Privacy Policy
Effective Date: December 28, 2024
At GrantKit, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our grant tracking service.
1. Information We Collect
We collect information you provide directly to us:
- Account Information: Email address, name, and password when you create an account
- Grant Data: Information about your grants including funder names, amounts, deadlines, notes, and status
- Organization Information: Team and organization details if you use our Team plan
- Payment Information: Billing details processed securely through Stripe (we do not store your full credit card number)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our grant tracking service
- Send deadline reminders and notifications you've opted into
- Process payments and manage your subscription
- Power AI features like grant extraction and natural language search
- Respond to your comments, questions, and customer service requests
- Send you technical notices, updates, and security alerts
3. Third-Party Services
We use trusted third-party services to operate GrantKit:
- Stripe: For secure payment processing. See Stripe's Privacy Policy
- Resend: For sending email reminders and notifications. See Resend's Privacy Policy
- Google Gemini: For AI-powered features like grant extraction and search. Grant data sent to AI is processed according to Google's Privacy Policy
- Cloudflare: For hosting and infrastructure. See Cloudflare's Privacy Policy
4. Cookies and Tracking
We use only essential cookies required for the service to function:
- Session Cookie: An HTTP-only, secure cookie that keeps you logged in. This cookie is deleted when you log out or after 30 days of inactivity.
We do not use advertising cookies, tracking pixels, or third-party analytics that track you across websites.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. When you delete your account:
- All your grant data, tags, and notes are permanently deleted
- Your account information is removed from our database
- Any active subscriptions are cancelled
- Email records may be retained for up to 30 days for compliance purposes
6. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Export: Download your grant data as a CSV file at any time from your dashboard
- Correction: Update your account information in Settings
- Deletion: Delete your account and all associated data from Settings
- Portability: Export your data in a machine-readable format
To exercise any of these rights, visit your Settings page or contact us at support@grantkit.org.
7. GDPR Compliance (EEA Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- The right to lodge a complaint with a supervisory authority
- The right to restrict processing of your personal data
- The right to object to processing based on legitimate interests
Our legal basis for processing your data is: (a) your consent, (b) performance of our contract with you, and (c) our legitimate business interests.
8. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt-out of the sale of personal information (we do not sell your data)
- The right to non-discrimination for exercising your privacy rights
We do not sell your personal information. To exercise your CCPA rights, contact us at support@grantkit.org.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (HTTPS) and at rest, secure password hashing, and regular security reviews. However, no method of transmission over the Internet is 100% secure.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
GrantKit
Email: support@grantkit.org