Privacy Policy

1. Introduction

omar & associates LLC operates GrantCashFlow AI (“GrantCashFlow,” “we,” “us,” or “our”) respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you use our grant writing and management platform (the “Service”) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect on the Service, in email and other electronic communications between you and GrantCashFlow, and when you use our public demo or support chat.

2. Information We Collect

Information You Provide to Us:

• Account information: name, email address, and password when you register.
• Organization information: nonprofit name, EIN/tax ID, mission statement, annual budget, and service area.
• Document uploads: 501(c)(3) determination letters, IRS Form 990, past grant proposals, board lists, and financial documents.
• Grant application content: answers to questionnaires, AI-generated proposal drafts, budget data, and submission records.
• Communication data: information you provide when contacting support or providing feedback.

Information Collected Automatically:

• Usage data: pages visited, features used, time spent, and actions taken within the Service.
• Device data: browser type, operating system, device type, and IP address.
• Cookie data: we use essential cookies for authentication and analytics to understand website use. The current site uses Vercel Web Analytics. You can block cookies in your browser, but blocking essential cookies can prevent sign-in.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service, including AI-powered grant writing and matching.
• Generate personalized grant proposals using your organization's data and documents.
• Send administrative information, such as account updates, security alerts, and support messages.
• Send deadline reminders, grant match notifications, and other Service-related communications.
• Analyze usage patterns to improve our product and user experience.
• Comply with legal obligations and enforce our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We may share your information:

• With service providers: We use third-party services for hosting (Vercel), database storage (Supabase), email delivery (Resend), payment processing through the provider identified at checkout, and AI processing (DeepSeek for proposal generation, scoring, research, and support chat). These providers only receive the data necessary to perform their functions.
• With AI providers: When you use our AI proposal generation, your organization information and questionnaire answers are sent to our AI provider to generate drafts. Text from supported documents and prompts may also be sent. Avoid including sensitive personal data that is not needed for your draft. Provider processing and retention are governed by the applicable service arrangements.
• For legal reasons: We may disclose information if required by law, regulation, legal process, or governmental request.
• With your consent: We may share information for any other purpose with your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your information, including password hashing and access checks. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your account information, organization data, documents, and proposals for as long as your account is active. You may request deletion of your data at any time by contacting us. We will delete or anonymize your data within 30 days of account closure, except where we are required to retain it by law.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Object to or restrict certain processing activities.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at contact@grantcashflow.com.

8. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after such modifications constitutes acceptance of the updated policy.

10. Payment information and international processing

Payment details are entered into the payment provider's checkout. We receive account, order, subscription, and transaction references to deliver access and manage billing; our application does not store full card numbers or card security codes. Stripe powers our payment integration and processes payment data under its own privacy notice.

Our business is registered in the United States and operates from Pakistan. Our service providers may process data in other countries. Where required, transfers must use applicable legal safeguards. Depending on your location, we process data to perform our service agreement, comply with legal obligations, support legitimate interests such as security, or act on consent where required. You may lodge a complaint with your local data protection authority.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: contact@grantcashflow.com