Client Portal: Privacy Policy

Last updated: October 2026

This policy covers the Impact Media client portal at client.impactagency.io (the "portal") and the apps Impact Media uses to connect it to advertising, analytics, email and SMS platforms. Our website privacy policy at www.impactagency.io/privacy-policy covers the rest of our website and services.

What the portal does

Impact Media is a digital marketing agency. The portal gives each of our clients a private view of the marketing work we do for them, in dashboards and a monthly report. Only the client's own users and Impact Media staff can see a client's data.

Data we read from connected platforms

With the account owner's permission, the portal reads reporting data from Meta (Facebook and Instagram), Google (Google Ads, Google Analytics, Search Console and Business Profile), Pinterest, TikTok, ActiveCampaign and HighLevel. That data is:

  • Names and IDs of accounts, campaigns, ad groups, ads, pages and profiles, with their currency and time zone

  • Performance figures such as spend, impressions, clicks, conversions, conversion value, views, engagement, followers, website sessions, search clicks and positions, and email and SMS delivery, opens, clicks and opt-outs

Access is read-only. The portal does not create or change ads, campaigns, posts, Pins or audiences, and it never posts on anyone's behalf.

Personal data

  • Portal users: name, email address, role and login times, so people can log in and we can keep the portal secure.

  • Email and SMS contacts: to calculate totals such as delivery and opt-out rates, the portal reads message and contact records from the client's email and SMS platform during each sync. It stores only the totals, never names, email addresses, phone numbers or message content.

  • People who see or click on ads: platforms report ad results to us as totals, and we don't receive personal data about these people.

How we use the data

Only to show each client its own dashboards and reports, to send login links and report notifications, and to run and secure the portal. We don't sell data, use it for advertising, or share one client's data with another client.

Service providers

  • Hosting and database: Railway

  • An email delivery service, for login links and report notifications

  • Anthropic (Claude API), which drafts the text of monthly reports from aggregated figures. It receives no personal data.

Google user data

Impact Media's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Security and retention

Platform access tokens and API keys are stored encrypted and are never shared. We keep reporting data while we work with a client, so month-on-month and year-on-year comparisons work. When a client leaves or disconnects a platform, we delete the access tokens straight away and that client's data within 30 days, unless the client asks us to keep its reports.

Disconnecting and deleting data

You can remove the portal's access at any time in each platform's settings for connected apps, or by removing Impact Media's access to the account. To ask what data we hold, or to have it deleted, email accounting@impactagency.io. We reply within 30 days.

Children

The portal is a business tool and is not directed at children under 13.

Changes and contact

We update this page when the portal changes, and show the date at the top.

Impact Media, 314 9th St, Suite 200, Huntington, WV 25701 · accounting@impactagency.io