Privacy Policy

Last updated: 7/9/2026

This Privacy Policy describes how GrantOrb Inc (“GrantOrb”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or use our services at https://grantorb.com and https://app.grantorb.com, connect GrantOrb to a third-party AI assistant, or otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as a user of the Services, whether you are a customer, an organization’s team member, a website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

What GrantOrb Does

GrantOrb is an AI-assisted platform that helps nonprofits, consultants, and organizations find grant funding, draft grant proposals and letters of inquiry, and identify government procurement opportunities. Delivering these Services involves processing the information you provide about your organization and its work, and using artificial intelligence to search for opportunities and generate documents on your behalf.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

What Personal Information We Collect

The types of personal information we obtain depend on how you interact with the Services. When we use the term “personal information,” we mean information that identifies, relates to, describes, or can reasonably be associated with you or your organization.

Information you provide directly to us:

• Account details — your name, email address, password, and the organization(s) you belong to.
• Organization profile — information you enter about your organization to power grant matching and drafting, such as mission, programs, location, the communities you serve, budget information, and thematic focus.
• Documents and content — grant proposals, letters of inquiry, reports, project ideas, notes, and other content you create, upload, or generate within the Services.
• Payment information — processed by our payment processor (see Sub-processors below). We do not store full card numbers on our systems.
• Support communications — the information you choose to include when you contact us or send a message through the Services.

Information we collect automatically:

• Usage data — information about how you access and use the Services, including device and browser information, IP address, and interactions with features, collected through cookies and similar technologies.

How We Use Your Personal Information

• Providing the Services — to create and manage your account, run profile-matched grant searches, generate and validate documents, surface procurement opportunities, and otherwise operate the platform under our contract with you.
• AI processing — to generate grant matches, proposals, and related outputs, we send relevant portions of your organization profile, documents, and prompts to the AI sub-processors listed below. This processing happens to fulfill your requests.
• Communicating with you — to provide customer support, send you notifications about your account and activity, and respond to your requests.
• Marketing — to send you product updates and promotional communications, which you can opt out of at any time.
• Security and fraud prevention — to detect, investigate, and take action regarding possible fraudulent, illegal, or malicious activity, and to keep the Services secure.
• Legal and compliance — to comply with applicable legal obligations and to enforce our terms.

The GrantOrb AI Assistant Connector (MCP)

GrantOrb offers an optional connector that lets you use GrantOrb from inside a third-party AI assistant — such as Anthropic’s Claude or OpenAI’s ChatGPT — built on the open Model Context Protocol (MCP). This section explains how your information is handled when you use it.

• What you authorize. When you connect GrantOrb to an AI assistant, you sign in to GrantOrb and approve access through a standard OAuth authorization flow. No API keys, passwords, or tokens are ever shared with, or copied into, the AI assistant. The connection grants the assistant permission to act within the GrantOrb account you sign into, and only that account.
• What the connector can access. Once connected, and at your direction, the assistant can perform the same actions available in your GrantOrb dashboard — for example, reading and updating your organization profile, running grant searches, creating and reviewing documents, and reading procurement matches — scoped to the account you selected.
• What data flows to the AI assistant. When you ask the assistant to perform a task, information necessary to complete it (for example, grant matches or generated document content) is returned to the AI assistant you chose. That assistant is operated by a third party (such as Anthropic or OpenAI) under its own privacy policy and terms, which govern how it handles the conversation on its side. We encourage you to review the privacy policy of whichever AI assistant you connect.
• Revoking access. You can disconnect the connector at any time from within the AI assistant, from your GrantOrb account settings, or by contacting us. Disconnecting revokes the assistant’s access to your GrantOrb account.

AI and Data — Our Commitments

• We do not sell your personal information.
• We do not use your content to train GrantOrb’s own models.
• Our AI sub-processors process your data through their business APIs to return results to you. Under those API terms, data submitted through the API is not used to train the providers’ publicly available models. We use AI to generate outputs; you remain responsible for reviewing them before use.

Sub-processors

We rely on trusted third-party service providers (“sub-processors”) to operate the Services. They process personal information only as needed to provide their service to us, under contractual confidentiality and security obligations. Our principal sub-processors are:

• OpenAI — AI content generation for drafting and related outputs.
• Google Cloud (including Gemini models) — AI-assisted research and search, and cloud hosting infrastructure.
• MongoDB (Atlas) — database hosting for your account and content.
• Stripe — payment processing.
• Mailjet — transactional and marketing email delivery.

We may update this list as our providers change; material changes will be reflected here.

How We Disclose Personal Information

In addition to the sub-processors above, we may disclose your personal information:

• When you direct or consent to the disclosure — for example, when you connect a third-party AI assistant as described above.
• With our affiliates or within our corporate group, in our legitimate interest to operate the business.
• In connection with a business transaction such as a merger, acquisition, or bankruptcy.
• To comply with applicable legal obligations (including to respond to subpoenas, search warrants, and similar lawful requests), to enforce our terms, and to protect or defend the Services, our rights, and the rights of our users or others.

We have disclosed the following categories of personal information for the purposes described above: identifiers (contact and account details); organization profile and document content you provide; and internet or network activity (usage data). Categories of recipients include the sub-processors and other parties listed in this Policy.

Cookies

Like many websites, we use cookies to power and improve the Services (including to remember your preferences), and to run analytics to better understand how the Services are used. Most browsers accept cookies by default, but you can set your browser to remove or reject cookies. Blocking cookies may cause some features to work incorrectly or become unavailable.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us using the details below and we will delete it.

Security and Retention of Your Information

We protect your information with administrative, technical, and physical safeguards. Data is encrypted in transit using TLS, access to GrantOrb accounts is authenticated, and the AI assistant connector uses OAuth authorization rather than shared secrets. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information appropriately.

We retain your personal information for as long as needed to maintain your account and provide the Services, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your account and associated data at any time using the contact details below; we will delete or de-identify it except where we are required to retain it by law.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information: to access or know what we hold, to delete it, to correct it, to obtain a portable copy, to opt out of “sale,” “sharing,” or targeted advertising, to limit use of sensitive information, to restrict or object to processing, and to withdraw consent where we rely on it. If you visit our Site with a Global Privacy Control signal enabled, we will treat it as an opt-out request for the relevant browser and device where required.

To exercise any of these rights, contact us using the details below. We will not discriminate against you for exercising your rights, and we may need to verify your identity before responding. You may also opt out of promotional emails at any time using the unsubscribe link in those emails; we may still send non-promotional messages about your account.

Complaints

If you have a complaint about how we process your personal information, please contact us using the details below. If you are not satisfied with our response, you may have the right to appeal, or to lodge a complaint with your local data protection authority.

International Users

We are based in the United States, and we may transfer, store, and process your personal information in the United States and other countries, including by our service providers. Where required, we implement appropriate safeguards for such transfers.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

GrantOrb Inc. Email: support@grantorb.com