Privacy Policy

This Privacy Policy explains what information GrantDraft ("we", "us") collects, how we use it, and the choices you have. We aim to collect only what we need to run the Service.

1. Information We Collect

• Account info: name, email address, and encrypted password when you create an account.
• Organization info: nonprofit name, mission, programs, and any other context you choose to add.
• Grant content: RFPs you paste in, draft sections you generate, and edits you make.
• Billing info: processed and stored by Stripe. We do not see or store full card numbers.
• Usage data: log data such as IP address, browser type, and pages visited, used to operate and improve the Service.

2. How We Use Information

• To provide, maintain, and improve the Service.
• To generate AI drafts at your request.
• To process payments and manage subscriptions.
• To send transactional emails (receipts, security notices, product updates).
• To prevent fraud and enforce our Terms.

3. AI Processing

When you generate a draft, the relevant inputs (your organization profile, the funder RFP text, and the section you're working on) are sent to our AI model provider to produce output. We do not use your grant content to train third-party AI models.

4. Service Providers (Subprocessors)

We use the following providers to run the Service:

• Supabase — authentication and database hosting.
• Stripe — payment processing and subscription billing.
• Google (Gemini) — AI model used to generate draft text.
• Lovable / Cloudflare — application hosting and edge delivery.

Each provider only receives the data necessary for its function and is bound by its own privacy and security commitments.

5. Data Retention

We retain your account and grant content for as long as your account is active. You can delete individual grants at any time. If you close your account, we delete or anonymize your data within 30 days, except where retention is required by law or for fraud prevention.

6. Your Rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. To exercise these rights, email support@getgrantdraft.com.

7. Cookies

We use a small number of strictly necessary cookies for authentication and session management. We do not use third-party advertising or cross-site tracking cookies.

8. Security

We use industry-standard safeguards, including encryption in transit (HTTPS) and at rest, hashed passwords, and row-level access controls on our database. No system is 100% secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

10. International Users

The Service is operated from the United States. If you use it from outside the U.S., you consent to the transfer and processing of your information in the U.S.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or in-app notice.

12. Contact

Privacy questions or requests? Email support@getgrantdraft.com.
GrantDraft, 8063 Madison Ave #1322, Indianapolis, IN 46227, United States.