Privacy Policy
Last updated: February 15, 2026
1. Information We Collect
We collect information that you provide directly to us, including:
- Account Information: Name, email address, company name, and business details
- Business Profile: Province, city, industry sector, headcount, revenue, and incorporation details
- Application Documents: Files you upload for program applications
- Usage Data: Information about how you interact with the Service
We also automatically collect certain information when you use the Service, such as IP address, browser type, device information, and pages visited.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Assess your eligibility for funding programs
- Generate funding estimates and recommendations
- Send you important updates about programs and deadlines
- Respond to your inquiries and provide customer support
- Analyze usage patterns and improve user experience
- Detect and prevent fraud, abuse, and security issues
We do not sell your personal information to third parties.
3. Data Storage and Security
Your data is stored securely using industry-standard encryption and security practices:
- All data transmissions are encrypted using TLS/SSL
- Passwords are hashed using bcrypt with salt
- Documents are stored in encrypted cloud storage (Cloudflare R2)
- Database access is restricted and logged
- Regular security audits and updates
We use Supabase (PostgreSQL) for database hosting and Cloudflare Workers for edge computing, both of which maintain SOC 2 compliance.
4. Third-Party Services
We use the following third-party services to operate the Service:
- Supabase: Database and authentication services
- Cloudflare: Content delivery, edge computing, and storage
- Google AI (Gemini): Document extraction and analysis
These services have their own privacy policies and data handling practices. We recommend reviewing their policies if you have concerns.
5. Your Rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your account and associated data
- Export your data in a portable format
- Opt-out of non-essential email communications
- Withdraw consent for data processing (where applicable)
To exercise these rights, please contact us at privacy@grantandfunding.com. We will respond within 30 days.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory purposes.
7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice in the Service. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
8. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
Email: privacy@grantandfunding.com
General inquiries: hello@grantandfunding.com