← Back to home
Effective Date: September 9, 2026
Impact Compass is committed to protecting the privacy, security, dignity, and confidentiality of the individuals and organizations that use our platform. These policies explain how information may be collected, used, stored, shared, and protected when using Impact Compass.
1. Privacy Policy
Impact Compass may collect information necessary to provide and improve our services, including names, email addresses, telephone numbers, organization information, account information, program participation information, and information voluntarily submitted through forms or platform features.
We may also automatically receive limited technical information, such as device type, browser information, IP address, login activity, and cookies or similar technologies used for security, authentication, functionality, and platform performance.
Impact Compass will not sell personal information to third parties.
Information may be used to:
• Create and maintain user accounts.
• Operate Impact Compass services.
• Manage programs, events, volunteers, participants, and organizations.
• Measure community impact and program outcomes.
• Generate authorized reports and dashboards.
• Provide customer and technical support.
• Maintain platform security.
• Communicate important service information.
• Meet legal and regulatory obligations.
2. Children's Privacy & Protection
Impact Compass recognizes that organizations using the platform may serve children and families.
Organizations must not enter children's personal information into Impact Compass unless they have the appropriate legal authority, parental or guardian authorization, or another lawful basis to do so.
When applicable, Impact Compass and organizations using the platform must follow the Children's Online Privacy Protection Act (COPPA) and other applicable child-privacy requirements.
Information concerning minors should be limited to what is reasonably necessary for the authorized program or service.
Parents or legal guardians may have the right to request access to, correction of, or deletion of their child's information where applicable.
Impact Compass does not permit the unauthorized collection, publication, sale, exploitation, or disclosure of children's personal information.
3. Photos, Videos & Media
Photos, videos, audio recordings, testimonials, or other identifiable media involving children should only be uploaded when the organization responsible for the information has obtained appropriate authorization.
Organizations are responsible for maintaining required parental, guardian, participant, or media releases.
Sensitive environments—including hospitals, foster-care programs, shelters, schools, or other protected settings—may impose additional restrictions. Those restrictions must be followed.
4. Data Security
Impact Compass uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, destruction, or loss.
Security measures may include authentication controls, access restrictions, encryption where appropriate, system monitoring, backups, and administrative safeguards.
No internet-based platform can guarantee absolute security. Users are responsible for protecting their passwords and account credentials and immediately reporting suspected unauthorized access.
5. Role-Based Access
Access to information should be limited according to each user's authorized role.
Organizations are responsible for determining which employees, administrators, volunteers, contractors, or representatives may access their organization's information.
Users may not access, download, copy, share, export, or use information outside the scope of their authorized responsibilities.
6. Confidential Information
Information contained within Impact Compass may include confidential organizational, participant, donor, volunteer, family, or program information.
Users must maintain the confidentiality of information they access through the platform.
Unauthorized disclosure, screenshots, downloading, distribution, copying, publication, or commercial use of confidential information is prohibited.
7. Data Sharing
Impact Compass may use trusted technology and service providers when necessary to operate, secure, host, maintain, or support the platform.
Information may also be disclosed when required by law, court order, governmental request, or when reasonably necessary to protect the safety, rights, property, or security of Impact Compass, its users, or others.
Impact Compass does not sell participant or children's personal information.
8. Impact Reporting & Analytics
Impact Compass may provide organizations with tools to measure services, participation, outcomes, community reach, and other impact metrics.
Where appropriate, aggregated or de-identified information may be used for analytics, research, reporting, system improvement, or demonstrating community impact.
Reports intended for public distribution should avoid identifying individual children or vulnerable participants unless appropriate authorization exists.
9. Data Ownership
Organizations retain ownership of the information they lawfully submit to Impact Compass, subject to applicable agreements and laws.
Use of Impact Compass does not transfer ownership of an organization's underlying records to Impact Compass.
Impact Compass receives only the rights reasonably necessary to host, process, secure, display, back up, and otherwise operate the platform and its requested services.
10. Data Retention & Deletion
Impact Compass seeks to retain personal information only for as long as reasonably necessary for legitimate operational, contractual, security, reporting, or legal purposes.
Organizations may request deletion or export of eligible information, subject to applicable laws, contractual obligations, backup procedures, fraud prevention, security requirements, and legitimate record-retention requirements.
Information concerning children should not be retained indefinitely when it is no longer reasonably necessary for the purpose for which it was collected.
11. Cookies & Technology
Impact Compass may use cookies and similar technologies for authentication, security, user preferences, platform functionality, analytics, and performance.
Where required by law, users will be provided appropriate choices regarding non-essential cookies or tracking technologies.
12. Artificial Intelligence & Automated Features
If Impact Compass provides artificial intelligence, automation, recommendations, summaries, predictive tools, or other automated features, those technologies are intended to assist users—not replace professional judgment.
Organizations remain responsible for reviewing important decisions and ensuring that information generated by automated systems is accurate and appropriate before acting upon it.
Sensitive information should not be used to make unlawful or discriminatory automated decisions.
13. Acceptable Use
Users may not use Impact Compass to:
• Violate applicable laws or regulations.
• Harass, threaten, exploit, discriminate against, or harm another person.
• Attempt unauthorized access to another account or organization.
• Upload malware or malicious software.
• Circumvent platform security.
• Misrepresent information or identity.
• Collect or disclose information without authorization.
• Exploit children's information.
• Scrape, copy, reverse engineer, or misuse platform data or technology except where permitted by law.
• Use Impact Compass for fraudulent or illegal activities.
14. Account Responsibility
Users are responsible for activity conducted through their accounts.
Passwords and authentication credentials must not be knowingly shared with unauthorized individuals.
Impact Compass should be notified promptly when an account is believed to have been compromised.
15. Organization Administrator Responsibilities
Organizations using Impact Compass are responsible for ensuring that their users have appropriate authorization to access information.
Administrators should promptly remove access for employees, volunteers, contractors, or other users who no longer require access.
Organizations are also responsible for obtaining required participant, parental, guardian, media, privacy, or other permissions associated with information they upload.
16. Third-Party Services
Impact Compass may integrate with third-party applications or services.
Third-party services operate according to their own agreements and privacy practices. Organizations should review those policies before enabling integrations involving organizational or participant information.
17. Intellectual Property
The Impact Compass name, branding, platform design, proprietary software, workflows, documentation, graphics, databases, and original platform materials are protected by applicable intellectual-property laws.
Use of the platform does not grant users ownership of Impact Compass intellectual property.
18. Suspension & Termination
Impact Compass reserves the right to restrict, suspend, or terminate access when reasonably necessary to address security concerns, policy violations, fraudulent activity, unlawful activity, nonpayment where applicable, threats to other users, or misuse of the platform.
19. Privacy Requests
Individuals may contact Impact Compass regarding eligible requests to access, correct, export, or delete personal information.
Additional verification may be required before a request is completed to protect against unauthorized disclosure or deletion.
Requests involving information controlled by an organization using Impact Compass may need to be directed to that organization.
20. Policy Updates
Impact Compass may periodically update these policies to reflect changes in the platform, technology, security practices, legal requirements, or business operations.
Material changes will be communicated through reasonable methods when required.
21. Contact
Questions regarding these Privacy & Policies, information security, children's privacy, or data requests may be submitted through the official Impact Compass contact channels.
Recommended Separate Legal Pages
As Impact Compass grows, these subjects should also have dedicated policies:
Privacy Policy • Terms of Service • Children's Privacy/COPPA Policy • Cookie Policy • Data Security Policy • Data Retention & Deletion Policy • Acceptable Use Policy • AI & Automation Policy • Organization/Data Processing Agreement • Accessibility Policy.
Legal Notice: This policy framework is intended as general operational language and should be reviewed by qualified legal counsel before publication, particularly if Impact Compass processes children's information, health-related information, school records, foster-care information, or other regulated or highly sensitive data.
Impact Compass policies
Privacy & Policies
Impact Compass is committed to protecting the privacy, security, dignity, and confidentiality of the individuals and organizations that use our platform. These policies explain how information may be collected, used, stored, shared, and protected when using Impact Compass.
1. Privacy Policy
Impact Compass may collect information necessary to provide and improve our services, including names, email addresses, telephone numbers, organization information, account information, program participation information, and information voluntarily submitted through forms or platform features.
We may also automatically receive limited technical information, such as device type, browser information, IP address, login activity, and cookies or similar technologies used for security, authentication, functionality, and platform performance.
Impact Compass will not sell personal information to third parties.
Information may be used to:
• Create and maintain user accounts.
• Operate Impact Compass services.
• Manage programs, events, volunteers, participants, and organizations.
• Measure community impact and program outcomes.
• Generate authorized reports and dashboards.
• Provide customer and technical support.
• Maintain platform security.
• Communicate important service information.
• Meet legal and regulatory obligations.
2. Children's Privacy & Protection
Impact Compass recognizes that organizations using the platform may serve children and families.
Organizations must not enter children's personal information into Impact Compass unless they have the appropriate legal authority, parental or guardian authorization, or another lawful basis to do so.
When applicable, Impact Compass and organizations using the platform must follow the Children's Online Privacy Protection Act (COPPA) and other applicable child-privacy requirements.
Information concerning minors should be limited to what is reasonably necessary for the authorized program or service.
Parents or legal guardians may have the right to request access to, correction of, or deletion of their child's information where applicable.
Impact Compass does not permit the unauthorized collection, publication, sale, exploitation, or disclosure of children's personal information.
3. Photos, Videos & Media
Photos, videos, audio recordings, testimonials, or other identifiable media involving children should only be uploaded when the organization responsible for the information has obtained appropriate authorization.
Organizations are responsible for maintaining required parental, guardian, participant, or media releases.
Sensitive environments—including hospitals, foster-care programs, shelters, schools, or other protected settings—may impose additional restrictions. Those restrictions must be followed.
4. Data Security
Impact Compass uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, misuse, destruction, or loss.
Security measures may include authentication controls, access restrictions, encryption where appropriate, system monitoring, backups, and administrative safeguards.
No internet-based platform can guarantee absolute security. Users are responsible for protecting their passwords and account credentials and immediately reporting suspected unauthorized access.
5. Role-Based Access
Access to information should be limited according to each user's authorized role.
Organizations are responsible for determining which employees, administrators, volunteers, contractors, or representatives may access their organization's information.
Users may not access, download, copy, share, export, or use information outside the scope of their authorized responsibilities.
6. Confidential Information
Information contained within Impact Compass may include confidential organizational, participant, donor, volunteer, family, or program information.
Users must maintain the confidentiality of information they access through the platform.
Unauthorized disclosure, screenshots, downloading, distribution, copying, publication, or commercial use of confidential information is prohibited.
7. Data Sharing
Impact Compass may use trusted technology and service providers when necessary to operate, secure, host, maintain, or support the platform.
Information may also be disclosed when required by law, court order, governmental request, or when reasonably necessary to protect the safety, rights, property, or security of Impact Compass, its users, or others.
Impact Compass does not sell participant or children's personal information.
8. Impact Reporting & Analytics
Impact Compass may provide organizations with tools to measure services, participation, outcomes, community reach, and other impact metrics.
Where appropriate, aggregated or de-identified information may be used for analytics, research, reporting, system improvement, or demonstrating community impact.
Reports intended for public distribution should avoid identifying individual children or vulnerable participants unless appropriate authorization exists.
9. Data Ownership
Organizations retain ownership of the information they lawfully submit to Impact Compass, subject to applicable agreements and laws.
Use of Impact Compass does not transfer ownership of an organization's underlying records to Impact Compass.
Impact Compass receives only the rights reasonably necessary to host, process, secure, display, back up, and otherwise operate the platform and its requested services.
10. Data Retention & Deletion
Impact Compass seeks to retain personal information only for as long as reasonably necessary for legitimate operational, contractual, security, reporting, or legal purposes.
Organizations may request deletion or export of eligible information, subject to applicable laws, contractual obligations, backup procedures, fraud prevention, security requirements, and legitimate record-retention requirements.
Information concerning children should not be retained indefinitely when it is no longer reasonably necessary for the purpose for which it was collected.
11. Cookies & Technology
Impact Compass may use cookies and similar technologies for authentication, security, user preferences, platform functionality, analytics, and performance.
Where required by law, users will be provided appropriate choices regarding non-essential cookies or tracking technologies.
12. Artificial Intelligence & Automated Features
If Impact Compass provides artificial intelligence, automation, recommendations, summaries, predictive tools, or other automated features, those technologies are intended to assist users—not replace professional judgment.
Organizations remain responsible for reviewing important decisions and ensuring that information generated by automated systems is accurate and appropriate before acting upon it.
Sensitive information should not be used to make unlawful or discriminatory automated decisions.
13. Acceptable Use
Users may not use Impact Compass to:
• Violate applicable laws or regulations.
• Harass, threaten, exploit, discriminate against, or harm another person.
• Attempt unauthorized access to another account or organization.
• Upload malware or malicious software.
• Circumvent platform security.
• Misrepresent information or identity.
• Collect or disclose information without authorization.
• Exploit children's information.
• Scrape, copy, reverse engineer, or misuse platform data or technology except where permitted by law.
• Use Impact Compass for fraudulent or illegal activities.
14. Account Responsibility
Users are responsible for activity conducted through their accounts.
Passwords and authentication credentials must not be knowingly shared with unauthorized individuals.
Impact Compass should be notified promptly when an account is believed to have been compromised.
15. Organization Administrator Responsibilities
Organizations using Impact Compass are responsible for ensuring that their users have appropriate authorization to access information.
Administrators should promptly remove access for employees, volunteers, contractors, or other users who no longer require access.
Organizations are also responsible for obtaining required participant, parental, guardian, media, privacy, or other permissions associated with information they upload.
16. Third-Party Services
Impact Compass may integrate with third-party applications or services.
Third-party services operate according to their own agreements and privacy practices. Organizations should review those policies before enabling integrations involving organizational or participant information.
17. Intellectual Property
The Impact Compass name, branding, platform design, proprietary software, workflows, documentation, graphics, databases, and original platform materials are protected by applicable intellectual-property laws.
Use of the platform does not grant users ownership of Impact Compass intellectual property.
18. Suspension & Termination
Impact Compass reserves the right to restrict, suspend, or terminate access when reasonably necessary to address security concerns, policy violations, fraudulent activity, unlawful activity, nonpayment where applicable, threats to other users, or misuse of the platform.
19. Privacy Requests
Individuals may contact Impact Compass regarding eligible requests to access, correct, export, or delete personal information.
Additional verification may be required before a request is completed to protect against unauthorized disclosure or deletion.
Requests involving information controlled by an organization using Impact Compass may need to be directed to that organization.
20. Policy Updates
Impact Compass may periodically update these policies to reflect changes in the platform, technology, security practices, legal requirements, or business operations.
Material changes will be communicated through reasonable methods when required.
21. Contact
Questions regarding these Privacy & Policies, information security, children's privacy, or data requests may be submitted through the official Impact Compass contact channels.
Recommended Separate Legal Pages
As Impact Compass grows, these subjects should also have dedicated policies:
Privacy Policy • Terms of Service • Children's Privacy/COPPA Policy • Cookie Policy • Data Security Policy • Data Retention & Deletion Policy • Acceptable Use Policy • AI & Automation Policy • Organization/Data Processing Agreement • Accessibility Policy.
Legal Notice: This policy framework is intended as general operational language and should be reviewed by qualified legal counsel before publication, particularly if Impact Compass processes children's information, health-related information, school records, foster-care information, or other regulated or highly sensitive data.