This Privacy Policy ("Policy") describes how Impulsion Systems, Inc. ("Impulsion," "we," "us," or "our"), the company that operates the impulsion.io website and services, collects, uses, discloses, retains, and safeguards information in connection with our websites, applications, and related services (collectively, the "Services"). References to "Impulsion" in this Policy mean Impulsion Systems, Inc.; impulsion.io is our website and brand and is not itself a legal entity. By accessing or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, please discontinue use of the Services. This Policy is incorporated into and subject to our Terms of Service.
This Policy applies to information processed through our Services, whether you interact with us as a prospective customer, an account holder, an authorized user, a visitor, or otherwise. It does not apply to the practices of third parties that we do not own or control, including independent websites or services that may be linked to or integrated with the Services. Your continued use of the Services following any update to this Policy constitutes your acceptance of the revised terms.
We collect information in a number of categories, depending on how you interact with the Services. The specific information collected will vary based on the nature of your relationship with us and your use of particular features.
We may receive information about you from third-party sources, including service providers, partners, advertising and analytics platforms, and publicly available sources, which we may combine with information we already hold.
We collect information directly from you when you submit it to us; automatically through cookies, pixels, log files, and similar technologies as you interact with the Services; and from third parties acting on our behalf or with whom you have a relationship. Where you provide information about other individuals, you represent that you have the authority and any necessary consents to do so.
We use the information we collect for purposes including, without limitation: to provide, operate, maintain, and improve the Services; to create and administer accounts; to process and fulfill requests and transactions; to personalize and develop features; to communicate with you, including service, transactional, administrative, and (where permitted) marketing communications; to provide customer support; to conduct research, analytics, and product development; to monitor, secure, and protect the integrity of the Services; to detect, prevent, and address fraud, abuse, security incidents, and unlawful activity; to comply with legal obligations and enforce our agreements; and for any other purpose disclosed to you at the point of collection or to which you consent.
If you provide your mobile telephone number and opt in, Impulsion may send you recurring automated SMS text messages relating to your application, onboarding, account, business meeting reminders, scheduling confirmations, account updates, and (where you separately consent) other updates relating to the Services.
To deliver these messages we collect and process your mobile telephone number, your opt-in status, and message-delivery records; we use this information solely to send and manage the text messages you requested.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. We do not sell your mobile telephone number or your SMS opt-in data, and we do not share that information with third parties or affiliates for their own marketing.
Where applicable law requires a legal basis for processing (such as under the EU/UK GDPR), we rely on one or more of the following: your consent; the performance of a contract with you; compliance with a legal obligation; the protection of vital interests; and our legitimate interests in operating, securing, and improving the Services, provided such interests are not overridden by your rights and freedoms. You may withdraw consent at any time where processing is based on consent.
We and our service providers use cookies, web beacons, pixels, local storage, and similar technologies to operate the Services, remember preferences, analyze performance and usage, and support measurement and marketing. You may manage certain technologies through your browser or device settings; disabling them may affect the availability or functionality of certain features. Where required, we obtain consent for non-essential technologies.
We engage carefully selected third-party service providers and sub-processors to perform functions on our behalf and to help us deliver the Services. These providers act on our instructions under contractual obligations of confidentiality and data protection, and are permitted to process information only as necessary to provide their services to us. The categories of such providers include, without limitation:
We may provide a more specific description of relevant providers upon a verifiable request, subject to applicable law and our confidentiality obligations.
We may disclose information: to the service providers and sub-processors described above; to your organization or authorized administrators where you access the Services in connection with an organizational account; in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction; to comply with applicable law, legal process, or governmental request, or to respond to lawful requests by public authorities; to enforce our terms and protect the rights, property, and safety of Impulsion, our users, or others; and with your direction or consent.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under applicable law, except as you may otherwise be notified and provided an opportunity to opt out. As described in Section 5, no mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Certain features may allow you to connect a financial account through a secure, independent third-party financial-data connectivity provider. When you use such features, your bank login credentials are entered into and handled by that provider and are not collected, seen, or stored by us. We receive only the limited, permissioned information necessary to deliver the feature (such as account balances and transaction records) and we do not store full bank account numbers, full payment card numbers, or government identification numbers. Your use of such connectivity is also subject to the third-party provider's own terms and privacy policy, which are presented to you during the connection process.
We maintain administrative, technical, and organizational safeguards designed to protect information against unauthorized access, use, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls and authentication, least-privilege practices, monitoring, and periodic review. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for activity under your account.
We may process and store information in countries other than the one in which you reside, which may have data-protection laws different from those of your jurisdiction. Where required, we implement appropriate safeguards for such transfers, including recognized contractual mechanisms.
We retain information for as long as necessary to fulfill the purposes described in this Policy, to provide the Services, to comply with our legal, regulatory, accounting, and reporting obligations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the type of information and the context. When information is no longer required, we take reasonable steps to delete, de-identify, or anonymize it.
Depending on your jurisdiction, you may have rights regarding your personal information, which may include the right to: access or obtain a copy of your information; request correction of inaccurate information; request deletion; restrict or object to certain processing; request portability; withdraw consent; and not be subject to unlawful discrimination for exercising your rights. Residents of certain jurisdictions (including, where applicable, California under the CCPA/CPRA and individuals in the EU/UK under the GDPR) may have additional or specific rights. To exercise any available right, please contact us using the details in Section 19. We will respond consistent with applicable law and may need to verify your identity before fulfilling a request. You may also have the right to lodge a complaint with a supervisory authority.
How to request deletion of your data. To request deletion of personal information we hold about you — including information you submitted through a Facebook or Instagram lead form, or messages you sent to a riding school on Messenger, Instagram or WhatsApp — email privacy@impulsion.io with the subject line "Data Deletion Request" and the name, email address, and/or telephone number you provided. We will verify your request and delete the corresponding personal information within 30 days, and confirm by email. This option is available to everyone whose personal information we hold, regardless of location, at no charge. Step-by-step instructions are also published at impulsion.io/data-deletion.
The Services are intended for businesses and individuals who are at least the age of majority in their jurisdiction and are not directed to children. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information without appropriate consent, we will take reasonable steps to delete it.
The Services may contain links to, or integrations with, third-party websites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to review the privacy policies of any third party you interact with.
Impulsion is a Meta Tech Provider. Riding schools that use our Services may connect their own Facebook Page, Instagram professional account, WhatsApp Business account and Meta ad account to Impulsion so that we can operate their advertising and customer messaging on their behalf. This section explains what we receive from Meta, why, and what we do with it.
A riding school connects its Meta business assets using Facebook Login for Business, from Settings → Connections inside the platform. The account owner chooses precisely which Page, Instagram account and ad account to share. We never ask for, receive, or store a client's Facebook password. We receive only an access token scoped to what that owner granted, which we hold encrypted and use solely to deliver the Services. The owner may revoke it at any time from inside Impulsion or from Facebook → Settings & Privacy → Settings → Apps and Websites.
We request only the permissions the Services actually require:
A riding school that does not use a given channel is not asked for that channel's permissions.
If you are a member of the public who interacted with a riding school that uses Impulsion, we may receive: the contact details you submitted on a Facebook or Instagram instant form; the content of messages you sent to that barn on Messenger, Instagram or WhatsApp, and the barn's replies; and the basic profile information Meta provides with a message — generally your name, your app-scoped identifier and your profile picture.
We process this information as a service provider to the riding school, so that the barn can answer your enquiry and arrange lessons. Both Meta and the advertiser whose ad generated the lead act as controllers of that information; the advertiser is responsible for the consent and disclosures presented on its lead form.
Messages sent through Impulsion follow Meta's Platform Terms and the Messenger, Instagram and WhatsApp policies, including the permitted customer-service response window. Anyone may opt out at any time by replying STOP inside the conversation itself, on any channel; the opt-out takes effect immediately and is honored across our system. Replying START opts back in. Where our software drafts a reply automatically, a person at the riding school reviews and approves it before it is sent.
Meta Platform Data is retained only for as long as the riding school's connection remains active and the data is needed to provide the Services. When a barn disconnects — or when you ask us to delete your information — we delete the associated data within 30 days, except where law requires us to retain a record, and except for the minimal suppression record we keep so that we continue to honor an opt-out.
We also operate a Data Deletion Request Callback at https://api.impulsion.io/api/v1/meta/data-deletion. If you remove Impulsion from your Facebook account, Meta notifies us automatically; we verify that request cryptographically, action it, and return a confirmation code and a status URL you can use to confirm completion. Full instructions are on our Data Deletion Instructions page, or write to privacy@impulsion.io.
Our handling of Meta Platform Data is governed by the Meta Platform Terms, the Meta Developer Policies and the Lead Generation Terms in addition to this Policy. Where those terms impose an obligation stricter than this Policy in respect of Meta Platform Data, the stricter obligation applies.
Some browsers offer a "Do Not Track" setting. Because there is no consistent industry standard for responding to such signals, we do not currently respond to them. We will treat any legally recognized opt-out preference signals in accordance with applicable law.
We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date above and, where required, provide additional notice. Your continued use of the Services after any update constitutes acceptance of the revised Policy.
If you have questions, concerns, or requests regarding this Policy or our handling of your information, please contact Impulsion Systems, Inc. at privacy@impulsion.io. Our data protection contact is security@impulsion.io. We will endeavor to respond within a reasonable timeframe and consistent with applicable law.
This Policy is provided for general informational purposes and does not constitute legal advice. © 2026 Impulsion Systems, Inc. All rights reserved.