Privacy Policy

Last updated: July 26, 2026

1. What we collect

Account data: your email address and authentication credentials.
Organization profile: organization name, type, state, interest categories, and keywords you provide during onboarding.
Usage data: events like scans run, searches saved, and pages viewed, used to operate and improve the product and for the admin usage dashboard.
Billing data: if you subscribe to Pro, Stripe processes and stores your payment details — we only receive your subscription status and Stripe customer/ subscription IDs, never your full card number.

2. How we use it

To run the grant-matching engine against your organization profile, send you match alerts and deadline reminders (if enabled), operate billing, and understand product usage. We do not sell your personal data to third parties.

3. Who we share it with

We use the following processors to operate GrantLabs: Supabase (database, authentication, hosting), Stripe (payment processing), Resend (transactional and alert email delivery), and Vercel (application hosting). Grant listings themselves come from the public, official Grants.gov API. We don't share your personal data with any other third party except as required by law.

4. Email preferences

Match alert and digest emails include a one-click unsubscribe link. Unsubscribing stops marketing/alert email but never account-security or billing-receipt email, which we send regardless of your marketing preference.

5. Data retention and deletion

You can delete your account and all associated data (organization profile, saved searches, match history) at any time from your dashboard settings. Deletion is immediate and permanent.

6. Security

Your data is protected by database-level row security so only you (and, for support purposes, GrantLabs administrators) can access it. Secrets and payment data never touch our client-side code.

7. Contact

Questions about this policy or your data: hello@digitallabs.pro