Privacy Policy

When you sign in with Google, we receive basic profile information, typically your name and email address. When you sign in with an email link, we receive your email address. We use this to create and secure your account.

We store the information you enter to use the Service: your grant, goals, categories, budget, expenses, and any receipts you upload.

We rely on a small number of trusted third-party providers to operate GrantJar. They handle sign-in and authentication, secure database and file storage, website hosting, and payment processing for paid subscriptions. These providers process your data only to deliver their services to us and are bound by their own data-protection terms. We do not use advertising trackers, and we use analytics only with your consent. A current list of our service providers is available on request at privacy@grantjar.com.

If you subscribe to a paid plan, your payment card details are provided directly to our payment processor. We do not receive or store your full card number, only the subscription status and billing records needed to manage your plan.

GrantJar uses essential cookies and browser storage needed to keep you signed in and to run the app. With your consent, we also use optional analytics cookies to understand how the site is used so we can improve it. You can accept or decline analytics when you first visit, and you can change your choice at any time by clearing the site’s storage in your browser settings. Essential cookies cannot be turned off without signing you out.

We use your information solely to provide the Service to you: to authenticate you, store your records, show you your dashboard and reports, and let you export your data. We do not use it for any other purpose.

We do not sell, rent, or share your personal information or your grant records with third parties. We do not use your data for advertising. We do not access your records except as needed to operate and support the Service.

With your consent, we use a privacy-conscious analytics service to understand how the site is used, such as which pages are visited and how people find us, so we can improve GrantJar. This may involve cookies and may collect usage and device information and a general location derived from your IP address. We use this only to improve the Service. We do not sell it and we do not use it to target ads. You can decline analytics at any time. A current list of the providers we use is available on request at privacy@grantjar.com.

Your data is stored securely and is private to your account. We use industry-standard safeguards to protect it. You can export your records to a spreadsheet or a PDF at any time from within the Service.

We retain your information for as long as your account is active so you can access it throughout your grant. When you delete your account, we remove your data from our active systems promptly. Residual copies may remain in our secure backups for up to 30 days to allow recovery from accidental deletion or technical failure, after which they are permanently deleted. We may retain a limited amount of information where necessary to comply with legal obligations or resolve disputes.

You may also request deletion at any time by emailing privacy@grantjar.com, and we will action it.

You can access and export your information at any time from within the Service, and you can request correction or deletion of your information in the Service or by emailing privacy@grantjar.com. Depending on where you live, you may have additional rights under applicable privacy laws.

EEA, UK, and Switzerland (GDPR/UK GDPR): You have the right to access, rectify, erase, restrict, and port your data, and to object to or withdraw consent for processing. Our legal basis for processing is performing our contract with you. You may lodge a complaint with your local data protection authority.

California (CCPA/CPRA): You have the right to know what personal information is collected, request its deletion, and opt out of its sale or sharing. We do not sell or share personal information. You will not be discriminated against for exercising your rights.

Brazil (LGPD): You have the right to confirm processing, access, correct, anonymize, block, or delete unnecessary data, request data portability, and revoke consent.

Canada (PIPEDA): You have the right to access the personal information we hold about you, challenge its accuracy, and withdraw consent for its collection, use, or disclosure.

The Service is intended for adults managing grant funding and is not directed to children. We do not knowingly collect information from children under 16.

The Service is operated from the United States. If you use it from elsewhere, your information may be processed in the US. By using the Service, you consent to this transfer. For users in the EEA and UK, we rely on Standard Contractual Clauses where applicable.

We may update this policy from time to time. Material changes will be reflected by the “Last Updated” date above.

Questions about this policy? Email privacy@grantjar.com.