Grant Flow ("we," "us," or "our") is committed to protecting the privacy of the nonprofit organizations and individuals who use our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.
By using Grant Flow, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the platform.
When you create and complete your organization profile, we collect information you voluntarily provide, including:
When you create an account or subscribe to a paid plan, we collect your name, email address, and payment information. Payment processing is handled by a third-party provider; we do not store full credit card numbers on our servers.
We automatically collect certain technical information when you use the platform, including browser type, operating system, pages visited, features used, and session duration. This data is used to improve the product and is not linked to your organization's grant or proposal content.
We use the information we collect to:
We do not sell your data, use your proposal content to train AI models, or share your organization's information with grant funders without your explicit action.
Anthropic (Claude AI) — Grant Flow uses the Anthropic Claude API to power grant matching, proposal generation, Letter of Inquiry drafting, and RFP parsing. When you use these AI features, your organization profile data and the content you input is transmitted to Anthropic's API to generate responses. Anthropic processes this data as a sub-processor on our behalf. Anthropic's API usage policies prohibit the use of API inputs to train their models without consent. You can review Anthropic's privacy policy at anthropic.com/privacy.
Grants.gov — We query the Grants.gov federal API to retrieve live grant opportunity data. No personal or organization data is transmitted to Grants.gov in this process.
Payment Processor — Subscription billing is handled by a PCI-compliant third-party payment processor. We receive only a transaction token and billing metadata; full card details are handled exclusively by the processor.
Analytics — We may use anonymized analytics tools to understand product usage patterns. These tools do not receive your organization profile content or grant proposal text.
Your organization profile and grant data is stored securely using industry-standard encryption at rest and in transit (TLS/SSL). Access to production data is restricted to authorized Grant Flow personnel on a need-to-know basis.
During the current version of the platform, some data may be stored in your browser's local storage as a session cache. This data remains on your device and is not accessible to third parties through our systems.
While we implement reasonable security measures, no transmission over the internet or electronic storage method is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and keep your account credentials confidential.
We retain your account and organization data for as long as your account is active or as needed to provide services. If you cancel your account, we will delete or anonymize your personal data within 90 days, except where retention is required by law or legitimate business purposes (e.g., billing records).
You may request deletion of your data at any time by contacting us at the address below.
Depending on your location, you may have the following rights regarding your data:
To exercise any of these rights, contact us at contact@irondigitalmi.com. We will respond within 30 days.
Grant Flow uses essential cookies necessary for platform operation (authentication sessions, preferences). We do not use third-party advertising cookies or behavioral tracking cookies. You can disable cookies in your browser settings, but this may affect certain platform functionality.
Grant Flow is intended for use by nonprofit organizations and their staff. The platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically. Continued use of Grant Flow after changes are posted constitutes your acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
