This Privacy Policy ("Policy") describes how Impulsion Systems, Inc. ("Impulsion," "we," "us," or "our"), the company that operates the impulsion.io website and services, collects, uses, discloses, retains, and safeguards information in connection with our websites, applications, and related services (collectively, the "Services"). References to "Impulsion" in this Policy mean Impulsion Systems, Inc.; impulsion.io is our website and brand and is not itself a legal entity. By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue use of the Services. This Policy is incorporated into and subject to our Terms of Service.
1. Scope & Acceptance
This Policy applies to information processed through our Services, whether you interact with us as a prospective customer, an account holder, an authorized user, a visitor, or otherwise. It does not apply to the practices of third parties that we do not own or control, including independent websites or services that may be linked to or integrated with the Services. Your continued use of the Services following any update to this Policy constitutes your acceptance of the revised terms.
2. Information We Collect
We collect information in a number of categories, depending on how you interact with the Services. The specific information collected will vary based on the nature of your relationship with us and your use of particular features.
(a) Information you provide
- Identifiers and contact details, such as your name, business name, email address, telephone number, and mailing or business address.
- Account and profile information, including credentials, preferences, role, and settings you configure.
- Business and operational information you elect to provide about your organization, programs, services, scheduling, personnel, and operations.
- Communications, including the contents of messages, inquiries, applications, survey responses, support requests, and other correspondence.
- Commercial information, including records of products or services obtained or considered, and related preferences.
(b) Information collected automatically
- Device and technical data, such as IP address, browser type, operating system, device identifiers, and language settings.
- Usage data, such as pages viewed, features used, referring and exit pages, timestamps, and interaction events.
- Approximate location inferred from network information.
(c) Information from third parties
We may receive information about you from third-party sources, including service providers, partners, advertising and analytics platforms, and publicly available sources, which we may combine with information we already hold.
3. How We Collect Information
We collect information directly from you when you submit it to us; automatically through cookies, pixels, log files, and similar technologies as you interact with the Services; and from third parties acting on our behalf or with whom you have a relationship. Where you provide information about other individuals, you represent that you have the authority and any necessary consents to do so.
4. How We Use Information
We use the information we collect for purposes including, without limitation: to provide, operate, maintain, and improve the Services; to create and administer accounts; to process and fulfill requests and transactions; to personalize and develop features; to communicate with you, including service, transactional, administrative, and (where permitted) marketing communications; to provide customer support; to conduct research, analytics, and product development; to monitor, secure, and protect the integrity of the Services; to detect, prevent, and address fraud, abuse, security incidents, and unlawful activity; to comply with legal obligations and enforce our agreements; and for any other purpose disclosed to you at the point of collection or to which you consent.
5. SMS / Text Messaging
If you provide your mobile telephone number and opt in, Impulsion may send you recurring automated SMS text messages relating to your application, onboarding, account, business meeting reminders, scheduling confirmations, account updates, and (where you separately consent) other updates relating to the Services.
To deliver these messages we collect and process your mobile telephone number, your opt-in status, and message-delivery records; we use this information solely to send and manage the text messages you requested. Message frequency varies (for example, up to approximately 6 messages per month). Message and data rates may apply.
You can opt out at any time by replying STOP, and you can get help by replying HELP or by emailing privacy@impulsion.io. Your consent to receive text messages is not a condition of any purchase or of using the Services.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell your mobile telephone number or your SMS opt-in data, and we do not share that information with third parties or affiliates for their own marketing.
6. Legal Bases for Processing
Where applicable law requires a legal basis for processing (such as under the EU/UK GDPR), we rely on one or more of the following: your consent; the performance of a contract with you; compliance with a legal obligation; the protection of vital interests; and our legitimate interests in operating, securing, and improving the Services, provided such interests are not overridden by your rights and freedoms. You may withdraw consent at any time where processing is based on consent.
7. Cookies & Tracking Technologies
We and our service providers use cookies, web beacons, pixels, local storage, and similar technologies to operate the Services, remember preferences, analyze performance and usage, and support measurement and marketing. You may manage certain technologies through your browser or device settings; disabling them may affect the availability or functionality of certain features. Where required, we obtain consent for non-essential technologies.
8. Service Providers & Sub-Processors
We engage carefully selected third-party service providers and sub-processors to perform functions on our behalf and to help us deliver the Services. These providers act on our instructions under contractual obligations of confidentiality and data protection, and are permitted to process information only as necessary to provide their services to us. The categories of such providers include, without limitation:
- cloud infrastructure, hosting, storage, and security providers;
- customer-relationship, messaging, scheduling, and communications platforms;
- payment processing and billing providers;
- secure financial-data connectivity providers (see Section 10);
- analytics, performance-measurement, and advertising providers;
- artificial-intelligence and data-processing providers used to deliver certain features; and
- professional, administrative, and operational service providers.
We may provide a more specific description of relevant providers upon a verifiable request, subject to applicable law and our confidentiality obligations.
9. How We Disclose Information
We may disclose information: to the service providers and sub-processors described above; to your organization or authorized administrators where you access the Services in connection with an organizational account; in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction; to comply with applicable law, legal process, or governmental request, or to respond to lawful requests by public authorities; to enforce our terms and protect the rights, property, and safety of Impulsion, our users, or others; and with your direction or consent. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under applicable law, except as you may otherwise be notified and provided an opportunity to opt out. As described in Section 5, no mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
10. Financial Account Information
Certain features may allow you to connect a financial account through a secure, independent third-party financial-data connectivity provider. When you use such features, your bank login credentials are entered into and handled by that provider and are not collected, seen, or stored by us. We receive only the limited, permissioned information necessary to deliver the feature (such as account balances and transaction records) and we do not store full bank account numbers, full payment card numbers, or government identification numbers. Your use of such connectivity is also subject to the third-party provider's own terms and privacy policy, which are presented to you during the connection process.
11. Data Security
We maintain administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls and authentication, least-privilege practices, monitoring, and periodic review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for activity under your account.
12. International Transfers
We may process and store information in countries other than the one in which you reside, which may have data-protection laws different from those of your jurisdiction. Where required, we implement appropriate safeguards for such transfers, including recognized contractual mechanisms.
13. Data Retention
We retain information for as long as necessary to fulfill the purposes described in this Policy, to provide the Services, to comply with our legal, regulatory, accounting, and reporting obligations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the type of information and the context. When information is no longer required, we take reasonable steps to delete, de-identify, or anonymize it.
14. Your Privacy Rights
Depending on your jurisdiction, you may have rights regarding your personal information, which may include the right to: access or obtain a copy of your information; request correction of inaccurate information; request deletion; restrict or object to certain processing; request portability; withdraw consent; and not be subject to unlawful discrimination for exercising your rights. Residents of certain jurisdictions (including, where applicable, California under the CCPA/CPRA and individuals in the EU/UK under the GDPR) may have additional or specific rights. To exercise any available right, please contact us using the details in Section 19. We will respond consistent with applicable law and may need to verify your identity before fulfilling a request. You may also have the right to lodge a complaint with a supervisory authority.
How to request deletion of your data. To request deletion of personal information we hold about you — including information you submitted through a Facebook or Instagram lead form — email privacy@impulsion.io with the subject line “Data Deletion Request” and the name, email address, and/or telephone number you provided. We will verify your request and delete the corresponding personal information within 30 days, and confirm by email. This option is available to everyone whose personal information we hold, regardless of location, at no charge. Step-by-step instructions are also published at impulsion.io/data-deletion.
15. Children's Privacy
The Services are intended for businesses and individuals who are at least the age of majority in their jurisdiction and are not directed to children. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information without appropriate consent, we will take reasonable steps to delete it.
16. Third-Party Links, Integrations & Meta (Facebook/Instagram) Lead Ads
The Services may contain links to, or integrations with, third-party websites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third party you interact with.
Meta Platforms (Facebook and Instagram). Impulsion integrates with Meta. Where you connect a Meta account, you authenticate through Facebook Login for Business, and we receive the limited Facebook Page and account information and access tokens needed to operate the integration on your behalf. Using the Meta Lead Ads API (the leads_retrieval permission), we retrieve the information that individuals submit through your Facebook or Instagram lead forms — typically name, email address, telephone number, and any custom responses — and deliver it into your Impulsion account so that you can follow up with that individual for the purpose for which the form was submitted (for example, to arrange a riding lesson). We process this information only as described in this Policy and in accordance with Meta’s Platform Terms and Lead Generation Terms. We do not sell lead information, we do not use it for our own advertising, and we do not combine one client’s lead data with another client’s. Both Meta and the advertiser whose ad generated the lead act as controllers of this information; the advertiser is responsible for the consent and disclosures presented on its lead form. Individuals whose information we hold may request deletion at any time as described in Section 14 and at impulsion.io/data-deletion.
Messaging and ad management on your behalf. When you enable these features and connect your accounts through Facebook Login for Business, Impulsion accesses, on your behalf: the messages and comments people send to your Facebook Page and Instagram account, together with the basic profile information of those people (such as name and an app-scoped identifier), so our assistant can read, reply to, and book them (permissions pages_messaging, instagram_manage_messages, pages_manage_metadata, pages_read_engagement, pages_show_list, instagram_basic); and your ad account and campaign data, so we can create, manage, optimize, and report on your advertising (permissions ads_management, business_management). We use this information solely to provide these features to you; we do not sell it, we do not use it for our own advertising, and we never combine one client’s data with another client’s. Every automated conversation includes a clear way to opt out, and you may request deletion of this information at any time as described in Section 14 and at impulsion.io/data-deletion.
17. Do-Not-Track Signals
Some browsers offer a "Do Not Track" setting. Because there is no consistent industry standard for responding to such signals, we do not currently respond to them. We will treat any legally recognized opt-out preference signals in accordance with applicable law.
18. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date above and, where required, provide additional notice. Your continued use of the Services after any update constitutes acceptance of the revised Policy.
19. How to Contact Us
If you have questions, concerns, or requests regarding this Policy or our handling of your information, please contact Impulsion Systems, Inc. at privacy@impulsion.io. We will endeavor to respond within a reasonable timeframe and consistent with applicable law.
This Policy is provided for general informational purposes and does not constitute legal advice. © 2026 Impulsion Systems, Inc. All rights reserved.