Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address and password (hashed). If you subscribe to a paid plan, payment information is processed and stored by Stripe — we do not store credit card numbers.

Organization Profile: If you choose to complete an organization profile, we collect information such as organization name, type, mission, focus areas, geographic scope, annual budget, staff size, and capabilities. This information is used to power AI grant matching.

Usage Data: We collect information about how you use the Platform, including pages visited, grants searched, features used, and AI queries made. This data is used to enforce usage limits, improve the Platform, and provide analytics.

Pipeline Data: Grants you add to your pipeline, requirements you track, notes you create, and other application management data are stored in our database.

2. How We Use Your Information

• To provide, maintain, and improve the Platform
• To process subscriptions and billing
• To power AI features (grant matching, search, requirements extraction, chat)
• To send transactional emails (account confirmations, billing receipts)
• To send grant alerts and notifications (if you opt in)
• To enforce usage limits and prevent abuse
• To respond to support requests

3. Third-Party Services

We use the following third-party services to operate the Platform:

• Supabase — Database hosting, authentication, and file storage. Data is stored in secure cloud infrastructure.
• Stripe — Payment processing for subscriptions. Stripe's privacy policy governs payment data handling.
• Anthropic — AI model provider powering grant matching, search, extraction, and chat features. Queries you make to AI features may be processed by Anthropic. We do not share your personal information with Anthropic; only the content of your AI queries and relevant grant data.
• Vercel — Application hosting and deployment. Vercel may collect standard server logs including IP addresses.
• Resend — Transactional email delivery for alerts and notifications.

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the third-party service providers listed above, as necessary to operate the Platform, and as required by law.

5. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, row-level security policies in our database, and secure API authentication. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Anonymized usage data may be retained indefinitely for analytics purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at privacy@grantsfast.ai.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt-out of the sale of personal information. We do not sell personal information.

9. Cookies and Tracking

We use essential cookies for authentication and session management. We use analytics tools to understand Platform usage patterns. You can control cookie preferences through your browser settings.

10. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the modified policy.

12. Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@grantsfast.ai.