improve our campaigns and the Services’ content for those who engage with our advertising. 
  • Targeted Advertising cookies collect data about your online activity and identify your interests so that we can provide targeted and cross-contextual behavioral advertising that we believe is relevant to you. 

Do Not Track

Do Not Track” is a privacy preference that users can set in their web browsers. When a user turns on the Do Not Track signal, the browser sends a message to websites requesting them not to track the user. Impact Local’s Services are not currently configured to respond to Do Not Track signals or other mechanisms that provide users the ability to exercise choice regarding the collection of personal information about a user’s online activities over time and across third-party websites or online services.

Disable or Delete Cookies and Tracking Technology 

Disable or Delete Cookies from Your Browser or Device 

You can decide whether or not to accept certain cookies through your internet browser’s settings. Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new cookie in a variety of ways. To explore what cookie settings are available to you, look in the “preferences” or “options” section of your browser's menu. 

You can also delete all cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our Services and some of the Services and functionalities may not work. 

Third-Party Resources about Cookies and to Opt-Out of Cookies and Targeted Advertising 

To find out more information about cookies, including information about how to manage and delete cookies, please visit http://www.allaboutcookies.org/ 

You may also manage or opt-out of certain cookies collected and shared by certain of our providers: 

To make choices about targeted advertisements from participating third parties, including to opt-out of receiving targeted advertisements from participating third parties, please visit the Network Advertising Initiative at http://www.networkadvertising.org/choices/ or the Digital Advertising Alliance at www.aboutads.info/choices.

5. Our Uses of Personal Information in the Last 12 Months 

The below chart summarizes the categories of personal information we have collected, disclosed, sold or shared for cross-contextual behavioral advertising (or targeted advertising) to the identified categories of third parties in the last 12 months. For more details on the categories of third parties, see the above section called, Categories of Third Parties with Whom We Share Your Personal information.


Identifiers (for example, name, postal address, email address, IP address, unique personal identifiers) 

  • Collected in Last 12 Months: Yes
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Yes to Our Vendors, Nonprofits, Parties You Access, Authorize or Authenticate and Parties for Legal Purposes
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: No

Personal information (for example, name, address, telephone number, credit card number)

  • Collected in Last 12 Months: Yes
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Yes to Our Vendors, Nonprofits, Parties You Access, Authorize or Authenticate and Parties for Legal Purposes
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: No

Characteristics of protected persons (for example, age, race, national origin, citizenship, religion, sex/gender)

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Commercial information (for example, records of donations or nonprofits you viewed)

  • Collected in Last 12 Months: Yes
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Yes to Our Vendors, Nonprofits, Parties You Access, Authorize or Authenticate and Parties for Legal Purposes
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: No

Biometric information (for example, fingerprints and voiceprints) 

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Internet or other similar network activity (for example, browsing history, search history, website interactions)

  • Collected in Last 12 Months: Yes
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Yes to Our Vendors
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: No

Geolocation data (for example, device location) 

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Sensory data (audio, electronic, visual, thermal, olfactory or similar information)

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Professional or employment-related information 

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Non-public education information

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Inferences drawn from other personal information to create a consumer profile 

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Government identifying numbers (social security, driver’s license, state ID or passport numbers)

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Complete account credentials (account log-in, financial account, debit card or credit card number in combination with any required security or access code, password or credentials allowing access to an account)

  • Collected in Last 12 Months: Yes
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: No
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: No

Precise geolocation

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Racial or ethnic origin, religious or philosophical beliefs or union membership

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Mail, email or text message contents not directed at us

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Genetic data

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Biometric information processing for the purpose of uniquely identifying an individual

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

Health, sex life or sexual orientation 

  • Collected in Last 12 Months: No
  • Disclosed for Our Business Purposes in Last 12 Months to Categories of Third Parties: Not Applicable
  • Sold or Shared for Cross-Contextual Behavioral Advertising in Last 12 Months to Categories of Third Parties: Not Applicable

6. Data Security and Processing

Security of Your Personal information 

We will maintain reasonable technical and organizational safeguards for the protection of the security and confidentiality of personal information from unauthorized access, use, disclosure or transfer. Despite our efforts to ensure security, we cannot guarantee or warrant that your personal information will not be accessed, acquired, disclosed for an improper purpose, altered or destroyed by an unauthorized person or as a result of a breach of our security safeguards or those of our hosting provider or other vendors or service providers.  We cannot ensure the security of any data transmitted to us over the internet. To the fullest extent permitted by applicable law, we accept no liability for any unintentional disclosure of your personal information. Therefore, we urge you to take adequate precautions to protect your personal information as well, including, without limitation, never sharing your account username or password.

International Transfer, Storage and Processing

Our Services are available in the United States only. We operate from the United States and the personal information we collect or receive is stored and processed in the United States. You consent to the transfer, processing and storage of your personal information in the United States. You also consent to the transfer, processing and storage of your personal information by us, our affiliated entities, our vendors or other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world subject to the provisions of this Privacy Policy. The United States and other jurisdictions to which we transfer or in which we process or store your personal information may not have the same data protection laws as your jurisdiction. 

7. Changes and Amendments to Privacy Policy 

We reserve the right to amend this Privacy Policy at our discretion and at any time. When we do, we will post the revised policy in the Services with a new “Last Updated” date. Your continued use of our Services or your provision of personal information to us following the posting of changes constitutes your acceptance of such changes. We encourage you to visit this page regularly for any changes. 

8. Contact; Disability Access 

Contact Us

You may contact us with questions or concerns related to this Privacy Policy and our privacy policies and practices as follows:

Disability Access 

If you have a disability, you may access this Privacy Policy in an alternative format by contacting us at: