Privacy Policy

Information We Collect

When you use Impera, we may collect information you provide directly to the service, including your name, email address, organization information, account settings, customer and contact information, meeting information, notes, reminders, follow-up information, and other business information you choose to enter or capture through Impera.

When you use voice or AI-assisted features, information you provide through those features may be processed to provide transcription, organization, summarization, recommendations, or other requested functionality.

We may also collect technical information necessary to operate and secure the service, such as authentication information, application activity, device or browser information, and diagnostic or security information.

How We Use Information

We use information collected through Impera to provide and operate the service; authenticate users and maintain accounts; organize customer, meeting, reminder, and follow-up information; provide AI-assisted and voice-enabled features requested by users; maintain security and prevent misuse; troubleshoot and improve service reliability; communicate with users about their accounts or the service; and comply with legal obligations.

We do not sell personal information or Google user data for advertising purposes.

Google Calendar Integration

Impera allows a user to optionally connect a Google Calendar account.

When a user connects Google Calendar, Impera requests only the Google permissions necessary to provide the calendar write-back feature. Impera currently requests basic account-identification information and permission to manage events on calendars owned by the connected user.

Impera uses this access only to create calendar events that the user explicitly reviews and confirms in Impera. The current calendar write-back feature does not use Google Calendar access to read or synchronize the user's existing calendar events, determine availability, select shared calendars, or automatically invite attendees.

When a Google account is connected, Impera may store the connected account identifier or email address, the permissions granted, token expiration information, and OAuth access and refresh credentials necessary to maintain the connection. OAuth credentials are encrypted before storage and are not exposed to the Impera browser application.

When Impera creates a calendar event, it sends the event information the user confirmed, such as the event title, date, time, time zone, description, or location, to Google Calendar. Impera may retain operational linkage information such as the provider event identifier, event link, title, date or time, time zone, and creation status so that Impera can prevent duplicate event creation and show whether a reminder has already been added to the calendar.

Impera does not add attendees or send calendar invitations as part of the current calendar write-back feature.

Users may disconnect Google Calendar at any time from Impera's settings. When a user disconnects Google Calendar, Impera deletes its stored OAuth credentials for that connection and makes a best-effort request to revoke the provider authorization.

Impera's use of information received from Google APIs is limited to providing and securing the user-requested functionality described in this Privacy Policy and is intended to comply with the Google API Services User Data Policy, including its Limited Use requirements.

Microsoft Outlook and Microsoft 365 Calendar

Impera also allows users to optionally connect an Outlook or Microsoft 365 calendar through Microsoft.

The Microsoft calendar integration operates similarly to the Google Calendar integration. It uses delegated permissions associated with the individual user and creates calendar events only after the user reviews and confirms the event in Impera.

Impera does not request application-wide or tenant-wide calendar access for this feature and does not automatically add attendees or send meeting invitations.

OAuth credentials used to maintain a Microsoft calendar connection are protected in the same manner as other calendar-provider credentials and may be removed by disconnecting the account from Impera.

How We Share Information

We may provide information to service providers that process data on our behalf when necessary to operate, secure, host, support, or provide requested features of Impera. Those providers are permitted to process information only for appropriate service-related purposes and subject to applicable contractual and security safeguards.

Information may also be accessible to authorized users within the same Impera organization according to the roles and permissions established for that organization.

We may disclose information when reasonably necessary to comply with applicable law, legal process, or valid governmental requests; protect the rights, security, or integrity of Impera, Ironclad Systems, our users, or others; investigate fraud or abuse; or complete a merger, acquisition, financing, reorganization, or sale of business assets subject to appropriate protections.

We do not sell Google user data, use Google user data for targeted advertising, or permit unrelated third parties to use Google user data for their own independent purposes.

Data Security

Ironclad Systems uses technical and organizational safeguards designed to protect information handled by Impera.

Calendar-provider OAuth credentials are handled by Impera's server-side systems and encrypted before being stored. Access to calendar-connection records is restricted to authorized server-side components and scoped to the applicable Impera user and organization.

No method of transmission or storage can guarantee absolute security, and we cannot guarantee that unauthorized access will never occur.

Data Retention

We retain information for as long as reasonably necessary to provide Impera, maintain legitimate business and security records, satisfy contractual or legal obligations, resolve disputes, and enforce agreements.

Calendar OAuth credentials are retained only while necessary to maintain the user's connected calendar account. Disconnecting a calendar removes Impera's stored credentials for that connection.

Certain non-credential operational records, including records used to identify calendar events previously created from Impera reminders, may be retained as part of the user's Impera business records and to prevent duplicate actions.

Your Choices

Users can review and modify information available through their Impera account, disconnect connected calendar providers, and revoke permissions directly through Google or Microsoft account controls.

Users may contact Ironclad Systems to request assistance with accessing, correcting, or deleting personal information, subject to contractual, organizational, security, and legal requirements.

Third-Party Services

Impera may interact with third-party platforms and service providers, including Google and Microsoft. Their handling of information within their own services is governed by their respective privacy policies and terms.

Connecting a third-party service to Impera is optional.

Changes to This Policy

We may update this Privacy Policy when Impera's functionality, data practices, legal obligations, or third-party integrations change.

When material changes are made, we will update the effective date and provide additional notice when appropriate.

Contact Us

Questions or requests concerning this Privacy Policy or Impera's privacy practices may be directed to:

Ironclad Systems LLC
support@ironclad-systems.com