Privacy Policy

This Privacy Policy explains how GrantVox (“GrantVox,” “we,” “us”) collects, uses, and shares information when you use grantvox.com and the GrantVox application (the “Service”).

1. Information We Collect

• Account information: name, email address, and authentication data when you sign up (directly or via Google OAuth).
• Organization profile: mission, programs, population served, past outcomes, and other details you enter about your nonprofit.
• Grant content: RFPs, NOFOs, and other funder documents you paste or upload, plus the drafts GrantVox generates for you.
• Payment information: if you subscribe to Pro, billing details are collected and processed by our payment processor [NAME PAYMENT PROCESSOR, e.g. Stripe]; GrantVox does not store full card numbers.
• Usage data: pages visited, features used, device/browser type, IP address, and referring URLs (including campaign parameters when you arrive via a link such as a newsletter or ad).

2. How We Use Information

To provide and improve the Service, generate your grant drafts, remember your organization profile across grants, communicate with you about your account, and understand how people find and use GrantVox.

3. AI Processing

To generate drafts, the organization profile and funder RFP/NOFO text you provide are sent to our AI model provider(s) [NAME PROVIDER, e.g. Anthropic] for processing. [CONFIRM AND STATE: whether this data is used to train the AI provider’s models — most enterprise API usage is not used for training, but confirm this and say so explicitly, since nonprofits will ask.]

4. How We Share Information

We do not sell your data. We share information only with service providers who help us run GrantVox (hosting, AI processing, payment processing, email delivery), as required by law, or with your consent. [CONFIRM AND LIST full subprocessors: hosting provider, AI provider, payment processor, email provider.]

5. Data Retention

We retain your account and organization profile data for as long as your account is active. [CONFIRM AND STATE a concrete retention period after account deletion, e.g. “deleted within 30 days of account closure, except where retention is required by law.”]

6. Your Rights

You can access, correct, export, or delete your organization profile and account data at any time [CONFIRM: via account settings, or by emailing the contact address below]. Depending on where you’re located, you may have additional rights under laws like the GDPR or CCPA.

7. Data Security

[CONFIRM AND DESCRIBE actual measures — e.g. encryption in transit via TLS, encryption at rest, access controls. Do not state a certification such as SOC 2 unless it is actually true.]

8. Children’s Privacy

GrantVox is intended for use by adult representatives of organizations and is not directed at children under 13. We do not knowingly collect information from children.

9. International Users

[CONFIRM: if GrantVox serves nonprofits outside the US, state where data is stored/processed and the legal basis for any international transfer.]

10. Changes to This Policy

We’ll post any changes to this page and update the effective date above. Material changes will be communicated by email or in-app notice.

11. Contact Us

Questions about this policy? Contact us at [PRIVACY CONTACT EMAIL].