Privacy Policy

Last updated: July 23, 2026

1. Introduction

GrantCashFlow AI (“GrantCashFlow,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you use our grant writing and management platform (the “Service”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect on the Service, in email and other electronic communications between you and GrantCashFlow, and when you interact with our advertising on third-party websites.

2. Information We Collect

Information You Provide to Us:

  • Account information: name, email address, and password when you register.
  • Organization information: nonprofit name, EIN/tax ID, mission statement, annual budget, and service area.
  • Document uploads: 501(c)(3) determination letters, IRS Form 990, past grant proposals, board lists, and financial documents.
  • Grant application content: answers to questionnaires, AI-generated proposal drafts, budget data, and submission records.
  • Communication data: information you provide when contacting support or providing feedback.

Information Collected Automatically:

  • Usage data: pages visited, features used, time spent, and actions taken within the Service.
  • Device data: browser type, operating system, device type, and IP address.
  • Cookie data: we use essential cookies for authentication and optional analytics cookies to improve our Service.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service, including AI-powered grant writing and matching.
  • Generate personalized grant proposals using your organization's data and documents.
  • Send administrative information, such as account updates, security alerts, and support messages.
  • Send deadline reminders, grant match notifications, and other Service-related communications.
  • Analyze usage patterns to improve our AI models and user experience.
  • Comply with legal obligations and enforce our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We may share your information:

  • With service providers: We use third-party services for hosting (Vercel), database storage (Supabase), email delivery (Resend), payment processing (Stripe), and AI processing. These providers only receive the data necessary to perform their functions.
  • With AI providers: When you use our AI proposal generation, your organization information and questionnaire answers are sent to our AI provider to generate drafts. Our AI provider does not use this data to train their models.
  • For legal reasons: We may disclose information if required by law, regulation, legal process, or governmental request.
  • With your consent: We may share information for any other purpose with your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL) and at rest, secure authentication protocols, and regular security reviews. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your account information, organization data, documents, and proposals for as long as your account is active. You may request deletion of your data at any time by contacting us. We will delete or anonymize your data within 30 days of account closure, except where we are required to retain it by law.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion of your data.
  • Object to or restrict certain processing activities.
  • Export your data in a portable format.
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at privacy@grantcashflow.ai.

8. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after such modifications constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@grantcashflow.ai