California Privacy Notice
Notice at Collection. Last updated: June 20, 2026.
This California Privacy Notice supplements our Privacy Policy and applies to California residents. It describes the categories of personal information we collect, the sources and purposes for collection, expected retention, disclosure practices, and California privacy rights.
We Do Not Sell or Share Personal Information
GrantAuthority does not sell personal information or share it with third parties for cross-context behavioral advertising. We currently use analytics only, and where our consent tools apply, analytics tags do not load until you accept. You can manage preferences on our Your Privacy Choices page.
Personal Information Categories
We may collect the categories below depending on how you use the Services.
Identifiers
Examples: Name, email address, phone number, account identifier, organization affiliation, IP address, online identifiers, and billing contact details.
Sources
You, your organization, your device, authentication providers, billing providers, and public or grant-related sources.
Business Purpose
Account creation, authentication, workspace administration, billing, support, security, grant matching, communications, and legal compliance.
Retention
Account term plus a reasonable period for legal, audit, billing, security, backup, and business records.
Sold or Shared
Not sold or shared.
Customer Records Information
Examples: Contact information, payment-related records, subscription records, organization details, tax status, billing history, and customer-support records.
Sources
You, your organization, payment processors, and service providers.
Business Purpose
Providing the Services, processing subscriptions, managing accounts, preventing fraud, support, and compliance.
Retention
Account term plus a reasonable period for legal, audit, billing, security, backup, and business records.
Sold or Shared
Not sold or shared.
Commercial Information
Examples: Products or plans purchased, subscription status, invoices, usage, feature access, discounts, credits, and billing events.
Sources
You, your organization, Stripe, and our systems.
Business Purpose
Subscription management, billing, customer support, usage limits, product operations, and financial records.
Retention
Account term plus a reasonable period for legal, audit, billing, security, backup, and business records.
Sold or Shared
Not sold or shared.
Internet or Other Electronic Network Activity
Examples: Device and browser information, pages viewed, feature interactions, search activity, log data, diagnostics, and analytics events.
Sources
Your browser or device, analytics tools, security systems, and our Services.
Business Purpose
Security, debugging, analytics with consent where applicable, product improvement, fraud prevention, and service operations.
Retention
For the period reasonably needed for security, analytics, diagnostics, and business records.
Sold or Shared
Not sold or shared.
Approximate Geolocation
Examples: Approximate location inferred from IP address, such as country, region, or city.
Sources
Your browser, device, network, and infrastructure providers.
Business Purpose
Security, fraud prevention, grant filtering, localization, diagnostics, and analytics.
Retention
For the period reasonably needed for security, analytics, diagnostics, and business records.
Sold or Shared
Not sold or shared.
Professional, Employment, Education, and Organization Information
Examples: Job title, organization role, employer, school or institution, program areas, credentials, team members, collaborators, and grant-writing responsibilities.
Sources
You, your organization, workspace administrators, uploaded documents, and public or grant-related sources.
Business Purpose
Workspace collaboration, grant matching, eligibility analysis, proposal drafting, document generation, verification, and support.
Retention
Account term plus a reasonable period for legal, audit, security, backup, and business records.
Sold or Shared
Not sold or shared.
User Content and Grant Workspace Data
Examples: Uploaded files, tax documents, budgets, payroll records, program narratives, grant drafts, proposals, chats, prompts, notes, saved grants, verification reports, and application records.
Sources
You, your organization, authorized users, and grant-related sources you choose to use in the workspace.
Business Purpose
Providing grant discovery, document vault, drafting, AI assistance, organization-scoped retrieval, verification, collaboration, export, and support features.
Retention
Account or workspace term plus a reasonable period for legal, audit, security, backup, and business records, unless deleted sooner according to available tools or applicable law.
Sold or Shared
Not sold or shared.
Inferences
Examples: Grant-fit scores, readiness gaps, eligibility signals, recommended opportunities, usage patterns, and workspace recommendations.
Sources
Information you provide, workspace activity, grant data, foundation data, public sources, and system-generated analysis.
Business Purpose
Grant matching, prioritization, recommendations, AI-assisted drafting, verification, product improvement, and workflow automation.
Retention
Account or workspace term plus a reasonable period for legal, audit, security, backup, and business records.
Sold or Shared
Not sold or shared.
Sensitive Personal Information
Grant work may involve sensitive information if you or your organization upload it. We do not require unnecessary sensitive information and do not use sensitive personal information to infer characteristics outside the requested Services.
Sensitive Information in Uploaded or Generated Materials
Examples: Government identifiers, financial account details, tax records, payroll information, health or disability-related program information, demographic information, beneficiary information, or other sensitive content included in files, prompts, chats, or grant materials.
Purpose
Only as needed to provide the requested workspace, vault, drafting, retrieval, verification, export, and support features.
Retention
Account or workspace term plus a reasonable period for legal, audit, security, backup, and business records, unless deleted sooner according to available tools or applicable law.
Sold or Shared
Not sold or shared. We do not use sensitive personal information to infer characteristics outside the requested Services.
Account Credentials
Examples: Credentials, authentication tokens, session identifiers, or security information used to access the Services.
Purpose
Authentication, session management, account security, fraud prevention, and service integrity.
Retention
For the period reasonably needed for authentication, security, legal, audit, and business records.
Sold or Shared
Not sold or shared.
Disclosures for Business Purposes
We may disclose the categories above to service providers and contractors that help us operate the Services, including Stripe, Firebase/Google, Vercel, PostHog, Plausible, Anthropic, OpenAI, Resend or SendGrid, Cloudflare/R2/S3-compatible storage, Upstash, ZH Search, and our API gateway and database infrastructure. We may also disclose information to organization administrators and collaborators according to workspace permissions, to grantors or third parties when you direct us to share or export it, and to legal, security, audit, or transaction parties when permitted by law.
California Privacy Rights
Subject to legal limits and verification, California residents may have the right to know/access personal information, delete personal information, correct inaccurate personal information, receive certain information in portable form, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights.
To exercise a right, email support@grantauthority.org. You may use an authorized agent if the agent provides proof of authorization and we can verify the request as required by law. You may appeal a rights decision by emailing the same address with "Privacy Appeal" in the subject line.
Questions or Accessible Format Requests
If you have questions about this Notice or need it in an alternative format because of a disability, contact us at support@grantauthority.org.