Privacy Policy

IMPACT AI PRIVACY POLICY

Privacy Notice - Updated Version

The International Bank for Reconstruction and Development (IBRD), the International Development Association (IDA), (together the "World Bank" or "Bank", "we" or "us") respect your concerns about privacy. This Privacy Notice applies to the personal data that we collect and handle for the purposes of maintaining and providing Bank-related information to visitors of this website and users of ImpactAI. For the purposes of this Privacy Notice, "personal data" means any information relating to an identified or identifiable individual.

Information We Collect

Information You Provide to Us

Any information that you voluntarily provide to us, including your name and email address, will be used for the sole purpose for which the information was provided to us. In addition, communication exchanges on this website are public (not private) communications. Therefore, any message that you post on this website will be considered and treated as available for public use and distribution.

ImpactAI Service Information

When you use ImpactAI, we collect:

Account Information: When you create an account, we collect your name, email address, account credentials, date of account creation, and confirmation that you are over 18 years of age.

Chat Content: We collect the questions, prompts, and messages you submit to ImpactAI, as well as the chatbot's responses. This information is used to provide the service and, with your consent, to improve our chatbot through aggregated analytics.

Usage Information: Through Adobe Analytics, with your explicit consent captured by a pop-up banner at entry to the web app, we collect information about how you interact with the chatbot, including but not limited to session duration, features accessed, and interaction patterns. This helps us understand service performance and user needs.

Information We Collect by Automated Means

Like many websites, this website uses "cookies" and "web beacons". This site uses cookies to optimize functionality and give you the best possible experience. We obtain certain information by automated means when you visit this site, such as the IP address of the device you use to connect to the Internet and the pages accessed. By collecting this information, we learn how to best tailor the website to our visitors. We collect this information through various means, including "cookies" and "web beacons". To learn more about cookies, click here.

Information We Collect from Third Parties

This website does not collect any information on you from other sources.

Information We Share

We do not sell or otherwise disclose personal data collected as set out above, except as described in this Privacy Notice. The information may also be shared with third-party service providers who perform services for the Bank. These service providers are not authorized by the Bank to use or disclose the personal data, except as necessary to perform specific services for the Bank. The Bank requires its partners and service providers to appropriately safeguard the privacy and security of personal data they process on the Bank's behalf.

Cloud Service Providers: Your ImpactAI queries are processed through a dedicated, secured organization-level Google Cloud Platform instance centrally managed by the World Bank Group's IT department. World Bank Group staff are the sole users with access to the cloud infrastructure, which has undergone a comprehensive set of security evaluations. All processing occurs on World Bank servers, and Google Cloud has no independent access to or use of your personal data.

Analytics Providers: We use Adobe Analytics to analyze usage patterns and improve our chatbot service. Adobe processes usage data on our behalf in accordance with our service agreement and is not authorized to use this data for independent purposes.

Specific Purpose of Processing

The purpose of data collection on this website is to disseminate information to further the Bank's mandate of reducing poverty worldwide and providing research information. We may also collect and process personal data of visitors and subscribers to this website who request email subscription services from us.

We collect and process personal data for our chatbot service for the following purposes:

- To provide you with the chatbot service and respond to your queries - To maintain and secure your account - To prevent fraud, abuse, and violations of our usage policies - To improve and develop the chatbot service through aggregated analytics (using anonymized data, subject to your controls) - To communicate with you about service updates or account matters - To comply with legal obligations and the Bank's mandate of reducing poverty worldwide and providing research information

Types of Processing

Any personal data collected on this website is done through manual and automated processes to enroll visitors to the subscription service that they requested. The data collected on this site also undergoes automated processing for the sole purpose of website functionality and user experience. Manual processing may be applied if problems are discovered on the site.

ImpactAI Data Processing:

Personal data collected through our chatbot service undergoes the following processing:

- Manual processing: Account creation and management, responding to data privacy requests, and investigating potential policy violations or security incidents - Automated processing: Providing chatbot responses, usage analytics through Adobe Analytics, and (with your consent) anonymization of data for aggregated analytics

All processing occurs on World Bank servers through our Google Cloud Platform interface, with Google Cloud acting solely as a data processor under our instruction.

How We Protect the Information

The Bank maintains appropriate technical and organizational safeguards against unauthorized processing of personal data and against accidental loss, destruction or damage.

How Long We Keep the Information

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this notice:

- Chat content: Chat logs containing identifiable information are retained for 30 days, after which they are either deleted (if you have opted out of analytics) or anonymized by removing all personally identifiable information.

- Account information: Active account information is retained whilst your account remains open. Following account closure or a deletion request, certain account identifiers are retained for 30 days for safety and security purposes (to prevent abuse and fraudulent account creation), after which they are anonymized.

- Anonymized data: Once anonymized, data may be retained indefinitely for aggregated analytics, research, and service improvement purposes.

- Safety and abuse prevention: If your account or specific content is suspended or banned due to violations of our usage policies, we may retain relevant data for longer periods to protect our services and users from fraud, abuse, or policy violations.

All retention periods comply with the Bank's applicable records retention and disposition schedules.

Your Data Controls and Rights

Our chatbot service provides you with controls over your personal data:

Chat History Controls: - You may delete your entire chat history at any time through your account settings - You may export your chat history through your account settings

Data Usage Controls: - You may opt out of allowing your anonymized chat data to be used for service improvement and analytics. When you opt out, your chat logs are permanently deleted after 30 days rather than being anonymized and retained - You can modify this preference at any time in your account settings

Account Controls: - You may update your account information at any time - You may delete your account entirely through your account settings or by contacting us at privacyquestions@worldbank.org

Your Privacy Rights:

In accordance with the World Bank Group Policy on Personal Data Privacy, you have the right to:

- Access: Request information about the personal data we hold about you - Correction: Request correction of inaccurate personal data - Deletion: Request deletion of your personal data (processed within 30 days, with certain exceptions for safety and legal compliance) - Restrict Processing: Request restriction of how we process your personal data - Data Portability: Request a copy of your personal data in a structured format

To exercise these rights, please visit the Data Privacy Request Mechanism page or contact the Data Privacy Office at privacyquestions@worldbank.org.

Important notes on deletion requests: - When you request deletion, we will remove your personal data from our active systems within 30 days - For safety and security reasons, certain account identifiers may be retained in anonymized form for an additional 30 days to prevent abuse - If your account was suspended for policy violations, we may retain relevant data for longer to protect our services and users

Age Requirements

Our chatbot service is only available to individuals aged 18 and over. By creating an account, you confirm that you are at least 18 years old. We do not knowingly collect personal data from individuals under 18. If we become aware that a user is under 18, we will promptly delete their account and associated data.

World Bank Group Policy Document

Click here to view the full document.