Privacy notice
Who we are
Impact Kompass provides a platform that nonprofits and impact organizations use to manage program data and report to their partners. This notice explains what we collect on impactkompass.org and how organizations' data is handled on the platform.
Questions about this notice go to hello@impactkompass.org.
What this website collects
When you request a demo or contact us, we keep what you type into the form: your name, work email, organization, country, the topic you chose and your message. We use it only to reply to you and arrange a walk-through.
To stop automated abuse, we keep a one-way hash of your IP address combined with a secret that changes every day. We cannot turn the hash back into your address, and it lets us limit how many requests arrive from one place in an hour.
We measure visits with Vercel Web Analytics, which sets no cookies and does not identify you. It tells us which pages are read, not who read them.
We set one functional cookie, ik-theme, to remember whether you chose the light or dark theme. We set no advertising or tracking cookies.
Organizations' data on the platform
Each organization that uses Impact Kompass has its own database, in a region it chooses. The program data in it (participants, enterprises, activities, indicators and reports) belongs to that organization. We process it on the organization's behalf and following its instructions.
Access is enforced in the database itself, by role, program and sensitivity. Identities and sensitive fields are visible only to people the organization authorizes, and every view of sensitive data, every export and every publish is recorded in an audit log.
If you are a participant in an organization's program and want to know what it holds about you, contact that organization directly. We will help it respond.
How long we keep things
We keep demo and contact requests for as long as we are in conversation with you and for up to 24 months afterwards, unless you ask us to delete them sooner.
Organizations decide how long their program data is kept. When an organization leaves the platform, it receives a full export and its database is deleted.
Your rights
You can ask to see, correct or delete the personal data we hold about you, or object to how we use it. Write to hello@impactkompass.org and we will reply within 30 days.
We design the platform to support the obligations of the General Data Protection Regulation and Ghana's Data Protection Act, 2012 (Act 843), and organizations remain responsible for registering their own processing where the law requires it.
Changes
If we change this notice, we will update the date at the top of this page.