GrantSnag — Privacy Policy

Effective Date: July 8, 2026 Last Updated: July 8, 2026

1. Introduction

This Privacy Policy explains how GrantPath Solutions LLC, a Virginia limited liability company ("GrantSnag," "we," "us," or "our"), collects, uses, shares, and protects information when you use our platform at grantsnag.com (the "Service").

We built GrantSnag to be a good steward of your information: we collect only what we need, keep it secure, are deliberate about how it's used, and put you in control. By using the Service, you agree to this Policy. Capitalized terms not defined here have the meaning given in our Terms of Service.

This Service is intended for users in the United States, and your information is processed and stored in the United States (see Section 11).

2. Scope

This Policy applies to people who visit grantsnag.com and to Subscribers who create an account and use the Service. It does not apply to third-party websites we may link to, which have their own privacy practices.

3. Information We Collect

3.1 Information you provide

• Account information — such as your name and email address when you register.
• Tracked Data — the structured information you enter to track grants: the name of the foundation/funder, amount requested, amount awarded, status, and date submitted.
• Additional details you choose to enter — including your notes, the name of your client or organization, and your reasons for pursuing or declining an opportunity. We store these to provide the Service to you. We never use these for any aggregate, crowdsourced, or shared data (see Sections 4 and 5).
• Communications — information you send us when you contact support.

3.2 Payment information

When you subscribe, payment and card details are collected and processed by our payment processor, Stripe. We do not store your full card number; we receive only limited billing information (such as subscription status) needed to manage your account.

3.3 Information collected automatically

• Usage and device data — basic technical information (such as pages viewed and approximate, aggregated usage), collected via Vercel Analytics, a privacy-friendly, cookieless analytics tool. We do not use it to build advertising profiles.
• Log data — standard server logs (e.g., IP address, timestamps) used for security and reliability.

3.4 Cookies

We use a small number of essential cookies to keep you logged in and secure your session (provided through our authentication system, Supabase). We do not use advertising or third-party tracking cookies. Because our analytics are cookieless, you can use the Service without accepting non-essential cookies.

4. How We Use Your Information

We use your information to operate the Service and to be useful to you. Specifically:

• To provide the Service — run your account, store and display your pipeline, and process your subscription.
• To operate and improve GrantSnag (internal). We analyze Tracked Data to maintain and improve the Service — for example, to understand whether Subscribers' grant success rates improve over time. This internal use never exposes one Subscriber's activity to another.
• To provide anonymized Aggregate Insights. We combine Tracked Data across many Subscribers into de-identified, aggregate statistics shown inside the Service (for example, how many users are pursuing a given foundation). These insights:
  • are anonymized and never tied to your organization or identity;
  • are suppressed whenever they would reflect fewer than five (5) Subscribers;
  • are used only inside GrantSnag — never sold, shared, or published externally; and
  • can be opted out of at any time (see Section 9).
• To provide user-contributed Reference Data. Objective funder facts you enter — such as application deadlines and requirements — may be shared with all users as facts, and are never attributed to you.
• To communicate with you — send account, transactional, and support email through Resend (for example, password resets, receipts, and service notices).
• To keep the Service secure and comply with legal obligations.

What we never use for sharing. We will never use your notes, your client/organization name, or your reasons for any Aggregate Insights, Reference Data, or other sharing. That information is used only to provide the Service to you.

5. How We Share Information

We do not sell your personal information. We share information only as follows:

• Service providers (subprocessors) who help us run the Service, under contracts that limit their use of your data:
  • Supabase — database and authentication (stores your account and Tracked Data).
  • Stripe — payment processing.
  • Resend — transactional and account email.
  • Vercel — hosting and cookieless analytics.
• Anonymized/aggregate data — Aggregate Insights and Reference Data (Section 4) are de-identified and are not personal information.
• Legal and safety — if required by law, legal process, or to protect the rights, safety, and security of GrantSnag, our users, or the public.
• Business transfers — if GrantSnag is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this Policy.

6. Data Retention

• While your account is active, we retain your information to provide the Service.
• After you close your account, we delete or anonymize your identified data — including account information, your pipeline, notes, client/organization names, and reasons — within 90 days.
• We retain billing and tax records for as long as required by law (generally about seven (7) years).
• Anonymized Aggregate Insights and Reference Data may be retained indefinitely, because they no longer identify you.

7. Data Security

We protect your information with industry-standard safeguards, including:

• Encryption in transit and at rest;
• Access controls limiting who can access your data; and
• Data minimization — we collect only what the Service needs.

No system is perfectly secure, but we work to protect your information and will notify you of a material breach as required by law.

8. Children's Privacy

The Service is intended for users 18 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have, we will delete it.

9. Your Rights & Choices

You are in control of your data. You may:

• Access the information we hold about you;
• Export a copy of your Tracked Data;
• Correct inaccurate information;
• Delete your account and identified data (subject to the retention rules in Section 6); and
• Opt out of having your Tracked Data included in Aggregate Insights — at any time by contacting us. (A self-service opt-out setting is planned.)

To exercise any of these, email us at the address in Section 12. We honor these choices for all users, regardless of where you live.

10. Third-Party Links

The Service may link to external websites (such as funders' grant pages). We are not responsible for their privacy practices; review their policies before providing information.

11. United States Processing

GrantSnag is operated in the United States, and your information is processed and stored in the United States. If you access the Service from outside the U.S., you understand your information will be processed in the U.S.

12. Contact Us

Questions about this Policy, or requests to exercise your rights (including opt-out), can be sent to:

GrantSnag (GrantPath Solutions LLC) Email: admin@grantsnag.com Web: grantsnag.com

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or an in-app notice) and update the "Last Updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.