GrantAPT Privacy Notice

This Notice explains how Eshaan Prashanth, doing business as GrantAPT in North Carolina, USA, handles information through grantapt.com, beta applications, the invitation-only product, and support channels. The Service is for adults acting for authorized organizations in the United States. GrantAPT does not sell personal information or use it for targeted advertising.

Information we collect

We may collect your name, email address, account and organization role, company, city, state or region, country, optional website, application message, organization profile, grant research, applications, awards, drafts, feedback, uploaded documents, support communications, saved preferences, and actions you take in the product. We also process ordinary security and service data such as request identifiers, dates and times, approximate network and browser information available to hosting providers, authentication events, audit records, feature and route events, job status, crash or error details, model/provider metadata, token counts, and estimated cost. We do not intentionally collect device hardware specifications beyond information ordinarily supplied by the browser or included in a diagnostic report you choose to send.

How we use information

We use information to evaluate beta applications; create and secure accounts; provide organization workspaces and grant workflows; perform user-requested features; prevent abuse; diagnose failures; back up and recover the Service; provide support; measure a limited set of product interactions; improve reliability and usability; enforce agreements; respond to verified requests; and comply with law. We rely on providing the requested Service, legitimate operational and security purposes, consent where legally required, and legal obligations as applicable.

AI-assisted processing

An authorized AI command may send the instruction and selected organization content, source text, images, grant material, questions, or drafts needed for that task to the configured model provider. Uploading, viewing, or polling does not itself authorize a new paid AI request. Generated output requires human review. GrantAPT does not use private organization content to train a general-purpose GrantAPT model. Provider processing remains subject to the provider's applicable contract and configured settings.

Google Drive

An organization administrator may connect Google Drive to import organization documents. They can choose individual files through Google Picker or separately authorize read-only search across the connected Drive. GrantAPT reads only the files needed for those selections or searches and does not modify or delete Google Drive files.

Imported copies, their text, and related metadata are stored in the organization's private workspace and may be processed by the configured AI provider for organization context and user-requested grant work. Google data is not sold, used for advertising, or used to train a general-purpose GrantAPT model. Disconnecting Drive stops new access; imported copies remain until they are separately deleted. GrantAPT follows the Google API Services User Data Policy, including its Limited Use requirements.

Analytics and browser storage

GrantAPT may use privacy-limited PostHog events and Cloudflare Web Analytics. PostHog is configured without autocapture, session replay, surveys, persistent analytics storage, or person profiles and does not receive form values, editor content, email addresses, referrers, or full URLs. Cloudflare hosts and protects the site and may process IP address, browser, request, and security information. Necessary session and CSRF cookies authenticate and protect product requests. Local storage may remember appearance settings, the selected organization, and recent grant-search filters. We do not use advertising cookies.

Sharing and processing locations

We disclose information to authorized members of your organization when you save it to shared records; to providers supporting AWS hosting, storage, databases, caching, backup and email, Cloudflare delivery and abuse protection, authentication when enabled, privacy-limited analytics, monitoring, and user-requested AI; when you direct us; or when reasonably necessary to comply with law or protect the Service and others. The primary GrantAPT beta infrastructure is in the United States. A provider may process information from other locations under its terms and lawful transfer mechanisms.

Data minimization and prohibited uploads

Do not submit passwords, access tokens, payment-card or bank-account information, protected health information, Social Security numbers or unnecessary government identifiers, export-controlled information, privileged legal material, sensitive personal information not needed for the grant workflow, or live production data that you cannot safely copy, test, and delete. Submit only information you and your organization are authorized to process.

Retention, security, and data loss

Active account and organization records remain during participation. Individual account closure and organization deletion are separate, identity- and authority-verified processes; shared organization records do not disappear merely because one user leaves. Backups and immutable versions may remain until their normal expiration, and some audit, security, contract, dispute, or legal records may be retained longer. GrantAPT uses safeguards intended to protect information, but no online service is completely secure or immune from interruption, corruption, or loss. Keep independent copies of important source documents and final submissions.

Your choices and requests

You may ask to access, correct, export, or delete personal account information. A verified organization administrator may request an organization-level export, correction, or deletion. Requests are subject to identity, authority, legal-retention, security, and third-party-rights checks. Applicable law may provide additional rights, including rights to appeal or use an authorized agent. GrantAPT will not discriminate against a person for exercising an applicable privacy right. Submit requests via Support or support@grantapt.com.

Changes and contact

We may update this Notice prospectively and will identify the effective date. Material changes to required beta terms or materially different data uses will receive the notice or renewed acceptance required by law and the Service. Contact GrantAPT through Support or support@grantapt.com.