Privacy Policy
Last updated: February 7, 2026
1. Introduction
Granted AI (“Granted,” “we,” “us,” or “our”) operates the website and application at grantedai.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, and authentication credentials (managed through Google OAuth or email-based sign-in). If you subscribe to a paid plan, payment processing is handled by Stripe; we do not store your credit card number.
Content You Provide
This includes RFPs and grant guidelines you upload, answers you provide during coaching sessions, organization details, collaborator information, and the grant proposals we generate for you.
Usage Data
We automatically collect certain information when you visit our site, including your IP address, browser type, pages visited, time spent, and referring URLs. We use Google Analytics 4 and Microsoft Clarity for this purpose.
3. How We Use Your Information
- To provide and maintain the Granted service, including generating grant proposals based on your inputs
- To process your transactions and manage your subscription
- To send you service-related communications (account confirmations, billing notices, support responses)
- To improve our service through aggregated, anonymized usage analytics
- To detect and prevent fraud or abuse
4. AI Processing & Third-Party Data Sharing
Granted uses OpenAI’s API to power its drafting and analysis capabilities. When you use our service, your uploaded RFPs and coaching session answers are sent to OpenAI for processing. OpenAI’s API data processing agreement explicitly prohibits using API inputs to train their models.
We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share data with service providers who assist us in operating our platform (e.g., Stripe for payments, Resend for transactional emails, Supabase for database hosting), each bound by contractual obligations to protect your data.
5. Data Security
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption. We use Supabase with row-level security for database access controls. While no method of transmission or storage is 100% secure, we implement industry-standard measures to protect your information.
6. Data Retention & Deletion
We retain your data for as long as your account is active or as needed to provide our services. If you cancel your subscription, your data remains accessible in read-only mode until you request deletion. You can permanently delete all of your data at any time from your account settings or by contacting us at support@grantedai.com.
7. Cookies & Tracking Technologies
We use cookies and similar technologies for:
- Essential cookies: Required for authentication and core site functionality
- Analytics cookies: Google Analytics 4 and Microsoft Clarity to understand how visitors use our site
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal information
- Object to or restrict certain processing of your data
- Request a portable copy of your data
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at support@grantedai.com.
9. Children’s Privacy
Granted is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, contact us at:
Granted AI
Email: support@grantedai.com