Privacy notice
Version 1, effective September 30, 2026
In short
We collect what we need to build and run your site, domain, and email, and to bill you. We never sell your information or use it for advertising, and your content is not used to train AI models. You can see, correct, download, or delete your information by emailing us. This notice is a first version and is being reviewed.
Who we are
InstantImpact Live is a service of Penland Investments Inc., doing business as InstantImpact, 7222 E Taylor St., Port Orchard, WA 98366. This notice explains what we collect about our customers and the people who try our service, why, how long we keep it, who we share it with, and your rights. Questions: support@instantimpact.io.
What we collect
- Account and contact details: your name, email address, business or organization name, and, at checkout, your phone number and billing address.
- Payment details: Stripe processes your card. We receive only limited details, such as the card brand, last four digits, and a card fingerprint, which we use to apply the founding discount and the free home page once per card. We never see or store your full card number.
- What you give us for your site: your business description, answers to our questions, logo, photos, the sites you tell us you admire, your design choices, and your change requests.
- Domain registration details: the name, address, phone, and email the registry requires for your domain.
- Email: the messages in mailboxes we host for you are stored by our email provider. We do not read them, except when you ask us for help or the law requires it.
- Sign-in and security records: your password (stored only in scrambled form), passkeys, sign-in times, devices, IP addresses, and a record of important actions on your account.
- Bot checks: our sign-up and sign-in forms use Cloudflare Turnstile to tell people from automated programs.
We do not use advertising or tracking cookies, and our own pages have no third-party analytics.
Why we use it
To build, publish, and host your site; to register and renew your domain; to run your email; to bill you; to keep your account secure and prevent abuse; to answer your questions; to tell you about your account, renewals, and price changes; and to meet our legal obligations.
AI
We use AI to design your pages, write and improve words with you, describe your photos, and make your logo. What you give us for your site is sent to our AI provider, Anthropic, for these purposes only. Your content is not used to train AI models. You approve everything before it is published.
Who we share it with
We share information only with the providers that help us run the service, and only what each needs:
- Amazon Web Services (hosting, storage, and our own email messages)
- Stripe (payments and sales tax)
- OpenSRS, a Tucows company (domain registration and business email)
- Anthropic (AI)
- Pexels (stock photo searches, which contain no personal information)
- Cloudflare (bot checks)
We may also disclose information when the law requires it, as our law enforcement policy describes, or to protect people or our service. If our business is sold or merged, your information would move with it under the same promises. We never sell your personal information or share it for advertising.
Your visitors' information
When your site collects information from its visitors, such as contact form messages, you decide what is collected and why, and we process it on your behalf.
How long we keep it
We keep your information while your account is open. After you close your account, we delete your site, content, and mailboxes within 30 days, and copies in our backups are deleted as those backups age out. We keep billing and tax records for seven years, as the law requires, and security records for one year. If you start a free home page and do not sign up, you can ask us to delete it at any time.
Your rights
Wherever you live in the United States, you can ask us to tell you what we hold about you, correct it, give you a copy, or delete it. Some states give you further rights, and we honor them. Email support@instantimpact.io, and we will answer within 30 days. We will confirm it is you before acting, and we will not treat you differently for asking.
Security
We protect your information with encryption in transit and at rest, short-lived credentials, two-step sign-in for our staff, and access limited to the people who need it. If a breach affects your information, we will tell you as the law requires.
Children
InstantImpact Live is for people 18 and older. We do not knowingly collect information from children.
Changes
We will post any update here with a new effective date, and email you about material changes at least 30 days before they take effect.