• Account details you provide: name, work email, organization name, and password (hashed by our authentication provider).
• Company profile data you enter: sector, stage, entity type, location, employee and revenue ranges, funding goal, ownership categories, keywords, and your mission statement.
• Operational data: timestamps, error logs, and aggregate usage counts needed to run and secure the service.
How we use it
• To compute grant match scores and generate application drafts for your organization.
• To authenticate you, secure the workspace, and provide support when you contact us.
• To send transactional email such as confirmations, password resets, and deadline alerts you have enabled.
• We do not sell personal data, and we do not use your company profile or drafts to train models.
Where data lives
• When cloud sync is configured, workspace data is stored in a Supabase Postgres database with row-level security so each account can only read its own rows.
• Without cloud sync configured, the app runs in local demo mode and your workspace is stored in your own browser storage. Nothing leaves your device.
• Narrative generation may send profile fields and the grant’s public requirements to the LLM provider configured for the deployment. No credentials or payment data are included in those requests.
Your choices
• You can edit or delete saved programs, applications, and drafts at any time from the workspace.
• You can request account deletion and a copy of your data by contacting us; we respond within one business day.
• Clearing browser storage removes any demo-mode workspace entirely.
Cookies and sessions
• Authentication sessions use first-party storage to keep you signed in. We do not run third-party advertising trackers.