Privacy policy

What we collect and why

Your account. When you sign up, you give an email address and a password. We store the password only as a one-way hash, never as the password itself. Your email address signs you in and receives the weekly digest.

The free sample. If you ask for the free monthly sample, we keep your email address, the grants you chose (rural health, fire & EMS, or both), the page you signed up on, and when we emailed you. We email you once to confirm the address; until you open that link we send nothing else. If you do not confirm within 7 days, the link stops working and we delete your address within 30 days. When you confirm, we also keep when you confirmed and the exact sentence you agreed to, and we note each month a sample is sent to you. If you later start a free trial with the same address, we count it, without your name or address, to learn whether the sample helps. Every sample has an unsubscribe link: one click takes you off the list and deletes all of this from our records. You can also ask us at privacy@grantvetted.com, and we delete it within 30 days, like all your data.

Your organisation profile. To search for grants that fit you, you tell us about your organisation: its name, state, applicant type, service area, mission and the people it serves, and its UEI, EIN and SAM registration date. If you use the SBIR check, you also give employee counts, US ownership, affiliates, your SBA Company Registry ID and where your principal investigator works. We use these only to find grants for you and to fill in your applications.

Your project facts and drafts. On the Pro plan, you can type facts about a project and ask us to draft a section of an application. We save those facts, the draft, and a monthly count of your drafts, so you can come back to them.

Support messages. When you write to us, we keep your email address, your messages and our replies, so we can answer you and you can follow the conversation on Your account.

AI assistants you connect. You can let an AI assistant use your account for you. Before it gets any access, you see on our own page which assistant is asking and approve what it may do: see and update your organisation profile, see your matched grants and their deadlines, draft application sections on the Pro plan, see your plan and start a checkout or open the billing portal, and write to support. It sees what those permissions show, and what it does with it is also governed by the assistant maker's own terms and privacy policy. It can never see or change your password or email address, delete your account or your data, or see your card: a checkout it starts is Stripe's own page, which you confirm. For each assistant we keep its name and web address, the permissions you approved, when you connected it and when it was last used, and we log which tool it used and when — never what it wrote or what we answered (a message it sends to support is kept like any other support message). You can disconnect any assistant at any time on Your account, and its access ends at once. Deleting your data deletes these records too.

Payment. Payment is handled entirely by Stripe. We never see, receive or store your card number, expiration date or security code. We keep your plan, its status and Stripe's customer reference, so we know what you have paid for.

Nothing else. We do not collect your device information or build a profile of your browsing. Server logs may briefly record IP addresses for security, such as blocking abuse; they are not tied to your account and are deleted automatically.

Keeping and deleting it. Your data stays while you have an account, so you can return after cancelling. Ask us at privacy@grantvetted.com and we will delete your account, profile, project facts and drafts within 30 days.

Third parties

We use a small number of outside services, each for one job:

Stripe processes payments. Stripe's own privacy policy covers your payment details.

Resend delivers our emails, such as the weekly digest. It receives your email address and the email's content.

OpenRouter passes drafting requests to an AI model. When you press “Draft this section”, the facts you typed for that section, your organisation's name, applicant type, state and service area, and the funder's requirement are sent to OpenRouter, which forwards them to one AI model provider to write the draft. This happens only when you press the button, never otherwise, and only on the Pro plan. We ask OpenRouter to use only providers that, under their own published policies, do not store your prompts or train on them. The draft that comes back is checked against your facts before you see it. If you write to support, we may also send your message to OpenRouter the same way to draft a reply; a person reads and sends every reply.

Grants.gov, RHIhub (the Rural Health Information Hub) and funders’ own program pages (such as the National Science Foundation’s) are where we find public funding announcements; we then check each one against the funder’s own page. We read from these sites; we send them nothing about you.

We do not embed social media widgets, advertising networks, font-loading services or content delivery networks that track visitors. Fonts are self-hosted.