Read and Agree and complete payment for your plan

IMPACT Ready: Privacy Choice & Consent Policy
Last Updated: December 24, 2024

1. Purpose
To provide you with total control over your data. Because IMPACT Ready validates your business for high-level enterprise contracts, we collect specific information (Financial, Legal, and Technical). This policy outlines how you can opt-in to our "Safe Bet" validation ecosystem or opt-out at any time.

2. The Opt-In: Joining the "Verified Pipeline"
By clicking "I Agree" and proceeding with onboarding, you explicitly consent to:
• API Integration: Authorizing IMPACT Ready to connect to your financial institutions (via Plaid) and State records (via SOS) to verify your business status.
• Data Sharing for Opportunity: Allowing the platform to share your Readiness Score and Verified Status with foundational sponsors (e.g., Verizon) and SBDC advisors.
• Automated Audits: Consenting to AI-driven scans of your uploaded documents (Bylaws, Insurance, SOC 2 reports) to generate your Health & Risk Report.

3. Your Rights: The Right to Opt-Out & Delete
Under the CCPA, you have the following controls over your data:
• Right to Stop Sharing: You may at any time toggle off the "Discovery" feature in your settings. This removes your business from the search results seen by procurement officers.
• Right to Disconnect APIs: You may revoke API access to Plaid or other integrations through your Account Settings.
• Right to Deletion ("The Right to be Forgotten"): You may request that we delete all personal and business data collected. Note: Deleting this data will result in the loss of your "Contract-Ready" status and removal from the pilot pipeline.

4. How to Exercise Your Choices
We provide three simple ways to manage your privacy:
• Privacy Dashboard: A dedicated "Privacy & Consent" tab in your user settings where you can toggle data sharing on or off.
• The "Do Not Sell or Share My Info" Link: Found at the footer of our platform and website.
• Email Request: Contact our Compliance Officer at privacy@impactready.com with the subject line "CCPA Request."

5. Data Retention & Limit on Use
We do not sell your data to third-party marketers. We only use your "Sensitive Personal Information" (e.g., EIN, Financial data) for the sole purpose of validating your contract-readiness. If you opt-out or close your account, your data will be purged from our active servers within 45 days, unless retention is required by law for audit purposes.

Implementation Strategy (The "What We Need To Do")
To make this policy legally binding and technically compliant for the SBDC/Verizon project, you must implement the following:
• The "Double-Action" Onboarding: Do not pre-check the "I Agree" box. The user must manually check the box and click a button.
• Layered Notice: On the screen where you ask to connect Plaid, include a small text snippet: "By connecting, you opt-in to real-time financial validation. You can revoke this access at any time in settings."
• Verification Protocol: When someone asks to delete their data, you must have a process to verify it is actually the business owner making the request (usually via an email verification link or MFA).
• SBDC Advisor Training: Ensure SBDC advisors understand that if a client "Opts-Out," their data will vanish from the advisor's dashboard, and the advisor cannot "force" the data to reappear without the client re-consenting.