Skip to main content
Inpactum

Privacy policy

This translation is provided for information only. Only the French version of this policy is legally binding.

1. Data controller

The controller of personal data collected on the Inpactum site is:

Alexandre Talon
Sole proprietor (auto-entrepreneur)
Email: contact@inpactum.com

2. Data collected

We may collect the following categories of data:

  • Identification data (first name, last name, email address) at sign-up
  • Professional profile data (skills, background, public links)
  • Browsing and usage data (pages viewed, interactions)
  • Data submitted through the contact form or the newsletter
  • Data related to a paid subscription (billing address, payment history, subscription status)

3. Purposes of processing

Your data is processed in order to:

  • Create and manage your member account
  • Connect impact organizations with digital experts
  • Run the forum, the resources and the opportunities
  • Send you service-related communications (including the newsletter, with your consent)
  • Improve the site and measure its audience in aggregate
  • Meet our legal obligations
  • Manage paid subscriptions, invoicing and accounting obligations

4. Legal basis

Processing relies on performance of the contract (user account, paid subscription), your consent (newsletter, non-essential cookies where applicable), our legitimate interest (security, service improvement) or a legal obligation (retention of accounting records).

5. Retention period

Account data is kept while the account is active, then archived or deleted within a reasonable time after closure. Newsletter sign-ups are kept until unsubscription or a deletion request; the date, source and technical details of the sign-up are kept as proof of consent, then deleted along with the sign-up. Accounting records tied to a paid subscription are kept for ten years, as the law requires.

6. Recipients and processors

Some data may be processed by our technical providers (hosting, database, analytics) under GDPR-compliant contracts, in particular:

  • Vercel (hosting)
  • Supabase (database and authentication)
  • PostHog (audience measurement, subject to your consent where applicable)
  • Stripe (payment processing; no card data is stored by Inpactum)
  • Brevo and Resend (transactional emails and newsletter delivery)

7. Your rights

Under the GDPR, you have the right to access, correct, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time.

To exercise these rights: contact@inpactum.com. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

8. Cookies and trackers

The site may use technical cookies necessary for it to work and, where applicable, audience trackers. You can configure your browser to refuse non-essential cookies. For more detail, see also our legal notice.

9. Security

We put in place appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration.

10. Changes

This policy may be updated. The date of the latest update is shown below.

Last updated: October 4, 2026