Privacy Policy

Last updated: May 19, 2026

1. Introduction

Grantalyst, Inc. ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our grants intelligence platform.

2. Information We Collect

2.1 Account Information

When you register, we collect your name, email address, organization name, and role.

2.2 Organization Profile Data

We collect information about your organization including sector, geography, mission tags, annual budget, and tax status to provide personalized grant matching and fit scoring.

2.3 Usage Data

We collect log data, device information, IP addresses, and interaction patterns to improve the Service and detect fraud.

2.4 AI Interactions

Conversations with our Expert Assistant are logged to improve response quality. We do not use your proprietary grant strategies or application drafts to train third-party AI models.

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Personalize grant recommendations and fit scores
  • Send transactional emails (deadline alerts, pipeline updates)
  • Provide customer support
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

  • Service providers: Cloud hosting (Supabase, Vercel), email delivery, analytics
  • AI providers: Selected LLM providers process prompts under strict data processing agreements
  • Legal authorities: When required by law or to protect our rights
  • Business transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures including encryption at rest and in transit, role-based access control, and regular security audits. However, no method is 100% secure.

6. Data Retention

We retain your data for as long as your account is active. Upon deletion, we remove personally identifiable information within 30 days, though anonymized analytics may be retained.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a portable format
  • Opt out of marketing communications
  • Object to certain processing activities

To exercise these rights, contact us at privacy@grantalyst.com.

8. Cookies and Tracking

We use essential cookies for authentication and functionality. We may use analytics cookies to understand usage patterns. See our Cookie Policy for details.

9. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal data from children.

10. International Transfers

Your data may be transferred to and processed in the United States. We use Standard Contractual Clauses for transfers from the EEA and UK.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice.

12. Contact Us

For privacy-related questions, contact our Data Protection Officer at privacy@grantalyst.com.