We never sell, rent or share your data with third parties. Your nation's data belongs to your nation.
What we collect, why, who handles it, and the control you keep over it.
Welcome to GrantsPath. This Privacy Policy explains how we collect, use, protect and share information when you use GrantsPath, and the rights you have over it.
Your data is yours: It belongs to your nation or organization. We never sell, rent or share it with third parties, and never use it for advertising.
What we collect: Account details, your organization's profile, your grant work and the files you bring in, so GrantsPath can do its job.
AI: Some features use AI from Anthropic and Google. They receive only what a feature needs and don't train on it. A person reviews every result, and admins can turn AI reading of imported files off.
Where it lives: In the United States, encrypted in transit and at rest, walled inside your workspace.
Your control: Export or delete your data from Settings, choose your messages, or ask us for anything else.
GrantsPath is run by a Native-owned business. This policy covers grantspath.com, the GrantsPath app and the messages we send.
Account details, your organization's profile, the grant work you do in GrantsPath, files you bring in, billing details and basic technical information.
To run GrantsPath for you: matching and fit scores, forms, imports, reminders, billing, support and security. Never for advertising.
Some features use AI from Anthropic and Google. They get only what a feature needs, don't train on it, and a person reviews every result.
We never sell, rent or share your data with third parties. A short list of service providers runs parts of GrantsPath for us.
Only what GrantsPath needs to work: sign-in cookies, settings saved on your device, and page counts without cookies. No ad or tracking cookies.
Your records stay until you delete them. Imported source files go after 30 days, exports after 7 days, and the Sovereign Vault keeps grant records for seven years.
Encryption in transit and at rest, sign-in through a dedicated provider, and every record walled inside its own workspace.
If a security incident affects your data, we tell your workspace admins quickly and plainly, and help you meet your own obligations.
See, correct, export or delete your data, and choose which messages you get. Most of it you can do yourself in Settings.
Residents of California and other states with privacy laws have the rights above. We don't sell or share personal information.
GrantsPath is for adults working on behalf of organizations. It is not directed to children under 13.
GrantsPath stores data in the United States.
Your data belongs to your nation. We are custodians, not owners, and we follow the CARE Principles for Indigenous Data Governance.
We tell you at least 30 days before a significant change takes effect.
Questions, requests, concerns and security reports go to support@grantspath.com.