Privacy Policy

Last updated: May 23, 2026

This policy explains what information GrantVault collects, how we use it, and the choices you have.

1. Information we collect

Account information: your name, email address, and password (stored as a secure hash). Business profile: the details you provide about your business (industry, location, size, ownership demographics, funding goals) so we can match you with grants. Usage data: search runs, drafts generated, and pipeline activity, used to enforce plan limits and improve the Service. Billing: handled entirely by Stripe; we store only a customer reference, never card numbers.

2. How we use your information

Your business profile is used to run grant searches and generate application drafts on your behalf. We send you transactional email (grant reports, account and billing notices). We do not sell your personal information.

3. Service providers

We rely on a small set of processors to operate: Supabase (database & authentication), Vercel and Railway (hosting), Stripe (payments), Resend (email delivery), and AI providers (Anthropic and Perplexity) that process your business profile to produce search results and drafts. Each receives only what it needs to perform its function.

4. Data retention and deletion

Your data is retained while your account is active. You can delete your account from the Account page, which removes your profile, reports, drafts, and pipeline data. Billing records are retained as required for tax and accounting purposes.

5. Security

Data is encrypted in transit and at rest. Access to production systems is limited and authenticated. No system is perfectly secure. Notify us immediately at the address below if you suspect unauthorized access to your account.

6. Changes

We may update this policy from time to time. Material changes will be communicated by email or in-app notice.

7. Contact

Privacy questions? Email hello@grantvault.co.