Privacy Policy

Last updated: July 10, 2026

MyImpactAdviser (“we,” “us,” or “our”) operates the website at myimpactadviser.com and the services available through it, including the Alignment Analyzer. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account Information

When you create an account, we collect your name and email address. Authentication is handled by Clerk, our authentication provider, which manages your login credentials and session cookies on our behalf.

Values & Investment Preferences

From the mission statements, investment policy statements, and other documents you upload, we extract and store structured data about your values and preferences — including the themes you want your investments to advance and the exclusion screens you want applied. You review and approve this extracted profile before it is used in analysis. This structured data is what powers the analyses and reports we generate for you.

Uploaded Files

You may upload portfolio files, mission statements, investment policy statements, and diligence documents for analysis. These files are stored securely and associated with your account.

Generated Documents

We store the documents we generate for you, including alignment analysis reports.

Legacy Data from Retired Features

The IPS Builder, a conversational tool we retired in July 2026, stored conversation history, the values and preferences users shared with it, and the documents it generated (Investment Policy Statements and Advisor Scorecards). If you used the IPS Builder before it was retired, we retain that data until you delete it or your account. See our Data Retention & Deletion Policy for how to request deletion.

2. How We Use Your Information

• To provide the Alignment Analyzer service, including analyzing portfolios against your stated values and generating alignment reports
• To generate alignment reports and other documents based on the preferences you share with us
• To improve the accuracy and coverage of our analysis tools for all users (see Platform Research Data below)

We do not sell your personal data to third parties. We do not use your data for advertising or ad targeting of any kind.

3. Platform Research Data

We build and maintain a growing database of company and fund profiles to improve the quality of our analysis tools for all users. This database is populated from two sources:

• Public sources such as SEC filings (including N-PORT and other regulatory disclosures), financial disclosures, and other publicly available information about companies and investment products
• Factual, non-personal insights about companies and funds that may be extracted from documents uploaded by users — for example, the fact that a particular fund holds a certain security or that a company operates in a specific industry

This research data is about companies and investment products, not about individual users. It is never associated with any user account and is not considered personal data.

Your uploaded documents remain your data and can be deleted at any time through your Dashboard. However, factual insights about companies and funds that have already been derived from those documents become part of our platform research database and are retained independently.

4. Third-Party Services

We use the following third-party services to operate MyImpactAdviser. Each service receives only the data necessary for its function.

5. Data Storage and Security

• Structured data (account information, holdings data, extracted values and preferences) is stored in PostgreSQL with encryption in transit
• Generated documents and uploaded files are stored in Cloudflare R2 with encryption at rest
• All connections between your browser and our servers use HTTPS
• Access to production systems is restricted to authorized personnel and protected by multi-factor authentication

6. Your Rights

You have the right to:

• Access and download your data — You can view your analysis results and download generated documents directly from the Dashboard
• Delete individual sessions — From the Dashboard, you can delete any session, which removes the associated uploaded files, analysis results, and generated documents
• Request full account deletion — Email us at [email protected] to request deletion of your entire account and all associated user data. We verify your identity and process the request manually within 30 days

For more details on how long we retain data and how deletions are processed, see our Data Retention & Deletion Policy.

7. Children

MyImpactAdviser is not intended for users under the age of 18. By creating an account, you represent that you are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, please contact us at [email protected] and we will promptly delete it.

8. International Data Transfers

MyImpactAdviser is based in the United States and all data is processed and stored in the United States. If you are accessing the Service from outside the United States, please be aware that your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.

9. For California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

• Right to know — You have the right to request that we disclose what personal information we collect, use, and share about you. The categories of information we collect are described in Section 1 of this policy.
• Right to delete — You have the right to request deletion of personal information we have collected from you, subject to certain exceptions. See our Data Retention & Deletion Policy for how to exercise this right.
• Right to non-discrimination — We will not discriminate against you for exercising any of your CCPA rights.

We do not sell or share your personal information as defined by the CCPA. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

To exercise your rights under the CCPA, contact us at [email protected]. We will verify your identity before processing your request.

10. For Users in the European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional information applies to you under the General Data Protection Regulation (GDPR):

Lawful Basis for Processing

We process your personal data on the following legal bases:

• Contract performance — Processing necessary to provide the Service to you (account data, analysis sessions, document generation).
• Legitimate interests — Processing necessary for our legitimate interests, including improving the Service and maintaining our platform research database, where those interests are not overridden by your data protection rights.
• Consent — Where required by applicable law, we will obtain your consent before processing. You may withdraw consent at any time by contacting us.

Your Rights Under GDPR

In addition to the rights described in Section 6 of this policy, you have the right to:

• Rectification — Request correction of inaccurate personal data.
• Restriction — Request restriction of processing in certain circumstances.
• Data portability — Receive your personal data in a structured, commonly used format.
• Object — Object to processing based on legitimate interests.
• Lodge a complaint — File a complaint with your local data protection authority.

To exercise these rights, contact us at [email protected]. We will respond within 30 days as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users via the email address associated with their account. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

If you have questions or concerns about this Privacy Policy or your data, contact us at [email protected].