Privacy Policy

Great Grants, a non-profit 501(c)(3) organization | Last updated June 17th, 2026

‍

Welcome to GreatGrants! This Privacy Policy explains the treatment of information collected and processed through greatgrants.ai (collectively, the “Site”), the GreatGrants platform or application(s) (collectively, the “Platform”), and other interactions with Great Grants, a non-profit 501(c)(3) organization (“GreatGrants,” “us,” or “we”) through our other products or services (collectively, the “Services”). This Privacy Policy is governed by and is part of our Terms of Use. Any terms we use in this Privacy Policy without defining them have the definitions given to them in the Terms of Use. We may provide additional notices about our privacy practices, each of which will be considered to form part of this Privacy Policy.

THIS PRIVACY POLICY ONLY APPLIES TO GREATGRANTS SERVICES. IT DOES NOT APPLY TO ANY SERVICES OFFERED BY A THIRD PARTY.

Please read this Privacy Policy along with our Data Processing Agreement carefully to understand our privacy practices. By using or accessing the Services in any manner, you acknowledge and consent to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Services.

1. Define: Personal Information

As used in this Privacy Policy, “Personal Information,” means information that meets the statutory definition of personal information, personal data, or personally identifiable information under applicable data protection laws, or information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual consumer or household. Below are examples of categories and types of Personal Information:

Identifiers (e.g., name, address, telephone number, email address, username);
Internet or other similar activity (e.g., IP address, geolocation, browsing history);
Commercial information (e.g., products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);
Sensitive Personal Information (e.g., birthdate, government ID, health data);
Employment-related information (e.g., current or past employment) or non-public educational information;
Protected classification information (e.g., race, ethnicity, citizenship, marital status, medical condition, sex, sexual orientation, veteran or military status); or
Inferences drawn from the Personal Information collected to create a profile about preferences, characteristics, trends, predispositions, behavior, attitudes, intelligence, and aptitudes.

Please note that, as a nonprofit organization, GreatGrants is exempt from compliance with certain privacy laws. Additionally, not all information about a person is legally protected as their “Personal Information”. For example, some privacy laws do not apply to: (a) publicly available information, such as information in government records or information that is lawfully made available to the general public, (b) aggregated information, meaning data about a group or category of services or users from which individual identities and other Personal Information has been removed, or (c) deidentified information that cannot be easily linked back to the individual.

2. Children's Policy

You must be at least 18 years old to use the Services. Subscribing organizations are responsible for ensuring each Authorized User is at least 18 years old. GreatGrants does not knowingly collect or process Personal Information from any individual who is under the age of 18. If we discover that a child under age 18 has provided us with Personal Information without parent or guardian consent, we will promptly delete the information from our systems. If you believe we might have any information collected online from a child under 18, or if you become aware of any unauthorized submission of information to us, please contact us at privacy@greatgrants.ai.

3. Personal Information Collection & Use

GreatGrants only collects, uses, retains, and discloses Personal Information through the Services as reasonably necessary and proportionate to provide the Services or for other purposes that we disclose to you and are compatible with the context of how we collected your Personal Information. Personal Information may be collected and used through the Services as described below:

Platform Use By Organizations & Their Authorized Users. The Services are provided to subscribing organizations and their Authorized Users on a business-to-business basis. GreatGrants processes Personal Information as a service provider to the organization as described below. Please contact the organization with any questions about its privacy practices or how it uses the Services.

When you register to create an Account on the Services for your organization, we collect your name, email address, and other contact information as the point of contact for the organization.
To complete the organization’s profile associated with the Account, GreatGrants will collect information about the organization including entity name and registration details, website, contact information, and operational details to create a profile for the organization. We use this information to provide the Account and to facilitate the organization’s use of the Services. This information relates to the organization only and is not Personal Information.
Data submitted or generated through the Platform by the organization (e.g., Inputs and Outputs via AI Features, Your Content, and all Personal Information or other data submitted to or generated through the Platform by an organization (collectively, “Organization Data”) belongs to the organization.
An Authorized User may use the Platform to submit Inputs or other Organization Data to the Platform to generate grant matches, grant application content, or other Outputs or to leverage other features provided through the Services. The organization determines which Organization Data is processed through the Platform and how any resulting Outputs are used by the organization.
Any sensitive Personal Information submitted to the Services by an Authorized User will be processed by GreatGrants as a service provider or processor to the organization.
GreatGrants only processes Personal Information included in the Organization Data as instructed by the organization (via its Authorized User) through prompts, Inputs, and settings on the Services. The organization is responsible for this processing according to its own terms of use and privacy policies. GreatGrants is in no way responsible for the privacy practices related to processing Organization Data.
The organization may use the Services to implement or manage outreach efforts like grant applications, fundraisers, or marketing campaigns. The organization is responsible for the content of these outreach efforts and for using the Services in compliance with applicable laws.

Site Visitors. If you visit the Site or contact us online, by email, or otherwise:

If you join our mailing list, Beta list, or contact us through the Site for any purpose, we will collect Personal Information including identifiers like your name and email address, along with any other Personal Information that you choose to include in your message to us.
If you submit a review of the Services, we may post your review (and any Personal Information you choose to include) on the Site or our third-party channels.
We collect this information with your consent, and we use it to provide the Services, respond to your inquiries, and communicate with you about the Services.
We may use your contact information to send you marketing messages according to your stated communication preferences and as permitted by applicable law. You may opt out of our marketing messages at any time by clicking the Unsubscribe link in any email from us or by contacting privacy@greatgrants.ai with a subject line “Opt out of marketing communications.”

Cookie Notice. GreatGrants uses cookies and similar technologies to automatically collect certain technical data from your visit to the Site or your sessions on the Platform. GreatGrants uses the following cookies and related technologies:

Essential cookies including BetterAuth session and OAuth callback for session authentication and session-refresh flag to eliminate redundant refresh requests.
Functional cookies like next-theme, RAIL_STORAGE_KEY, download-success-, and dismissed-modal state to manage and deliver Site user experience features, and gg.subState and dev-only subscription override to facilitate the subscription process.
Analytics cookies such as GA4 for session tracking and product measurement as well as SigNoz OTEL for Platform performance and error monitoring. Analytics cookies set by third parties may transmit data from your session to the third party.
Data collected may include IP address, browser type, device type, referring URL, or log data. We may also collect metadata (session timestamp; duration) and performance data (response time; errors) and similar data from your session.
You can opt out of analytics or functionality cookies by adjusting your preferences and account settings through our services. Alternatively, you can block analytics or functionality cookies by adjusting your device settings or by installing a third-party plugin.

Other Uses of Personal Information. In addition to the specific uses above, we might also use Personal Information submitted to the Services to:

Facilitate an organization’s or its Authorized User’s use of the Services or for our communications or marketing purposes
Collect payments for Fees. All payments are processed via a third-party PCI DSS compliant payment processor. We do not collect, store, or process payment card details on our servers.
Provide customer support or communicate with the organization or its Authorized Users.
Troubleshoot issues or improve the Services.
Monitor compliance with our terms and conditions, enforce this Privacy Policy, or (if necessary) bring legal action.
Comply with applicable laws or regulations.
Achieve any other purpose with your instruction or consent.

4. Data Disclosures

We may disclose any of the Personal Information we process to the recipients described below, or to other recipients with their permission or as required by law:

The Organization Using the Services. Organization Data is owned by the subscribing organization for which it was processed on the Services. All Personal Information included in Organization Data is accessible and readily available to the organization. GreatGrants provides the organization with access to its Organization Data as a data processor or service provider to the organization.
AI Service Providers. The AI Features on the Services are made possible through our relationship with various third-party AI service providers. For example, your Inputs are disclosed to AI service providers to search and match against available grant opportunities or to prepare automated drafts of grant applications for your review. Please note that Inputs to the AI Features may be accessible simultaneously and in real-time by that third-party service provider. By using the AI Features, you consent to our third-party service provider accessing your Inputs. If you do not consent to such access, you should not use the AI Features.
Other Service Providers. GreatGrants uses a variety of third-party service providers such as data hosting companies, email providers, data analytics providers, data servers, and payment processors. The type of information that we disclose to a service provider will depend on the services provided by that service provider. Our service providers are subject to contractual agreements that protect your Personal Information, and we require all service providers to maintain confidentiality standards that are commercially reasonable to ensure the security of your Personal Information and to use Personal Information only for the specific purposes for which it was disclosed.
Legal Requirements. GreatGrants may be required by law enforcement or judicial authorities to provide Personal Information to governmental authorities. It is GreatGrants' policy to fully cooperate with law enforcement, and we reserve the right to disclose Personal Information to law enforcement and other governmental agencies at our sole discretion.
Business Transitions. Under specific circumstances, we may disclose Personal Information to certain third parties as permitted by applicable law, for example: if we go through a business transition (e.g., merger, acquisition, or asset sale); to comply with a legal requirement or a court order; when we believe it is appropriate to take action regarding illegal activities or prevent fraud or harm to any person; to exercise or defend our legal claims; or for any other reason with your consent.
No AI Training. The AI service providers we engage to provide the Services do not use Organization Data to train their AI technologies, as stated in the service provider’s terms and conditions.
No Sale or Sharing of Personal Information. We do not work with any service providers that sell or share the Personal Information we process. However, we use GA4 cookies and related services for product measurement, which requires transmitting certain Personal Information to Google Analytics. You can opt out of this processing by following the instructions in Section 3(c).
Aggregated and Deidentified Information. We reserve the right to use and disclose to third parties fully anonymized, deidentified, or aggregated data generated using Personal Information to assist with our research, marketing, advertising, or other purposes. For example, we may share reports showing trends about the general use of our Services without identifying an individual.

5. Data Retention

GreatGrants retains the Personal Information we process for the period necessary to provide you with the Services you have selected and as necessary to maintain our internal business records. When we no longer have a business need for your Personal Information, we will either delete, de-identify, or anonymize it whenever feasible. If you delete your account, your Personal Information will be anonymized and authentication credentials deleted from our systems.

When a subscribing organization terminates its account, its Organization Data is permanently deleted within a reasonable period after termination. Additionally, a subscribing organization may request that GreatGrants delete its Organization Data at any time during or following the Subscription Term. Data collected through cookies and similar technologies may be retained for a few minutes or for several months and is automatically deleted at the end of the specified retention period.

If it is not feasible for us to delete data upon request or following account termination (such as data in our backup archives), we will securely store the data and keep it isolated from further processing until it can be permanently deleted. GreatGrants reserves the right to retain Personal Information for longer periods to comply with legal obligations, resolve disputes, enforce our agreements, or other lawful purposes.

The organization is solely responsible for its own retention of Personal Information and other data processed through the Platform.

6. Available in the U.S. Only

GreatGrants is owned and operated in the United States and provides the Services subject to United States law. Organizations should only use the Services in support of their operations in the United States. If you access the Services from outside the United States, you understand and agree that your Personal Information will be transferred to, processed, stored, and used in the United States. When data is moved from your home country to another country, the laws that protect Personal Information in the country to which your information is transferred may be different from those of the country where you live. For example, if your Personal Information is in the United States, it may be accessed by government authorities under United States law. Your use of our Services constitutes your consent to the transfer and processing of your Personal Data as described in this section.

7. Your Privacy Controls & Options

This section describes your options to directly control how your Personal Information is processed by GreatGrants:

Emails from GreatGrants. If you provide us with your email address, we may send you informational emails or marketing emails about our Services. If you do not wish to receive our marketing emails, you can use the Unsubscribe link in any email from GreatGrants or send an opt out request to privacy@greatgrants.ai to be removed from our email list. Please note, however, that an Account holder’s point of contact cannot opt out of emails relating to the Account holder’s subscription, transactions, or changes to our terms and conditions or policies that may relate to their use of the Services.
Authorized Users. Authorized Users who wish to no longer have their Personal Information processed through the Services can contact the organization to terminate their login credentials and discontinue all use of the Services.
Individuals. Individuals who wish to prevent or discontinue processing of their Personal Information by an organization via the Services should contact the organization to request discontinuation of that processing or deletion of their Personal Information by the organization.
Privacy Requests. Authorized Users must contact their organization to exercise privacy rights listed in Section 7. Please contact the organization with any questions about those privacy practices or your privacy rights.

If you are not an Authorized User and you wish to exercise your privacy rights with GreatGrants (see Section 7), or if you want to express concerns, lodge a complaint, or request information, please submit a privacy request to privacy@greatgrants.ai. We can only legally fulfill a privacy request when we have sufficient information to verify that the requester is the person or an authorized representative of the person about whom we have collected Personal Information, and to properly understand, evaluate, and respond to the request. We do not charge a fee to process or respond to a verifiable request unless we have legal grounds to do so, such as requests that are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Do Not Track. Do Not Track signals are signals sent through a browser informing us that you do not want to be tracked. Our Services do not use tracking technology and do not recognize browser “do-not-track” requests.

8. Notice of Privacy Rights

This section provides a notice of consumer privacy rights available under certain U.S. state consumer privacy laws, such as the laws of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.

Please note that several U.S. state privacy laws do not apply to nonprofits like GreatGrants. To the extent that a privacy law does not apply to GreatGrants or to you or your use of our Services, the notices in this section are provided to you as a courtesy only.

Depending on where you reside and whether the privacy law of your state applies to nonprofits, you may be entitled to some or all the privacy rights listed below:

Right to Correct. You have the right to request that we correct inaccurate Personal Information about you on our systems. If you become aware that the Personal Information that we hold about you is incorrect, or if your information changes, please inform us and we will update our records.
Right to Access. You have the right to request confirmation that we have collected Personal Information about you and that we provide you with access to that Personal Information. If you submit an access request, we will provide you with copies of the requested pieces of Personal Information in a portable and readily usable format. Please note that we may be prohibited by law from disclosing certain pieces of Personal Information, and we may be limited in the number or frequency of requests we must fulfill.
Right to Deletion. You have the right to request that we delete your Personal Information that we collected and retained, with certain exceptions. We may permanently delete, deidentify, or aggregate the Personal Information in response to a request for deletion.
No Selling or Sharing Personal Information. Some states entitle consumers to opt out of the sale or sharing of Personal Information or targeted advertising practices. GreatGrants does not sell your Personal Information or share it to third parties for cross-contextual behavioral advertising purposes. If this changes in the future, we will notify you and seek your consent as required by law and provide you with a method to opt out.
No Sensitive Personal Information. Some privacy laws provide consumers with the right to require that the use of their sensitive Personal Information is limited only to what is necessary to provide the requested service. Please note that GreatGrants does not seek to collect sensitive Personal Information about any individual, and in no case do we disclose any sensitive Personal Information for the purpose of inferring characteristics about you or otherwise use your sensitive Personal Information without your consent. As such, any sensitive Personal Information that we might process is already limited to what is necessary to provide the requested Services.
No Profiling. You have the right to opt out of automated profiling. GreatGrants does not process your Personal Information to evaluate, analyze, or predict your interests and preferences or otherwise use automated profiling to produce significant effects that concern you. If this changes in the future, we will update this Privacy Policy and provide you with a method to opt out.
No Health Data. The Services are not designed for collection or processing of health data. Some laws entitle consumers to certain details about health data collected about them, including (a) confirmation of whether the entity collects, shares, or sells the consumer’s health data and access that data, including a list of all third parties and affiliates with whom the entity has shared or sold the health data and a method to contact those third parties, (b) a method to withdraw consent related to use of health data, and (c) the right to have their health data be deleted.
Right to Disclosure. You may request that we disclose information to you about our collection and use of your Personal Information, such as: (a) the categories of Personal Information we have collected about you; (b) the categories of sources for the Personal Information we have collected about you; (c) our business purpose for collecting, using, processing, sharing or selling that Personal Information, as applicable; (d) the categories of third parties with whom we share that Personal Information; and (e) if we sold or shared your Personal Information under applicable consumer privacy law, two separate lists stating: (i) sales or sharing, identifying the Personal Information categories that each category of recipient purchased; and (ii) disclosures for a business purpose, identifying the Personal Information categories that each category of recipient obtained. Certain laws may limit the number or frequency of requests we must fulfill.
Right to Nondiscrimination. We will not discriminate against you for exercising your privacy rights. For example, unless permitted by law we will not: (a) deny you goods or services; (b) charge you different prices or rates for goods or services; (c) provide you a different level or quality of goods or services; (d) retaliate against you as an employee, applicant for employment, or independent contractor for exercising your privacy rights; or (e) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services, because you exercised a right under applicable privacy laws.
California Shine the Light Act. California Civil Code Section 1798.83 permits users of our Services who are California residents to request certain information regarding our disclosure of the information you provide through the Services to third parties for their direct marketing purposes. To make such a request, please contact us at privacy@greatgrants.ai.

Authorized Users should contact the organization with any questions or requests to exercise these rights. Otherwise, you can contact privacy@greatgrants.ai to submit a privacy request. Note that we do not have access to or any control over your Personal Information processed by an organization or any third party.

9. Data Security

GreatGrants implements reasonable and appropriate security procedures and practices to help protect Personal Information on our systems from unauthorized or illegal access, destruction, use, modification, or disclosure. We employ a series of security measures, including, but not limited to, data encryption in transit and at rest, role-based access controls, authentication requirements, periodic security reviews, and an incident response process. GreatGrants limits personnel access to Personal Information and we ensure that personnel who are responsible for handling Personal Information and privacy inquiries are informed of applicable privacy law requirements.

However, no data transmission or data storage is 100% secure. It is the organization’s responsibility to keep Organization Data secure from unauthorized access. GreatGrants cannot guarantee that unauthorized third parties will not defeat our security measures or use your Personal Information for improper purposes. Please take all available steps to protect against unauthorized access to Organization Data, such as choosing a robust password, not sharing login credentials with others, and signing off after completing a session. If you suspect a security incident or vulnerability related to the Services, please contact privacy@greatgrants.ai.

10. Third Party Services

This Privacy Policy does not apply to any third-party website, platform, or service. If you click a link on the Services, you may be redirected to a third-party website with privacy practices that differ from ours. If you submit Personal Information to any third-party websites or platforms, your information is governed by the privacy policies of those third parties, and we have no control over their privacy practices. You are encouraged to familiarize yourself with the privacy practices of these third parties before submitting your Personal Information through third-party services.

11. Privacy Policy Updates

We may periodically update this Privacy Policy. If we make any material changes, we will notify you by updating this posting or by posting notice in the Services. You are responsible for periodically checking this Privacy Policy for changes. Your continued use of the Services after the “Last Updated” date above will constitute your acceptance of and agreement to be bound by the posted version of this Privacy Policy. For material changes that require consent under applicable law, we will obtain your consent before the changes take effect. If you do not agree to our privacy practices as described in the current version of this Privacy Policy, you should discontinue using the Services.

How to Contact Us

If you have questions regarding this Privacy Policy, your data, or would like to submit a privacy-related request, you may contact us at:

privacy@greatgrants.ai or by mail at: GreatGrants, 1229 38th Ave N, PMB 188, Myrtle Beach 29577

‍