What is the scope of GreatGrants Terms of Service?

By accessing or using the GreatGrants platform, website, applications, or any related services, you agree to be bound by these Terms of Service, which constitute a legally binding agreement between you and GreatGrants, Inc. The terms apply to all users including nonprofit organizations, consultants, advisors, employees, contractors, and collaborators.

Does GreatGrants guarantee grant funding or success?

No. The Service does not provide legal, financial, accounting, or compliance advice, nor does GreatGrants guarantee eligibility for any grant, completeness or accuracy of grant information, or success or funding of any grant application. All funding decisions are made exclusively by third-party grantmakers.

How should AI-Generated Content be used?

AI-Generated Content is provided for informational and assistive purposes only and may be incomplete, inaccurate, misleading, or unsuitable for your specific circumstances. AI-Generated Content is not human-verified and must be reviewed, edited, and validated by you prior to use or submission. You assume all risk associated with reliance on AI-Generated Content.

Who owns content uploaded to GreatGrants?

You retain ownership of Your Content. By submitting content through the Services, you grant GreatGrants a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, process, reproduce, display, modify, and use Your Content solely for providing, operating, securing, maintaining, and improving the Services.

All fees are billed in advance, are non-refundable except as required by law, and are subject to change upon reasonable notice. Failure to pay applicable fees may result in suspension or termination of access.

What warranties does GreatGrants provide?

The Service is provided 'as is' and 'as available,' without warranties of any kind, whether express, implied, or statutory, including without limitation warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, or reliability.

What is GreatGrants' liability limitation?

To the maximum extent permitted by law, GreatGrants shall not be liable for any indirect, incidental, consequential, special, or exemplary damages, including lost funding, lost profits, or reputational harm. GreatGrants' total liability shall not exceed the amount paid by you in the twelve months preceding the claim.

What law governs these Terms?

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, without regard to conflict-of-laws principles. Any dispute arising out of or relating to these Terms shall be resolved through binding arbitration, except where prohibited by law.

Terms of Use

Great Grants, a non-profit 501(c)(3) organization | Last updated: June 17th, 2026

This Data Processing Agreement (or “DPA”) sets forth the terms and conditions relating to Processing of Personal Information by Great Grants, a non-profit 501(c)(3) organization (“GreatGrants,” “us,” “we,” “our”) in the course of providing the GreatGrants platform or application(s) (collectively, the “Platform”) to you as a subscriber (“you”). This DPA is governed by and part of the Terms of Use governing your use of the Platform (the “Terms of Use” available at https://www.greatgrants.ai/terms). All references herein to the Terms of Use shall be interpreted to also include this DPA.

By executing the Terms of Use, the Parties also execute this DPA.

1. Definitions

Capitalized terms defined in this Section 1 have the meanings given below. Capitalized terms not defined herein have the same meaning set forth in the Terms of Use and all references to the Terms of Use herein shall include this DPA.

“Consumer” means an identified or identifiable natural person subject to protections under applicable Data Protection Laws.
“Controller” means the entity which determines the means and purposes of the Processing of Personal Information.
“Data Incident” means the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Organization Data (including Personal Information, transmitted, stored or otherwise) Processed by GreatGrants or its Sub-Processors.
“Data Protection Laws” means the federal and state laws of the United States governing consumer privacy and data protection and applicable to GreatGrants’ Processing of Personal Information, including without limitation the comprehensive consumer privacy laws of Colorado, Maryland, Minnesota, New Jersey, and Oregon, as well as other states with consumer privacy laws in effect that apply to the activities of nonprofit organizations, each as enacted or amended from time to time.
“Instructions” means written, documented instructions issued by you to GreatGrants to perform a specific or general action regarding Personal Information for the purpose of providing the Platform to you pursuant to the Terms of Use.
“Organization Data” means any data submitted or generated through the Platform by you, for example your Inputs and Outputs via AI Features, Your Content, Personal Information, or other data submitted to or generated through the Platform.
“Personal Information” means any information contained in Organization Data that is protected under applicable Data Protection Laws, such as information describing or relating to: (i) an identified or identifiable natural person or household or (ii) an identified or identifiable legal entity where such information is protected as Personal Information or personally identifiable information under applicable Data Protection Laws.
“Processing” means any operation or set of operations which is performed upon Personal Information, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Processor” means the party which Processes Personal Information on behalf of the Controller.
“Security Measures” means the technical and organizational measures employed by GreatGrants to secure Personal Information on GreatGrants information systems.
“Sell” means the disclosure or transfer of Personal Information to a third party for monetary or other valuable consideration.
“Share” means disclosure of Personal Information to a third party for cross-contextual behavioral advertising, regardless of whether money is exchanged.
“Sub-Processor” means a Processor engaged by GreatGrants to Process Personal Information contained in Organization Data.

2. Processing Personal Information

Applicability of this DPA. This DPA applies to Processing of Personal Information contained in your Organization Data by GreatGrants in relation to our provision of the Platform to you as part of your subscription to our Services under the Terms of Use. The parties agree to comply with the terms and conditions in this DPA in connection with Processing of Personal Information under the Terms of Use.
Roles of the Parties. The parties acknowledge and agree that, with regard to the Processing of Personal Information pursuant to the Terms of Use, you are the Controller and GreatGrants is the Processor. For clarity, (a) this DPA only applies to Processing of Personal Information by GreatGrants as a Processor to you and (b) this DPA does not apply to Processing of Personal Information by GreatGrants when acting as a Controller, such as communications between GreatGrants and current or potential new customers or Processing related to our marketing efforts.
Duration. GreatGrants shall process Personal Information throughout the term of the Terms of Use and any renewal term thereof. Upon termination of the Terms of Use by either party, GreatGrants shall cease processing Personal Information on your behalf upon completion of the termination provisions described herein.
Nature, Purpose, and Subject-Matter of the Processing. GreatGrants shall only Process Personal Information for the purpose of providing the Platform to you pursuant to the Terms of Use and in compliance with your Instructions. The nature, purpose, and subject-matter of our Processing of Personal Information as your Processor is described in and governed by the Terms of Use. In providing the Platform, GreatGrants may process your Authorized Users’ identifiers (e.g., name, email address, and other contact information) and any other categories of Personal Information the Authorized User chooses to include in Inputs to the AI Features or otherwise Process through the Services as described in our Privacy Policy (available at https://www.greatgrants.ai/privacy-policy). All Processing of Personal Information via the Platform is determined solely by you and according to your privacy practices.
GreatGrants’ Responsibilities. You hereby appoint GreatGrants to process the Personal Information contained in your Organization Data on your behalf as necessary for GreatGrants to provide the Platform pursuant to the Terms of Use. All such Personal Information will be stored, organized, and made available to you as the Controller per your Instructions. GreatGrants will treat Personal Information as your confidential information. If GreatGrants is required by applicable law to disclose Organization Data for a purpose unrelated to the Terms of Use, GreatGrants will first inform you of the legal requirement to give you an opportunity to object or challenge the requirement, unless the law prohibits such notice. Notwithstanding the foregoing, GreatGrants shall have the right to collect and use Personal Information contained in Organization Data to investigate use of the Service that we suspect is unlawful or in violation of the Terms of Use or to provide or develop the Services as permitted by the Terms of Use, to respond to legal actions, or for our internal administrative purposes such as accounting and compliance.

Additionally, GreatGrants will (i) ensure that access to Personal Information is limited to those GreatGrants personnel who are necessary to provide the Platform and (ii) take commercially reasonable steps to ensure the reliability of any GreatGrants personnel engaged in the processing of Personal Information. Additionally, GreatGrants shall ensure that its personnel engaged in the Processing of Personal Information are informed of the confidential nature of the Personal Information, have received appropriate training on their responsibilities and have executed written confidentiality agreements.‍
Your Responsibilities. In your use of the Platform, you agree to only Process Personal Information in accordance with the requirements of all applicable Data Protection Laws, including without limitation requirements to provide notice to Consumers of the use of GreatGrants as the Processor, and GreatGrants policies and documentation, as applicable. You are solely responsible for the accuracy, quality, and legality of the Personal Information and the means by which you acquire such Personal Information. You represent and warrant that you have established a lawful basis to Process the Personal Information, your use of the Platform will not violate the rights of any Consumer, and you have the right to transfer or provide access to the Personal Information to GreatGrants for Processing under the Terms of Use. You will inform GreatGrants without undue delay if you are not able to comply with your obligations under this DPA or any applicable Data Protection Law. For the avoidance of doubt, GreatGrants is not responsible for compliance with any Data Protection Laws applicable to you or your industry that are not generally applicable to GreatGrants.‍
Instructions. You hereby Instruct GreatGrants to Process Personal Information contained in Organization Data as needed to provide the Platform to you and for the purposes permitted by the Terms of Use. The parties agree that the Terms of Use together with your use of the Platform and other written Instructions from you to GreatGrants (email will suffice) shall constitute your complete and final Instructions to GreatGrants for the Processing of Organization Data under the Terms of Use. If GreatGrants determines that any of your Instructions are outside the scope of the Terms of Use, GreatGrants may charge additional fees and/or require a written agreement between GreatGrants and you to follow with such Instructions. GreatGrants will inform you without delay if, in our opinion, an Instruction violates applicable Data Protection Laws or if we are unable to follow an Instruction and, where necessary, cease all Processing until you issue new Instructions with which we can comply. Notwithstanding any provision to the contrary, you are solely responsible for the legality, outcome, and results of any and all Instructions and GreatGrants shall have no liability whatsoever related to its provision of the Services according to any of your Instructions.‍
Limitations. GreatGrants will not (i) Sell Personal Information; (ii) Share Personal Information with third parties for cross-contextual behavioral advertising purposes; (iii) retain, use, or disclose Personal Information for a commercial purpose other than for such business purpose or as otherwise permitted by Data Protection Laws; or (iv) retain, use, or disclose Personal Information outside of the direct business relationship between you and GreatGrants. GreatGrants certifies that it understands and will comply with the restrictions of this Section 2.8.‍
No Sale or Sharing Between Parties. The parties agree that you do not sell Personal Information or share Personal information for targeted or behavioral advertising to GreatGrants because, as a Processor, GreatGrants may only Process such Personal Information as Instructed by you.

3. Consumer Privacy Rights

GreatGrants shall, to the extent legally permitted, promptly notify you if GreatGrants receives a request from a Consumer to exercise the Consumer's right under applicable Data Protection Laws relating to Organization Data (each request being a “Consumer Request”). Taking into account the nature of the Processing, if you are unable to independently address a Consumer Request, GreatGrants will assist you by appropriate technical and organizational measures, insofar as this is possible and to the extent GreatGrants is legally permitted to do so, for the fulfillment of your legal obligation to respond to a Consumer Request under Data Protection Laws. You are legally and solely responsible for responding substantively to any such Consumer Request or communications involving Personal Information and for all costs associated with the same.

4. Sub-Processors

You acknowledge and agree that GreatGrants may engage Sub-Processors in connection with the provision of the Platform. GreatGrants has entered into a written agreement with each Sub-Processor containing data protection obligations not less protective than those in this Agreement with respect to the protection of Organization Data to the extent applicable to the nature of the Platform provided by such Sub-Processor. GreatGrants will be liable for the acts and omissions of its Sub-Processors to the same extent GreatGrants would be liable if providing the service of each Sub-Processor directly under the terms of this DPA, except as otherwise set forth in the Terms of Use. GreatGrants will make a current list of Sub-Processors available to you upon request.

5. Data Security

Security Measures. GreatGrants will maintain appropriate technical and organizational measures for protection of the security, confidentiality, and integrity of Organization Data, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of Processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons. You are solely responsible for (i) reviewing and determining whether the Platform meets your security standards and supports your obligations under Data Protection Laws and (ii) the secure use of GreatGrants’ Services by you and your Authorized Users, including but not limited to ensuring no Authorized User misuses Personal Information or takes action likely to result in a Data Incident.
Data Incidents. GreatGrants will notify you without undue delay after becoming aware of a Data Incident occurring on GreatGrants’ or our Sub-Processor’s information system. GreatGrants will make reasonable efforts to identify the cause of the Data Incident and take such steps as we deem necessary and reasonable to remediate the cause of the Data Incident to the extent the remediation is within our control. At your request, and to the extent we are required to do so under applicable Data Protection Laws, we will promptly provide you with commercially reasonable assistance as necessary to enable you to meet your obligations under applicable Data Protection Laws to notify authorities and/or affected Consumers. The obligations herein shall not apply to incidents that are caused by you or your Authorized Users.

6. Access & Audits

Impact Assessment. Upon your reasonable request, GreatGrants will provide you with reasonable cooperation and assistance needed to fulfil your obligation under Data Protection Laws to carry out a data protection impact assessment related to your use of the Platform, to the extent you do not otherwise have access to the relevant information, and to the extent such information is available to GreatGrants.
Government Access Requests. If GreatGrants receives a legally binding request from a government agency to access Organization Data, we will, unless otherwise legally prohibited, promptly notify you including a summary of the nature of the request. To the extent GreatGrants is prohibited by law from providing such notification, we will use commercially reasonable efforts to obtain a waiver of the prohibition to enable us to communicate as much information as possible, as soon as possible. Further, GreatGrants will challenge the request if, after careful assessment, it concludes that there are reasonable grounds to consider that the request is unlawful. When challenging a request, GreatGrants will not disclose the Organization Data requested until required to do so under the applicable procedural rules. GreatGrants agrees to provide the minimum amount of information permissible when responding to a request for disclosure, based on a reasonable interpretation of the request. GreatGrants will promptly notify you if we become aware of any direct access by a government agency to Organization Data and provide information available to us in this respect, to the extent permitted by law. For the avoidance of doubt, this DPA shall not require GreatGrants to pursue action or inaction that could result in civil or criminal penalties for GreatGrants. GreatGrants will ensure that Sub-Processors involved in the Processing of Organization Data are subject to the relevant commitments under this DPA regarding government access requests.
Audit Rights. Subject to the confidentiality obligations set forth in the Terms of Use, upon your written request and at reasonable intervals and your sole expense, GreatGrants will make available to you or your agent on a confidential basis a copy of its most recent third-party audits or certifications demonstrating its compliance with the obligations set forth in this DPA. Such third-party audits or certifications may also be shared with your competent Supervisory Authority on its request. The audit rights described in this Section 6.3 shall be conducted by you: (i) acting reasonably, in good faith, and in a proportional manner, taking into account the nature and complexity of the Platform used by you; (ii) up to one time per year with at least three (3) weeks’ advance written notice; and (iii) during our normal business hours, under reasonable duration and shall not unreasonably interfere with our day-to-day operations. If an emergency justifies a shorter notice period than provided in (ii), we will use good faith efforts to accommodate the audit request.

7. Effect of Termination

This DPA will automatically terminate upon expiration or termination of the Terms of Use. GreatGrants will return, destroy, or render anonymous all such Personal Information in accordance with your reasonable written Instructions submitted to GreatGrants within 30 days of termination or expiration of the Terms of Use, subject to the limitations described in the Terms of Use. The requirements of this Section 7 do not apply to the extent that GreatGrants is required by applicable law to retain some or all of Organization Data, or to Organization Data that is archived on back-up systems, which we will securely isolate and protect from any further Processing and delete in accordance with our deletion practices.

8. Gerneral Terms

If and to the extent language in this DPA conflicts with the Terms of Use, this DPA shall control. This DPA forms part of the Terms of Use and all activities under this DPA remain subject to the applicable limitations of liability set forth in the Terms of Use. For the avoidance of doubt, GreatGrants’ total liability for all claims from you arising out of or related to the Terms of Use and all DPAs shall apply in the aggregate for all claims under both the Terms of Use and this DPA, including by you, and, in particular, shall not be understood to apply individually and severally to you as a contractual party to any such DPA. Additionally, you agree that any regulatory fines or penalties incurred by you in relation to the Organization Data that arise as a result of, or in connection with, your failure to comply with its obligations under this DPA or any applicable Data Protection Laws shall count toward and reduce GreatGrants's liability under the Terms of Use as if it were liability to you under the Terms of Use. This DPA will be governed by and construed in accordance with governing law and jurisdiction provisions in the Terms of Use, unless otherwise required by applicable Data Protection Laws.

The Parties AUTOMATICALLY execute this DATA PROCESSING AGREEMENT BY EXECUTING THE TERMS OF USE.

‍