HomePrivacy Policy

Privacy Policy

Effective Date: July 10, 2026

Boston Impact Initiative Fund and Boston Impact Initiative Fund II LLC (collectively “BII,” “we,” “us,” or “our”) is a Community Development Financial Institution (CDFI) and impact investment fund headquartered in Roxbury, Massachusetts. We are committed to being transparent about how we collect, use, and protect your information. This Privacy Policy applies to all users of our website (bostonimpact.org), online applications, investment platforms, event registration systems, and any other digital services we operate (collectively, the “Services”).

1. Information We Collect

We collect information in the following categories, depending on how you interact with us:

A. Personal Contact Information

When you subscribe to our newsletter, submit a form, register for an event, or contact us, we may collect:

  • Name, email address, phone number, and mailing address
  • Professional affiliation and title
  • Communication preferences
  • Any other information that you choose to provide to us

B. Donation Information

When you make a charitable donation, payment is processed securely through Stripe and GiveLively. We collect:

  • Name and billing address
  • Donation amount and transaction records

Note: BII does not store full credit card numbers. Payment card data is handled directly by Stripe, which maintains its own security certifications. Please review Stripe’s Privacy Policy at stripe.com/privacy.

C. Product Sales

When you purchase our card decks through our website, we will collect your name, email address, phone number, and mailing address. Payment is processed securely through Stripe. For direct purchases from BII, we will invoice the buyer and process payments through bill.com or directly through ACH.

Note: BII does not store full credit card numbers. Payment card data is handled directly by Stripe, which maintains its own security certifications. Please review Stripe’s Privacy Policy at stripe.com/privacy. Bill.com also maintains its own security certifications. See bill.com’s Privacy Policy at https://www.bill.com/privacy. 

D. Investor Information

If you are an investor in BII’s funds, we collect financial and identity information necessary to administer your investment and comply with applicable law. For Fund II investors, this information is collected through Passthrough, our investor portal. Information collected may include:

  • Full legal name, email address, phone number, and mailing address
  • Accredited investor status and supporting documentation
  • Bank account or wire transfer details for capital calls and distributions
  • Tax identification number (SSN or EIN) and IRS Form W-9 or W-8
  • Investment commitment amount and subscription agreements

E. Business Applicant Information

If you are a business owner or entrepreneur applying for a loan or other support from BII, we collect business and financial information to evaluate your application. Information collected may include:

  • Business name, legal structure, and registration information
  • Employer Identification Number (EIN)
  • Ownership structure and demographic information about principals
  • Business financials, including revenue, expenses, and projections
  • Loan purpose and use of proceeds
  • Community impact data and mission-alignment information

Applicant information is used solely for underwriting and program purposes. If your application is not funded, your information will be retained for the period described in Section 6 and then securely deleted or anonymized. Final underwriting and credit decisions are made by BII staff and are not determined solely by automated systems.

F. Event Registration Information

When you register for a BII event through Luma (lu.ma) or similar platforms, those platforms collect your registration information on our behalf. This may include your name, email, organization, and attendance preferences. Ticket sales are processed through Stripe. Please also review Luma’s Privacy Policy at lu.ma/privacy. BII may receive a copy of registration data for follow-up communications.

G. Automatically Collected Information

When you visit our website, we automatically collect certain usage data through cookies and analytics tools. This may include:

  • IP address and approximate location
  • Browser type and version
  • Pages viewed and time spent
  • Device type (desktop, mobile, tablet)
  • Referring website

This data is used in aggregate to improve our website.

2. How We Use Your Information

We use the information we collect to:

  • Communicate with you about BII programs, events, updates and opportunities
  • Process and acknowledge payments, donations or billing activities
  • Administer investor relationships, including capital calls, distributions, annual statements, tax documents and regulatory filings
  • Review and process business loan applications and assess eligibility
  • Manage event registrations and follow up with attendees
  • Send newsletters and email updates (with your consent)
  • Improve our website performance, usability, and content
  • Comply with legal, regulatory, and grant reporting requirements, such as to respond to subpoenas or requests from government authorities.
  • Fulfill our obligations as a federally certified CDFI reporting to the U.S. Treasury
  • Conduct research and analysis to improve our programs, measure our community impact, and strengthen our Services. 

We do not sell, rent, or trade your personal information to any third party.

3. How We Share Your Information

We share your information only as described below and only to the extent necessary for each purpose.

A. With Third-Party Service Providers

BII works with the following trusted platforms to operate our services. Each is contractually obligated to protect your data and use it only for the function they perform on our behalf:

  • Passthrough – investor portal for Fund II subscription and document management
  • bill.com – payable and receivables management system
  • Constant Contact – email marketing and newsletter distribution
  • Stripe – donation payment processing
  • Luma – event registration
  • Google Analytics – website usage analytics 

B. With Government Agencies and Regulators

As a certified CDFI, BII is required to report data to the U.S. Department of the Treasury’s CDFI Fund. We may also be required to share information with other state and federal government agencies and funders for regulatory, grant, or legal compliance purposes. We may also disclose data if required by court order or applicable law. Where possible, such reporting uses aggregate or anonymized data that does not identify individuals.

C. With Tax Agencies

If you receive interest income reportable by BII on Form 1099-INT, you agree that BII and its designated tax reporting service provider will transmit to the Internal Revenue Service (“IRS”) and other applicable state and/or local tax authorities your name, address, tax identification number, interest income and any other personal or financial information required by the IRS on Form 1099-INT. Such information will be transferred, stored, and processed by our service provider in accordance with its privacy policy and our contract with that provider.

D. With Co-Investors and Fund Partners

In the course of managing our investment funds, BII may share portfolio and investor information with co-investors, legal counsel, accountants, or fund administrators as necessary for fund operations. Such parties are bound by confidentiality obligations. We do not share individual portfolio or investor information for marketing or sales purposes.

E. Aggregate and Anonymized Reporting for Research and Learning

We may use and share anonymized, aggregate data with trusted partners, funders, or researchers to analyze program effectiveness, advance the field of community-centered impact investing, and improve our Services. This data does not identify any individual. We do not use this data for commercial advertising purposes. 

4. Cookies and Tracking Technologies

Our website uses cookies to improve your experience and gather analytics. You can manage your cookie preferences through your browser settings. If you disable cookies, some features of the website may not function properly. Our website does not currently respond to Do Not Track signals from browsers. We do not use cookies to track you across unaffiliated websites. You may also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

5. Email Communications and Opt-Out

If you subscribe to our email list, you will receive periodic updates about BII’s work through Constant Contact. You may unsubscribe from our marketing communications using the unsubscribe link contained in each email. You may also contact us at marketing@bostonimpact.org to update your preferences. Transactional emails related to your donation, investment, or application may still be sent even if you opt out of marketing communications.

6. Data Retention and Security

A. Retention

We retain personal data for as long as necessary to fulfill the purpose for which it was collected, subject to the following:

  • General contact and newsletter data: retained while your relationship with BII is active, and for up to three years after last contact
  • Donation records: retained for seven years in accordance with IRS nonprofit recordkeeping requirements
  • Investor records: maintained for the duration of the active investment and for seven years following repayment, exit, or fund wind-down, in compliance with applicable securities and tax law
  • Business applicant records: retained for seven years if a loan is made; for unfunded applications, records are retained for three years and then securely deleted or anonymized
  • Legal and CDFI reporting records: retained for the periods required by applicable federal and state law

B. Security

We use industry-standard administrative, technical, and physical safeguards to protect your data. No system is 100% secure, but we take our responsibility as stewards of sensitive data seriously and regularly review our security practices. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Children’s Privacy

Our Services are not intended for children under 13. We comply with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly collect personal data from children under 13. If we learn we have done so, we will delete it promptly.

8. Your Rights and Choices

You may request access to, correction of, or deletion of the personal data we hold about you, subject to legal and regulatory exceptions. To make a request, email marketing@bostonimpact.org with the subject line “Privacy Request.” We will respond within 30 days.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Any changes will be posted here with a new effective date. We encourage you to review this page regularly. For material changes, we will provide notice by email or a prominent notice on our website.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please reach out:

Boston Impact Initiative
2225 Washington Street, 2nd Floor
Roxbury, MA 02119
Email: info@bostonimpact.org
Phone: (617) 702-9132
Website: bostonimpact.org

Donate Now