Privacy Policy
ImpactRetro is a tool for running team retrospectives. This policy explains what we collect, why, and what you can do about it. It is written to be read, not to be survived.
What we collect
- Account — your email address and display name. If you sign in with Google, we receive only your name, email, and profile picture. We never see your Google password and request no access to any other Google data.
- Content you create — boards, columns, cards, comments, votes, action items, and any board context you write.
- Teams — team and program names, and which members belong to them.
- Operational records — session tokens that keep you signed in, short-lived one-time login codes, and AI usage counts (model name, token totals, latency). These contain no card text.
What we do not collect
- No payment or card details.
- No advertising or third-party tracking cookies.
- No analytics profiles built across other websites.
How we use it
Only to operate the product: authenticating you, storing and displaying your retrospectives, sending sign-in codes, and — when you explicitly ask for it — generating AI summaries and suggestions.
Service providers
- Google — sign-in, if you choose it.
- Resend — delivers sign-in code emails.
- OpenRouter — powers AI features. AI is off by default; board text is sent only if you have enabled AI in settings and then only when you request a suggestion. It is not used to train models.
- Railway — hosting and data storage.
Individual insights
Personal participation patterns (your own card, vote, and comment history) are computed from data the product already stores and are visible only to you. Board hosts and members see aggregate participation counts that never attribute activity or sentiment to a named individual.
Retention and deletion
Content is kept until you delete it or ask us to close your account. Login codes expire within minutes; sessions expire or end when you sign out. Email support@impactretro.com to request deletion and we will remove your account and its content.
Your choices
You can request a copy of your data or its deletion, sign out to end a session, and revoke ImpactRetro's Google access at any time from your Google Account permissions.
Security
Traffic is encrypted in transit over HTTPS. Login codes are stored hashed, never in the clear. No system is perfectly secure, and we do not claim otherwise.
Children
ImpactRetro is a workplace tool and is not directed at children under 13.
Changes
If this policy changes materially, we will update the date above and, where the change is significant, notify signed-in users.