Privacy Policy
Last updated: June 3, 2026
Who we are
Grantiness is operated by Entroparc ("we", "us"), the data controller responsible for personal data processed through the Service. You can reach us at privacy@grantiness.app.
What we collect
- Account data: name, email, password hash (or Google ID).
- Profile data: organization name, industry, stage, location, keywords you provide for matching.
- Usage data: grants saved, application status, email open/click events.
- Technical data: IP, browser, device for security and analytics.
How we use it
- To match grants to your profile (sent to our AI provider).
- To send transactional emails (welcome, digest, reminders).
- To process payments via Paddle.
- To improve the Service via aggregated analytics.
Legal basis for processing
- Contract performance — to provide the Service you signed up for (account, matching, emails).
- Legitimate interests — to keep the Service secure, prevent fraud, and improve product quality through aggregated analytics.
- Consent — for optional marketing emails; withdrawable at any time via the unsubscribe link.
- Legal obligation — to comply with tax, accounting, and law-enforcement requirements.
Sharing
We share data only with sub-processors required to run the Service: Lovable Cloud (hosting + database), Lovable AI (grant scoring), Lovable Emails (delivery), and Paddle.com Market Limited (Merchant of Record for payments, subscription management, tax compliance, and invoicing). We never sell your data.
Security
We apply appropriate technical and organisational measures to protect your data, including TLS encryption in transit, encryption at rest, role-based access controls, row-level security on our database, and regular review of third-party sub-processors. No system is perfectly secure, but we work to minimise risk and notify affected users promptly in the unlikely event of a breach.
Your rights (GDPR / CCPA)
You can request access, correction, export, or deletion of your data at any time by emailing privacy@grantiness.app. You can unsubscribe from marketing emails via the link in any email footer.
Retention
Account data is kept while your account is active. After deletion, we purge personal data within 30 days, except where required for legal or accounting reasons.
Cookies
We use strictly necessary cookies for authentication and a single analytics cookie to understand aggregate usage. No advertising trackers.
Contact
Data controller: Entroparc (operator of Grantiness) · privacy@grantiness.app