Effective Date: January 1, 2026

Last Updated: May 14, 2026

Peak Impact Management LLC ("Peak Impact Management," "ImpactEdge," "we," "us," or "our") operates the ImpactEdge brand and website at impactedge.ai. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit impactedge.ai (the "Site"), interact with our enterprise sustainability performance platform — including Impact Ops, Impact Intelligence, Impact Performance, IMPACT-XD™, and ATHENE AI™ (collectively, the "Services") — request a demo, communicate with us, or opt in to receive text messages from us.

By using our Site or Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Site or Services.

1. Information We Collect

We collect information you provide directly to us, information collected automatically when you use the Site, and information from third parties.

1.1 Information You Provide to Us

•      Contact and identity information: name, business email address, phone number, job title, company name, and country.

•      Demo and inquiry information: details you submit through our demo request, contact, or marketing forms, including your sustainability goals, use case, and team size.

•      Account information: credentials and profile details for customers and authorized users of the Services.

•      Customer content: sustainability, ESG, operational, supply chain, IoT, and value-chain data that you or your organization upload, connect, or process through the Services.

•      Communications: the content of emails, chat messages, support tickets, surveys, and any text (SMS) messages you exchange with us.

•      Mobile phone numbers and SMS opt-in records: the phone number you submit, the date and method of your consent, the keyword or form used, and the content of your opt-in.

1.2 Information Collected Automatically

•      Device and usage data: IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, links clicked, and session duration.

•      Cookies and similar technologies: see Section 4 (Cookies & Tracking).

•      Log data: server logs, error reports, and platform telemetry generated when you access the Site or Services.

1.3 Information from Third Parties

•      Business partners, integrators, and resellers who refer you to us.

•      Public sources and enrichment providers (for example, LinkedIn-based firmographic data) used to qualify business inquiries.

•      Connected enterprise systems, IoT devices, and data sources you authorize to integrate with the Services.

2. How We Use Your Information

We use information to operate our business and deliver our Services. Specifically, we use information to:

•      Provide, maintain, and improve the Site and Services, including the Impact Performance Suite and the IMPACT-XD™ and ATHENE AI™ technologies.

•      Respond to demo requests, inquiries, and customer support tickets.

•      Process and manage your account, subscriptions, and contractual relationship with us.

•      Send service-related communications (transactional emails, security alerts, billing notices, platform updates).

•      Send marketing emails and text messages where you have opted in, including event invitations, product updates, sustainability insights, and demo follow-ups.

•      Analyze usage patterns and improve performance, reliability, and user experience.

•      Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service.

•      Comply with legal obligations, enforce our agreements, and protect our rights and the rights of others.

•      Conduct research, benchmarking, and aggregated analytics — always in a manner that does not identify any individual or customer.

3. SMS / Text Messaging Program

If you opt in to receive text messages from ImpactEdge (operated by Peak Impact Management LLC), the following terms apply.

3.1 Opt-In and Consent

You may opt in to receive SMS messages from us by:

•      Checking an SMS consent box on a form on impactedge.ai (such as a demo request, contact, or newsletter form);

•      Texting a keyword (such as JOIN or START) to a number we provide; or

•      Providing your mobile number to a member of our team and confirming consent in writing.

By opting in, you confirm that you are the subscriber of, or the authorized user of, the mobile phone number you provide, and that you are at least 18 years old.

3.2 Types of Messages You May Receive

•      Demo confirmations, scheduling reminders, and follow-ups.

•      Product updates, release announcements, and feature notifications.

•      Event invitations and reminders (webinars, conferences, customer briefings).

•      Account, security, and support communications.

•      Sustainability insights, thought leadership, and marketing content (only with marketing opt-in).

3.3 Message Frequency, Rates, and Carrier Disclaimer

Message frequency varies based on your interactions with us. You may receive recurring messages. Message and data rates may apply. Check your mobile plan and contact your wireless provider for details.

Carriers (including but not limited to AT&T, T-Mobile, Verizon, U.S. Cellular, and their affiliates) are not liable for delayed or undelivered messages.

3.4 How to Opt Out

You can opt out of SMS messages at any time by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any message we send. After you opt out, you will receive one final confirmation message, and we will not send you further marketing SMS messages. For help, reply HELP or contact us using the details in Section 12.

IMPORTANT — NO SHARING OF SMS CONSENT OR PHONE NUMBERS

Mobile information, phone numbers, and SMS opt-in consent will NOT be shared with third parties or affiliates for marketing or promotional purposes. This includes any text messaging originator opt-in data, which will not be shared with any third parties under any circumstances. Information sharing to subcontractors strictly supporting the SMS program (for example, our SMS messaging platform provider) is permitted solely to deliver messages you have requested, and those subcontractors are contractually prohibited from using the data for their own purposes.

3.5 Supported Carriers

Our SMS program is generally compatible with major U.S. wireless carriers. Availability may vary, and we cannot guarantee delivery on all networks.

4. Cookies & Tracking Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies on the Site.

4.1 Types of Cookies We Use

•      Strictly necessary: required for the Site and Services to function (for example, authentication, security, and load balancing).

•      Performance and analytics: help us understand how visitors use the Site (for example, Google Analytics, server logs).

•      Functional: remember preferences such as language and region.

•      Marketing and advertising: measure the effectiveness of campaigns and, where permitted, deliver relevant content (for example, LinkedIn Insight Tag).

4.2 Your Choices

Most browsers let you refuse or delete cookies. You can also use industry opt-out tools such as the Network Advertising Initiative (networkadvertising.org) and the Digital Advertising Alliance (aboutads.info). Blocking some cookies may affect Site functionality. Where required by law (for example, in the EEA, UK, or California), we will request your consent via a cookie banner before placing non-essential cookies.

5. How We Share Information

We share information only in the limited circumstances below. We do not sell personal information, and we do not share SMS opt-in data with third parties for their own marketing purposes.

•      Service providers: trusted vendors who process information on our behalf (for example, cloud hosting, analytics, CRM, email and SMS delivery, payment processing, customer support). They are contractually bound to use information only to perform services for us.

•      Business partners: co-marketing or integration partners, but only with your consent or as you direct.

•      Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to standard confidentiality protections.

•      Legal and safety: to comply with law, respond to lawful requests, enforce our agreements, or protect the rights, property, or safety of ImpactEdge, our customers, or others.

•      Aggregated or de-identified data: for research, benchmarking, and product improvement, in a form that cannot reasonably identify you.

6. Data Security Practices

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Our practices include:

•      Encryption of data in transit (TLS) and at rest using industry-standard algorithms.

•      Multi-tenant architecture with logical data partitioning to keep customer data isolated.

•      Blockchain-enabled evidence chains within IMPACT-XD™ to support data integrity, verifiability, and auditability.

•      Role-based access controls, multi-factor authentication for administrators, and least-privilege provisioning.

•      Regular security testing, monitoring, logging, and vulnerability management.

•      Vendor risk reviews for service providers that handle personal information.

•      Incident response procedures, including breach notification where required by law.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we work to maintain protections appropriate to the nature of the information we hold.

7. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. SMS opt-in records are retained for the duration of your consent and for a reasonable period afterward to evidence compliance with applicable law.

8. Your Rights and Choices

Depending on your location and applicable law (including the GDPR, UK GDPR, CCPA/CPRA, and other state privacy laws), you may have the following rights:

•      Access: request a copy of the personal information we hold about you.

•      Correction: request that we correct inaccurate or incomplete information.

•      Deletion: request that we delete personal information, subject to legal exceptions.

•      Portability: receive your information in a portable, machine-readable format.

•      Restriction and objection: ask us to limit or stop certain processing, including direct marketing.

•      Withdraw consent: where we rely on consent, withdraw it at any time without affecting prior processing.

•      Unsubscribe: opt out of marketing emails by clicking "unsubscribe" in any email, or opt out of SMS by replying STOP.

•      Update your information: log in to your account or contact us to update your details.

•      No discrimination: we will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us using the information in Section 12. We may need to verify your identity before responding.

8.1 California Residents

Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, California residents have specific rights regarding their personal information. We do not "sell" or "share" personal information as those terms are defined under California law. To submit a request, contact us using the details in Section 12.

8.2 European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, UK, or Switzerland, Peak Impact Management acts as a data controller for information collected through the Site and as a data processor for customer content processed through the Services on behalf of our customers. Our legal bases for processing include consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating and improving the Services. You have the right to lodge a complaint with your local data protection authority.

9. International Data Transfers

We are headquartered in the United States and may process information in the U.S. and other countries where we or our service providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect personal information transferred internationally.

10. Children's Privacy

Our Site and Services are intended for business users and individuals aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above and, where appropriate, provide additional notice. Material changes affecting your rights will be communicated through the Site or by email.

12. How to Contact Us

If you have questions about this Privacy Policy or our privacy practices, or to exercise your rights, contact us at:

Peak Impact Management LLC

(operator of the ImpactEdge brand)

2 Wisconsin Cir, Ste 700

Chevy Chase, MD 20815

Email: [email protected]

Website: https://impactedge.ai

For SMS-specific assistance, reply HELP to any text message you receive from us, or email [email protected].