1. Introduction
Grants USA ("Company," "we," "our," or "us"), operated by Astra Agency, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website located at grantsusa.io and our grant management platform (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.
2. Information We Collect
2.1 Information You Provide Directly
- Account registration data: name, email address, organization name, role
- Organization profile data: mission statements, EIN, budget details, program descriptions
- Grant application content you create, upload, or generate through the Service
- Payment information processed securely through Stripe (we do not store card details)
- Communications with our support team
2.2 Information Collected Automatically
- Log data: IP address, browser type, pages visited, time and date of access
- Device information: hardware model, operating system, unique device identifiers
- Usage data: features used, actions taken, grant searches performed
- Cookies and similar tracking technologies (see Section 7)
2.3 Information from Third Parties
- Grant opportunity data from public sources including Grants.gov and federal databases
- Authentication information if you use single sign-on (SSO)
- Affiliate referral codes used during registration
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Service
- Personalize AI-generated grant content based on your organization profile
- Process payments and manage your subscription
- Send transactional emails (receipts, password resets, account notifications)
- Send marketing communications (you may opt out at any time)
- Analyze usage trends to enhance user experience
- Detect and prevent fraudulent or unauthorized activity
- Comply with legal obligations
4. Sharing of Information
We do not sell your personal information. We may share your data with:
- Service Providers: Trusted third parties that assist in operating the Service (e.g., Stripe for payments, cloud hosting providers, AI model providers). These parties are contractually bound to protect your data.
- Affiliates: Astra Agency and affiliated entities involved in delivering the Service.
- Legal Authorities: When required by law, subpoena, or to protect the rights, property, or safety of Grants USA, its users, or the public.
- Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your subscription, we retain your data for up to 90 days before deletion, during which you may export your content. After deletion, certain anonymized data may be retained for analytics purposes.
6. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Opt-out: Opt out of marketing communications at any time
- California Residents (CCPA): You have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, email us at privacy@grantsusa.io.
7. Cookies
We use cookies and similar tracking technologies to improve your experience. You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service. We use:
- Essential Cookies: Required for authentication and core functionality
- Analytics Cookies: Help us understand how the Service is used
- Affiliate Tracking: Used to attribute referrals to our affiliate partners
8. Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews aligned with SOC 2 principles. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the Service. Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.