Privacy
Privacy notice
Last updated 26 September 2026. This notice covers this website and the Impactfold product as operated by Advina Labs.
Who we are
Advina Labs ("we") builds and operates Impactfold. Contact: vivek@theimpactfold.com.
This website
This site is static. It sets no cookies and runs no analytics or tracking scripts. It uses your device's own fonts and loads nothing from third parties. The hosting provider records standard server logs (IP address, user agent, requested page) for a short period to operate and protect the service.
If you submit the pilot enquiry form, the details you enter are sent by email to our mailbox through an email delivery service (Resend, when the site runs on Cloudflare Pages; Netlify Forms, when it runs on Netlify). The form handler does not add your IP address or location to that email and does not store the enquiry anywhere else; the delivery service keeps its own delivery records. We keep enquiries for as long as needed to reply and to run any pilot that follows, and delete them on request. If you email us, the same applies to the correspondence.
The product
Impactfold is deployed per provider. In a pilot it runs in a deployment operated for or by the service provider, and the provider controls the data in it. In that arrangement the provider is the controller of its customers' directory data and we act on the provider's instructions.
Data read from Microsoft 365 tenants
With the customer administrator's consent, Impactfold reads directory metadata through Microsoft Graph: the tenant's identifier, name and verified domains (to verify the connection); service principal and application identifiers; consent grants and application-role assignments; and the display name, owning tenant identifier and enabled state of each application holding a relevant grant. It does not read mailbox content, messages, attachments, files, sign-in logs or user directories.
Data about people
The product stores the sign-in identity of workspace operators (the identifier and email issued by the operator's Microsoft work account), the names and emails of task owners entered by the operator, and the actor of each audit entry. It stores no personal data about a customer's end users.
Where data is held
Inside the deployment, on a server in a region chosen at setup. Backups are encrypted before leaving the host. Data is retained for the life of the deployment; its deletion at the end of a pilot is agreed in the pilot agreement and done on the provider's instruction.
Revoking access
A customer administrator revokes consent at any time from Microsoft Entra admin center → Enterprise applications. Once revoked, no further reads of that tenant are possible. Disconnecting a customer inside Impactfold stops reads but does not revoke consent.
Your rights
Depending on where you are, you may have rights to access, correct or delete personal data we hold about you, and to object to or restrict its processing. Write to vivek@theimpactfold.com. For data held inside a provider's deployment, contact that provider.
Changes
We update this page when the product or our practices change, and mark the date above. Material changes are also listed in the changelog.