Privacy Policy

This policy explains how Granteon (“Granteon,” “we,” “us”) handles information when you use our website and web application (the “Service”). Granteon helps organizations find grant opportunities and draft proposals.

Questions, requests, or complaints: grantworkshop@googlegroups.com.

We collect the following categories of information.

• Account information. When you create an account we collect your name, email address, your role, and your organization's name. If you sign in with Google, we receive your name, email address, and profile image from Google. We never see your Google password.
• Organization and program content. The description of your organization, and for each program you set up: its name, type, purpose, tags, and how adventurous you want its grant matches to be.
• Documents you upload. When you add a past grant to your library, we record the file's name, size, and upload time. We store the file's contents too, and use them for the same reason we hold your other content: to run the Service and inform the drafts we generate for you.
• Drafts. The proposals you write in Granteon, including every section's text, the grant it targets, and your progress through it.
• Technical and usage data. Our hosting and infrastructure providers automatically log standard request data — IP address, browser and device type, pages requested, timestamps, and error diagnostics — to operate and secure the Service. We do not run any analytics or session-recording tools.

We do not intentionally collect special categories of personal data (health, religion, biometrics, and the like). Please avoid putting such information into program descriptions or drafts unless it is genuinely necessary to the proposal.

We use the information above to:

• create and maintain your account and workspace;
• match your programs to grant opportunities and rank them by fit;
• generate, suggest, and revise proposal drafts at your request;
• save your work so it is there the next time you sign in;
• respond to support requests and communicate about the Service;
• monitor for abuse, debug problems, and keep the Service secure; and
• comply with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your organization's content, uploads, or drafts to train our own models.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

• Performance of a contract — to provide the Service you signed up for.
• Legitimate interests — to secure the Service, prevent abuse, and improve how it works, balanced against your rights.
• Consent — where required, such as optional communications. You may withdraw consent at any time.
• Legal obligation — where we must retain or disclose information by law.

We share information only in these circumstances:

• Service providers. The processors we use to operate the Service, acting on our instructions.
• Within your organization. If colleagues share your workspace, they can see the programs and drafts in it.
• Legal requirements. When we reasonably believe disclosure is required by law, or is necessary to protect the rights, safety, or property of Granteon, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, with notice to you. The successor remains bound by this policy.

We keep your account information and content for as long as your account is active. You can delete individual programs, documents, and drafts from within the app at any time; deleted items are removed from our live database immediately and drop out of backups on our standard retention cycle.

To delete your entire account and everything in it, email grantworkshop@googlegroups.com and we will action the request. We may retain limited records where we have a legal obligation to do so.

Data is transmitted over HTTPS and stored with our infrastructure provider. Database security rules scope every record to the account that owns it, so one user's programs and drafts are not readable by another. API credentials for our drafting provider are held server-side only and are never exposed to your browser.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and any required regulator as the law requires. To report a vulnerability, write to grantworkshop@googlegroups.com.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any of these, email grantworkshop@googlegroups.com. We will respond within 45 days, and we may need to verify your identity first.

California residents. Under the CCPA/CPRA you have rights to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined, and we do not use or disclose sensitive personal information beyond what is needed to provide the Service. We will not discriminate against you for exercising your rights. You may use an authorized agent to submit a request.

EEA and UK residents. You have the right to lodge a complaint with your local supervisory authority, though we'd appreciate the chance to resolve the issue first.

Granteon is a tool for organizations and is not directed to children. We do not knowingly collect personal information from anyone under 13 (or under 16 in the EEA and UK). If you believe a child has provided us information, contact us and we will delete it.

We operate in the United States, and our providers process and store information there and in other countries. If you access the Service from outside the United States, you understand your information will be transferred to and processed there, which may have different data protection laws than your country. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

Granteon can run in a demo mode with no account and no database. In demo mode, everything you see and everything you type lives only in your browser's memory for the length of the session, is never sent to us, and disappears when you reload the page. The only exception is section drafting: if you use the drafting tool, that request still goes to the configured drafting provider as described above.

We may update this policy as the Service evolves. When we do, we will revise the date at the top of this page, and for material changes we will give you notice in the app or by email before they take effect. Continuing to use Granteon after a change takes effect means you accept the updated policy.

For any privacy question or request, write to grantworkshop@googlegroups.com.