Privacy Policy

1. Introduction

Grantitude ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our grant management platform at www.grantitude.com.

2. Information We Collect

Personal Information

When you register for an account, we collect:

• Name and email address
• Professional information (organization, role, research areas)
• Profile information you choose to provide

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, and time spent on the platform.

3. How We Use Your Information

We use your information to:

• Provide and maintain our grant management services
• Personalize your experience and grant recommendations
• Send you relevant notifications about grants and deadlines
• Improve our platform and develop new features
• Respond to your inquiries and provide support

4. AI-Powered Features

Our platform uses AI (including our assistant Cadebrah) to help you with grant writing and application management. Information you provide in conversations with Cadebrah is used to generate personalized assistance. We do not share your conversation data with third parties for their own purposes.

5. Data Storage and Security

Your data is stored securely on servers located in the European Union (EU). We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Request restriction of processing
• Data portability
• Withdraw consent at any time

7. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies for advertising purposes.

8. Third-Party Services

We use trusted third-party services that are GDPR-compliant and process data only on our behalf:

• Vercel - Platform hosting (EU region)
• Neon - Database hosting (EU region)
• Resend - Email delivery
• Stripe - Payment processing
• AWS S3 - Document storage (EU region)

9. Payment Processing

We use Stripe to process payments. When you subscribe to Grantitude Pro:

• Payment information is collected and processed directly by Stripe
• We do not store your full credit card details on our servers
• Stripe may use your data for fraud prevention and to comply with legal obligations
• You can manage your subscription and payment methods through our billing portal
• Invoices are automatically emailed to you for each payment

For more information, see Stripe's Privacy Policy.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time through the Settings page or by contacting us.

11. Your Data Rights

You can exercise your GDPR rights directly through your Grantitude account:

• Data Export: Download all your data in JSON format from Settings → Your Data
• Account Deletion: Permanently delete your account and all data from Settings → Your Data
• Data Correction: Update your profile information anytime through your Profile page
• Subscription Management: Manage billing, view invoices, and cancel anytime through Settings → Subscription

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: privacy@grantitude.com

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.