Privacy Policy

Effective date: January 1, 2025  ·  Last updated: April 1, 2026

---

GrantFunds ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit grantfunds.us (the "Platform"). Please read this policy carefully. By using the Platform you consent to the practices described herein.

1. Information We Collect

1.1 Information you provide directly

• Account data: When you register, we collect your name, email address, and password (stored as a secure hash).
• Profile data: Optional information you add to your profile such as organisation name and sector preferences.
• Communications: Messages you send to us via email or any contact form.
• Application data: Information you submit when using the proposal submission tool.

1.2 Information collected automatically

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, and time and date of visits.
• Usage data: Search queries, grant listings viewed, features used, and session duration.
• Device data: Device identifiers, hardware model, and mobile network information where applicable.
• Cookie data: See Section 5 for full details on our use of cookies.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Platform and its features;
• Create and manage your account and authenticate your identity;
• Personalise your grant search results and recommendations;
• Send transactional emails (account confirmations, password resets, security alerts);
• Send optional newsletters or grant digest emails if you have opted in;
• Analyse usage patterns to improve performance and user experience;
• Detect and prevent fraud, abuse, or security incidents;
• Comply with our legal obligations.

We do not sell your personal data to third parties.

3. Sharing of Information

We may share your information with:

• Service providers: Trusted vendors who assist with hosting, analytics, email delivery, and security, bound by confidentiality obligations.
• Legal authorities: When required by law, court order, or government authority, or to protect the rights and safety of GrantFunds or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide our services and comply with legal obligations. Account data is deleted within 90 days of account closure upon request. Anonymised aggregate analytics data may be retained indefinitely. Security logs are retained for up to 12 months.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by your browser when you visit a website.

5.1 Types of cookies we use

5.2 Managing cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, visit allaboutcookies.org.

5.3 Do Not Track

Some browsers transmit "Do Not Track" signals. We currently do not change our data collection practices in response to such signals but will update this policy if we do so in the future.

6. Security

We implement industry-standard security measures including HTTPS encryption, hashed password storage (bcrypt), CSRF protection, rate limiting, and security event logging. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data and encourage you to use a strong, unique password for your account.

7. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal obligations).
• Portability: Request your data in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Children's Privacy

The Platform is not directed to children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. International Transfers

GrantFunds operates from the United States. If you access the Platform from outside the US, your information may be transferred to and processed in the US, where data protection laws may differ from those in your country. By using the Platform, you consent to such transfer. Where required, we apply appropriate safeguards such as standard contractual clauses.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide a prominent notice on the Platform or notify you by email. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

GrantFunds — Privacy Team
Email: [email protected]