Privacy Policy

Last updated: September 18, 2026

This Privacy Policy explains how Impact Collage ("Impact Collage," "we," "us," or "our") collects, uses, and shares information through the Impact Collage website, dashboard, and donor-recognition collage service at impactcollage.com (the "Service"). It applies to nonprofit organizations and their staff who create and use an account ("you," "your," or "Customer"), and to visitors to our public pages. It is governed by, and should be read together with, our Terms & Conditions.

A separate note on donor information: much of the personal information that passes through the Service — donor photos, names, and social media handles — is uploaded by a nonprofit Customer, not submitted to us directly by the donor. Section 5 below explains how we handle that information and what stays your responsibility as the Customer.

1. Information We Collect

Account information. When you sign up, we collect your organization's name, website address, email address, and a password (which we store only as a one-way hash, never in plain text). If you later contact us for support, we keep a record of that correspondence.

Donor Content. As part of using the dashboard, you upload donor photos, a donor ID, and optionally a donor's name, social media platform, and social media handle. See Section 5.

Payment information. Once paid subscriptions are available, payments will be handled directly by our payment processor, Stripe. We do not receive or store your full card number; we retain only what Stripe returns to identify your subscription (such as a customer and subscription reference) and its status.

Usage and analytics data. We use Microsoft Clarity on the logged-in dashboard to record how the dashboard is used — clicks, scrolling, page navigation, and general on-screen interactions — so we can see where the product is confusing or broken and improve it. Because this records what's visible on screen during a session, it may capture on-screen elements such as donor photo thumbnails displayed in the dashboard at that time. Clarity does not run on the public collage embed itself.

Support chat. Logged-in nonprofit accounts have access to a live chat widget (Tawk.to). If you use it, the messages you send and basic technical information about your browser are handled by Tawk.to on our behalf.

Cookies and session data. We use a session cookie to keep you logged in and a short-lived token to protect forms from cross-site request forgery. These are necessary for the Service to function and aren't used for advertising.

Log data. Like most web services, our servers automatically log technical information such as IP address, browser type, and request timestamps, mainly for security, troubleshooting, and abuse prevention.

2. How We Use Information

We use the information above to:

• create, review, and approve your account, and communicate with you about it (including approval, rejection, and password-reset emails);
• operate the Service — building and hosting your collage, and serving it through your embed on your own website;
• provide customer support and respond to your requests;
• process payments and manage subscriptions, once billing is live;
• monitor, troubleshoot, and improve the dashboard and the Service generally; and
• detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms, and to comply with legal obligations.

3. How We Share Information

We don't sell your information or your Donor Content. We share information in these situations:

• The collage itself, by design. The whole point of the Service is to display your Donor Content publicly — the photos, names, and social handles you add appear in the collage embedded on your own website, viewable by anyone who visits it.
• Service providers. We share information with the vendors that help us run the Service: our hosting/infrastructure provider, Stripe (payments), Microsoft Clarity (dashboard analytics), and Tawk.to (support chat), each acting on our behalf and under their own privacy terms.
• Legal reasons. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, property, or safety of Impact Collage, our Customers, or others.
• Business transfers. If Impact Collage is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy.

4. Data Retention

We keep account information and Donor Content for as long as your account is active, plus a reasonable period afterward in case you reactivate or as needed for legal, security, or recordkeeping purposes. Using "remove this photo" in the dashboard replaces a slot's image with a blank placeholder and clears its name/social fields, but keeps the donor ID on record so you can re-add that donor later; it does not itself trigger deletion of your account's other data. You can request deletion of your account and its data by contacting us (Section 8).

5. Donor Information Is Uploaded By You

Impact Collage is not typically the first point of contact with your donors — you are. As explained in our Terms, you're responsible for getting your donors' consent before uploading their photo, name, or social handle, and for honoring any request a donor makes to have their information removed or corrected (which you can do yourself through "Edit Collage Photos"). If a donor contacts us directly about their photo or information, we'll do our best to help, but we'll generally direct them to your organization, since you control that content and we act largely on your instructions in hosting and displaying it.

6. Security

We use reasonable technical and organizational measures to protect the information in our care, including password hashing and encrypted connections (HTTPS). No method of storage or transmission is completely secure, and we can't guarantee absolute security.

7. Children's Privacy

The Service is intended for use by nonprofit organizations and their staff, not by children. We do not knowingly collect personal information directly from children. Where Donor Content relates to a minor, it is uploaded by the nonprofit Customer, subject to the consent requirements in our Terms.

8. Your Choices and Rights

You can review and update most of your account information directly from Account Settings in the dashboard. Depending on where you're located, you may have additional rights over your personal information — such as the right to request access to, correction of, or deletion of the information we hold about you. To make a request, contact us at admin@impactcollage.com; we'll respond consistent with applicable law. Most browsers let you block or delete cookies, though doing so may prevent the dashboard from keeping you logged in.

9. International Use

Impact Collage is based in, and operates from, the United States. If you access the Service from outside the United States, your information will be processed in the United States, which may have different data protection laws than your own country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll post the updated version here with a new "Last updated" date, and, where appropriate, notify you by email.

11. Contact Us

Questions about this Privacy Policy? Reach us at admin@impactcollage.com.