When you use Grantable's products, you trust us to handle your personal data with care. We take that trust seriously. This Privacy Policy outlines how we collect, use, and protect your personal data.
We, Grantable, Inc., provide this Privacy Policy to explain how we collect, use, and disclose your personal data when you receive our products directly from us. If your organization provides access to our products, such as through a Grantable Enterprise, we process your personal data on behalf of that organization according to our contract with them, and this Privacy Policy does not apply.
When we refer to "products" in this Privacy Policy, we are referring to everything we provide directly to you, including our apps, websites, software, newsletters, and emails.
We may update this Privacy Policy from time to time and will notify you of any significant changes in accordance with applicable laws. All changes are communicated to our users when made, and the last update date is displayed at the top of this policy.
Summary
Here's a quick overview of important points in our Privacy Policy:
- We do not and will not sell your data.
- We do not use your data to train AI models.
- All data uploaded to Grantable is yours and yours alone. We cannot access it without your express permission.
- Documents you upload are stored securely and never shared with users outside your organization.
- We offer free and paid products. We generate revenue from subscriptions to our paid products.
- When you sign up for and use our products, we collect your account and, if applicable, payment information.
- To provide AI-driven assistance, we process your text and may collect information about the device you use.
- We have security mechanisms in place to protect your data, including SOC2 Type II compliance with continuous third-party auditing.
- When you join a Grantable Enterprise account, your use is subject to your organization's policies.
- We work with a small number of trusted third parties to help provide our products.
- You can exercise region-specific rights under privacy laws (e.g., GDPR and CCPA).
How Does Grantable Make Money?
We offer both free and paid products, and we generate revenue through subscriptions to our paid plans. We don't sell your data, and we don't use your data to train AI models.
What Types of Personal Data Does Grantable Collect?
We collect the following types of personal data:
- Account information: When you sign up, we collect your email address, password, and name. If you sign up using a third-party service, such as Google, we will collect the information that you authorize from them.
- Payment information: For paid accounts, we collect transaction history and limited payment card information. Payments are processed by Stripe, and we do not store your complete payment details.
- Log data and device information: This includes IP addresses, browser types, time zone settings, and operating system details.
- Sales and support data: Any personal information you share when interacting with our support or sales teams.
- User content: The text, documents, and data you upload or enter into our products. This includes any content you create or upload, such as grant applications, strategic plans, program descriptions, and other organizational documents.
- Usage data: Information about how you interact with our products, such as activity reports and insights into your usage.
- Cookies and other identifiers: We collect data using cookies to recognize your device and improve your experience.
- Third-party information: Data we receive from affiliates, partners, or other third parties to enhance our services.
- Other information: Any additional data you choose to provide, such as through surveys or feedback forms.
For What Purposes Does Grantable Use Personal Data?
The ways we use your personal data depend on how you use our products. Specifically, we use it to:
- Provide and personalize our products: We use your data to operate our products, offer writing suggestions, and provide customized experiences.
- Support and communication: We use your data to resolve issues and respond to support requests.
- Troubleshooting and debugging: Personal data helps us resolve technical problems.
- Improve our products: Usage data helps us make our products smarter and more efficient. You control whether your data is used for product improvement.
- Process payments: If you are a paying customer, we need payment information to complete transactions.
- Marketing and promotion: We may send you promotional materials, depending on your location and consent settings.
- Legal compliance and protection: We use your data to comply with legal obligations and protect against harm.
- Business transactions: In the case of mergers or acquisitions, we may use your data to evaluate or effectuate business transactions.
Important: Grantable does not use your data to train our AI models. While we leverage AI technologies from providers such as Anthropic and OpenAI via their APIs to deliver our services, we rely on these providers' policies that state they do not train their models on our customers' data. Your content remains your own and is not used to improve AI systems.
How Grantable Uses AI
We use AI to help you create better grant applications and improve your workflow. Here's how we protect your privacy when using AI:
- Minimum necessary information: When you use our AI features, we send only the minimum necessary contextual information to AI language models (such as Anthropic's Claude and OpenAI's GPT models) to fulfill your request.
- No AI training: Our API licenses with Anthropic (https://privacy.anthropic.com/en/collections/10663361-commercial-customers) and OpenAI (https://openai.com/enterprise-privacy/) explicitly forbid them from using data we transmit for model training or product improvement.
- AI Rules: You can set up "AI Rules" (like a custom style guide for your organization) that the AI will consistently follow. These rules are processed securely and with privacy in mind.
- Your data remains yours: All content processed through our AI features remains your property. It is not used for training AI models and is handled according to strict privacy standards.
How Does Grantable Secure and Store Personal Data?
We use a combination of technical, physical, and logical safeguards to protect your data, such as encryption, secure network configurations, and access controls.
SOC2 Type II Compliance: We are in the process of obtaining SOC2 Type II compliance, a widely recognized auditing standard that evaluates the security, availability, processing integrity, confidentiality, and privacy of our systems. We are audited by a third party on a continuous basis to ensure we maintain these rigorous standards. This certification validates that we follow industry best practices for data security and privacy.
Document Security: Documents you upload to Grantable are stored securely and never shared with users outside your organization. We employ robust encryption and access controls to ensure your sensitive information remains protected.
We retain personal data as long as necessary to provide our services, comply with legal obligations, and resolve disputes. User content is typically retained for one year unless otherwise requested by you. You can manage your data retention preferences through your account.
To Whom Does Grantable Disclose Personal Data?
We may disclose personal data to:
- Trusted service providers: We work with partners like Supabase for database services and Stripe for payment processing to provide our services. These providers are bound by our privacy and security requirements, and these connections are being carefully audited as part of our SOC2 compliance process to ensure they meet rigorous security standards.
- Government agencies and regulators: We may disclose data to comply with legal obligations or protect our users and ourselves from harm.
- Organization administrators: If you use Grantable through a team account, administrators may access and control your account.
- Business transaction partners: In the case of a merger or acquisition, we may share your data with relevant parties.
- Other users: If you belong to a team account, other users in your organization may see you as a potential collaborator.
- With your consent: We may disclose data to third parties with your explicit consent.
Collaboration and Privacy
Grantable offers collaborative features that allow multiple users to work on the same documents. Here's how we maintain privacy during collaboration:
- Access controls: Document owners can control who has access to their documents within their organization.
- Cross-organization privacy: Documents are never shared with users outside your organization unless you explicitly grant access.
- Activity logging: We maintain logs of who accesses and modifies documents to ensure accountability.
Trust Portal
We maintain a Trust Portal at https://trust.delve.co/grantable where you can see how we maintain security standards and undergo rigorous auditing. This portal provides real-time information about our system status, security certifications, and compliance efforts.
Exercising Your Data Rights
You may have rights under privacy laws to access, correct, update, stop certain uses of, delete, or move your personal data. You can exercise these rights by:
- Accessing your data: You can view your data by using your account settings.
- Updating your data: You can update account information through your settings.
- Opting out of marketing emails: Use the "unsubscribe" link in emails or adjust settings in your account.
- Deleting your data: You can delete your account and remove your data from Grantable.
- Exporting your data: You can download documents and billing receipts from your account.
If you have additional requests or questions, please contact us using the information below. We may need further information to verify your request, and we will respond in accordance with applicable laws.
Notice to End Users on a Grantable Enterprise Account
If you use a Grantable product provided by an organization, your use is subject to that organization's policies. Grantable is not responsible for your organization's privacy practices. Administrators of team accounts may:
- Access information about your account.
- Control your account, including restricting or terminating your access.
Please contact your organization for more details.
Contact Information
If you have any questions or requests related to this Privacy Policy, you can reach us by:
- Chatting with us through the app messenger.
- Emailing us at hello@grantable.co.
- Mailing us at: Grantable, Inc. 701 East Franklin Street, Suite 105, #1363 Richmond, VA 23219
