1. Data Collection
We collect the following data when you use ImpactOS:
- Authentication data: email (via Supabase magic link) or Google profile (name, email, avatar) upon registration.
- Profile data: first name, last name, role, company, bio, professional URLs — voluntarily provided.
- Activity data: impact entries, hype docs, community posts — generated by your usage.
- Integration data: API tokens (encrypted), external platform identifiers (GitHub, GitLab, etc.).
- Payment data: processed via Stripe — we do not store card numbers.
- Analytics: anonymized page views via Umami (self-hosted, cookie-free).
2. Legal Basis for Processing
Your data is processed based on your consent (Article 6.1.a GDPR), given upon registration. You may withdraw your consent at any time from your privacy settings.
3. Sub-processors
- Supabase Inc. — database hosting and authentication
- Stripe Inc. — payment processing
- Resend — transactional email delivery
4. Your Rights
Under the GDPR, you have the following rights:
- Right of access: export your data from Settings > Privacy.
- Right to rectification: edit your profile from Settings > Profile.
- Right to erasure: delete your account from Settings > Privacy.
- Right to data portability: use the data export feature.
- Right to object: object to processing of your data for analytics purposes.
5. Contact
For any questions regarding your personal data: impactos@debonte.fr.
6. Cookies
ImpactOS does not use advertising cookies. Umami analytics is self-hosted, does not collect personal data, and does not set cookies. Local storage is only used for the theme preference (light/dark).
Last updated: July 2026.