Privacy Policy
Effective Date: Jan 1, 2025 | Last Updated: Apr 26, 2025
Table of Contents
1. Introduction
Your privacy is important to us. This Privacy Policy explains how GrantEater.ai LLC (“GrantEater.ai,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you use our website and AI grant writing services (collectively, the “Service”). It also describes your rights and choices regarding your information. GrantEater.ai LLC is based in Portland, Oregon, USA, and we comply with applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
By using the Service or by otherwise providing us with personal information, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Policy, please do not use our Service.
2. Information We Collect
We collect several types of information from and about users of our Service, including personal information and usage data. The categories of information we collect are as follows:
- Information You Provide to Us: When you sign up and use GrantEater.ai, you may provide certain personal information, including:
- Account Registration Data: Your name, email address, and a password are collected when you create an account. We may also ask for your organization or nonprofit context during onboarding (for example, the name of the nonprofit you work with, your role, or the field or mission of your organization) to tailor the Service to your needs.
- Profile and Settings: Any profile details or preferences you choose to add to your account (such as your contact information, profile picture, or communication preferences) are stored.
- Payment Information: If you subscribe to a paid plan or purchase add-on credits, you will provide payment details (e.g., credit card number, billing address) at the time of purchase. Note: We do not store full credit card numbers or payment account details on our servers. Payment information is handled by our secure payment processor (Stripe) as described below. We may store limited information like the last four digits of your card, card type, and expiration date for reference, as well as transaction dates and amounts.
- Content and Drafts: The content you input into the Service, such as the text of grant proposals, project descriptions, or any other documentation, as well as the AI-generated drafts and suggestions, is collected and stored on our servers. This is considered User Content (which may include personal data if you include any personal information within your drafts). For example, if you draft a grant proposal that includes names of project staff or partner organizations, that information will be stored as part of your content.
- Communications with Us: If you contact us directly (for example, via email at [email protected] or through a contact form or chat), we will receive the content of your message, your contact information, and any other information you choose to provide. This includes support inquiries, feedback, or requests for assistance.
- Information We Collect Automatically: When you use our Service, we automatically collect certain information about your device and usage of the Service. This may include:
- Technical Data: Your IP address, browser type, browser version, operating system, device type (desktop or mobile), device identifiers, and other technical information about the device you use to access the Service.
- Usage Data: Details of how and when you use the Service, such as date and time of access, pages or features visited, the amount of time spent on pages, logs of user actions (e.g., generating a draft, editing text, saving a document), and other diagnostic or analytical data.
- Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect data about your interactions with our Service. Cookies are small text files placed on your device to store information. For example, we use session cookies to keep you logged in as you navigate through the site, and preference cookies to save your settings. We also use analytics cookies that help us understand user behavior.
- Crash and Error Logs: If the Service encounters an error or crash, the system may automatically log information about the error and the state of the application leading up to it (which can include technical details about your device and what action you were performing). These logs help us debug issues and improve stability.
We do not intentionally collect any sensitive categories of personal data (such as social security numbers, government ID numbers, financial account passwords, precise health or genetic data, etc.) from users as part of routine use. Please refrain from submitting such sensitive information through our Service unless it is absolutely necessary for your grant content, and even then, be cautious (remember that anything you include in the content might be processed by our AI provider). If you believe we have inadvertently collected sensitive personal data, please contact us to remove it.
3. How We Use Your Information
GrantEater.ai uses the collected information for the following purposes, all in line with operating, maintaining, and improving our Service and business:
- To Provide and Maintain the Service: We use your personal information to create and manage your account, authenticate you when you log in, and provide you with the features of our grant writing assistant. For example, we use your drafts and inputs to generate AI-based suggestions and content, and we store your content so that you can access it anytime.
- To Process Payments: We use payment-related information (handled primarily by Stripe) to process your subscription fees and purchases of add-on credits. This includes billing you, managing invoices, and record-keeping for accounting and legal compliance (e.g., tax records).
- To Communicate with You:
- Account and Service Communication: We may send you administrative emails to confirm your signup, notify you of subscription status (e.g., trial expiration, renewal receipts), provide password reset instructions, or inform you of important Service updates (such as changes to terms or privacy policy, security alerts, or feature announcements). These communications are typically necessary for using the Service and you may not be able to opt out of them as long as you have an account (except by deleting your account).
- Customer Support: If you contact us with a question or issue, we will use your provided information to respond and resolve your inquiry. We may follow up to ensure your issue is resolved.
- Promotional Communication: We may occasionally send newsletters or promotional emails about new features, special offers, or content we think may interest you (e.g., tips for grant writing or AI updates). You have the choice to opt out of marketing emails at any time by clicking the “unsubscribe” link in such emails or adjusting your account preferences. (Transactional or service-related communications will still be sent as needed.)
For users in the European Economic Area (EEA) or United Kingdom, we process personal data on the following legal bases: (a) as necessary to perform our contract with you (Terms of Service) when we provide the Service and customer support; (b) as necessary for our legitimate interests in improving our Service, understanding our users, marketing to you, and ensuring security and enforcement (we consider and balance any potential impact on your rights when doing so); (c) to comply with legal obligations; and (d) in some cases, based on your consent.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to run our Service and to collect data automatically. Here is more detail on how we use these technologies:
- Essential Cookies: Necessary for the Service to function properly, such as session cookies that keep you logged in.
- Preference Cookies: Used to remember your preferences and settings.
- Analytics Cookies: Help us understand how visitors use our site.
- Performance and Error Tracking: Used to identify and fix errors in our application.
When you first visit our website, you may see a banner or notification about cookies. You have the right to accept or decline non-essential cookies. Most web browsers also allow you to control cookies through their settings.
6. Data Retention
We will retain your personal information and content for as long as your account is active or as needed to provide you with the Service. Specifically:
- Account Data: We keep your account information and User Content while your account remains active.
- Inactive Accounts: If your account becomes inactive for a prolonged period (typically 12 months), we may delete or anonymize your data after notifying you.
- Account Deletion Requests: If you choose to delete your account, we will remove or anonymize personal data associated with your account.
7. Data Security
We take reasonable and appropriate security measures to protect your personal information from loss, misuse, unauthorized access, alteration, and disclosure. However, no method of transmission over the Internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security.
Our security practices include encryption, access controls, employee confidentiality agreements, secure infrastructure, monitoring, and incident response plans.
8. Your Rights and Choices
You have certain rights and choices regarding your personal information:
- Access and Portability: Request a copy of your personal data.
- Rectification (Correction): Correct or update your personal information.
- Deletion (Right to be Forgotten): Request deletion of your personal data.
- Withdrawal of Consent: Withdraw consent for processing based on consent.
- Objection to Processing: Object to certain processing activities.
- Restriction of Processing: Request that we restrict processing of your data.
You can exercise many of these rights by logging into your account or by contacting us at [email protected].
9. International Data Transfers
GrantEater.ai is based in the United States, and our Service is primarily operated from the U.S. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States and potentially other countries where our service providers are located.
We take steps to ensure that adequate safeguards are in place to protect your personal data in accordance with this Privacy Policy and applicable law.
10. Children's Privacy
Our Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children or minors. As stated in our Terms of Service, users must be 18 or older to use GrantEater.ai.
If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete such information as soon as possible.
11. Changes to this Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Effective Date” at the top of this Policy. If changes are significant, we will provide a more prominent notice.
By continuing to use the Service after any changes to this Privacy Policy become effective, you agree to the revised Policy. If you do not agree with the changes, you should stop using the Service.
12. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or about how your information is handled in connection with the Service, please contact us at:
GrantEater.ai LLC – Privacy Team
Email: [email protected]
(Please include “Privacy Inquiry” in the subject line for clarity.)
Mailing Address: Attn: Privacy, GrantEater.ai LLC, Portland, Oregon, USA (Multnomah County).
(We can provide a full mailing address upon request for any official correspondence.)