Privacy Policy

What GrantTrackr is

GrantTrackr is an invite-only platform that helps mission-driven organizations discover, score, and pursue funding opportunities. Access is limited to people invited by their organization's administrator.

Information we collect

• Account information.When you sign in with Google, we receive your name, email address, and profile picture to create and secure your session. Sign-in is restricted to emails your organization's administrator has invited.
• Google Drive access (optional). If you use the "export to Google Docs/Sheets" features, we store a Google refresh token so the app can create those files as you. We request only the drive.file scope, which lets the app access only files it creates itself — never your existing Drive contents. You can revoke this at any time at myaccount.google.com/permissions.
• Workspace content. Content your organization puts into the platform — focus areas, notes, scorecards, pursuit boards — is stored to provide the service and visible only within your organization.
• Contact form. If you contact us through the website, we keep your name, organization, email, and message to respond.

How we use Google user data

GrantTrackr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to sign you in and to create the documents and spreadsheets you explicitly request. We never sell it, never use it for advertising, and never let humans read it except as needed for security or support with your consent.

Processors and storage

Data is stored with Supabase (database and authentication) and served via Vercel. We use Anthropic's Claude API to power scoring and drafting features (opportunity text and your organization's focus-area profiles are processed to produce scores and briefs) and Resend to deliver notification emails. These providers process data on our behalf under their own security and privacy commitments.

Retention and deletion

Workspace data is retained while your organization uses the service and deleted on request when an engagement ends. You can disconnect Google Drive access at any time (the stored refresh token is deleted when revoked); notification emails carry a one-click unsubscribe.

Contact

Questions or deletion requests: use the contact form on the homepage.