Effective 2026-08-04
Privacy
Built Ventures LLC is the data controller for this site. See our Legal Notice for operator details.
Controller
Built Ventures LLC
We have not appointed a Data Protection Officer. At our current scale this is not expected to be mandatory.
EU representative (Art. 27)
What we process
- Site operation / security logs: IP address, user-agent, timestamps via our host.
- Contact form: name, email, message, and optional subject.
- Waitlist and newsletter: email address; delivered via Resend; double opt-in confirmation before marketing sends.
- Analytics: PostHog EU identifiers, events, and optional session replay after you consent to Analytics cookies.
- Curated public job and company content: professional personal data (for example names and titles from public employer materials).
Purposes and lawful bases
- Contact: respond to your enquiry. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR) in handling correspondence.
- Newsletter / waitlist: send updates you asked for. Lawful basis: consent (Art. 6(1)(a)); you can withdraw anytime. We use double opt-in before the first marketing send.
- Analytics / cookies: measure site usage. Lawful basis: consent, aligned with ePrivacy rules. We do not rely on legitimate interests to bypass cookie consent.
- Security / logs: protect the network and service. Lawful basis: legitimate interests (Recital 49).
- Publishing professional data on board and dossiers: inform job seekers. Lawful basis: legitimate interests, with Art. 14 source transparency (see below).
Mandatory vs optional fields
- Contact: name, email, and message are required (or as implemented on the form). Without them we cannot reply.
- Newsletter / waitlist: email is required. Without it we cannot subscribe you.
Recipients / processors
- Vercel Inc. (host)
- Resend (email)
- PostHog EU (analytics)
- Supabase (application data store as used)
International transfers
Some processors are in the United States (including Vercel Inc. and Resend). Transfers rely on appropriate safeguards such as EU Standard Contractual Clauses (2021/914) and vendor data processing agreements.
To request a copy of relevant safeguards, email privacy@impactjoin.com.
Retention
- Contact: up to 24 months after our last reply.
- Newsletter: until you unsubscribe, plus a short suppression list to honour opt-outs.
- Analytics: 14 days.
- Logs: typically 30 to 90 days unless needed for a security incident.
- Consent records: while processing relies on consent, plus an audit window (for example up to 3 to 5 years in practice, or aligned to CNIL guidance on re-prompting stored choices).
Cookies
We use strictly necessary cookies and, with your consent, analytics cookies including PostHog session replay under one Analytics toggle.
See our Cookies page for detail. To change your choices, use .
No automated decision-making
We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects (Art. 22 GDPR) at launch.
Your rights
Depending on applicable law, you may have the right to:
- access your personal data;
- rectification;
- erasure;
- restriction of processing;
- object to processing (especially where we rely on legitimate interests);
- data portability where applicable;
- withdraw consent at any time where processing is based on consent.
Exercise your rights by emailing privacy@impactjoin.com. We may need to verify your identity. We aim to respond within about one month (Art. 12(3) GDPR).
Complaints
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). For our EU representative's Member State, contact Italy: Garante per la protezione dei dati personali. You may also contact your local supervisory authority where you live or work.
As a non-EU controller we do not have a one-stop-shop lead supervisory authority.
Children
Our service is for people aged 18 and over. It is not directed at children.
Professional data we did not collect from you (Art. 14)
Some job and company listings include professional personal data sourced from employer career pages, public posts, licensed lists, or manual research. We publish this to inform job seekers.
To object or request removal, email privacy@impactjoin.com or use our Contact form.
Changes
Effective date: 2026-08-04. We may update this notice; material changes will be reflected by a new effective date.