Privacy Policy

1. What we collect

• Account details. Your name, email address, role, and organization, and your password — stored only as a salted hash, never as readable text.
• Organization profiles. Legal name, mission and story, place, topics, budget size, the needs you post, and the documents you choose to save to your library (such as a determination letter, a W-9, a Form 990, financial statements, or budgets).
• Verification data. Your organization’s EIN (employer identification number) and the results of the checks run against it — the legal name, tax-exempt status, and deductibility shown in the IRS tax-exempt organization records, profile and transparency information from Candid, and school or district directory records — plus whether your email domain matches your organization.
• What you create on the platform. Grants and their rules, applications and their answers, scores and decisions recorded by funders, messages sent through the platform, meeting requests, and post-award check-ins.
• Usage data. The pages and features used, actions taken in an account, and the basic technical information (such as browser type) needed to run and secure the service. Activity inside an account is also written to an audit log, so there is a record of who saw what, and when.

When a funder pays — a subscription, or an award paid through the platform — Stripe collects the payment details. We receive the confirmation and the record of what was paid; we never receive the full card number.

2. What we never collect

• Student information — none. No student names, no photos of identifiable students, no grades, and no student records exist anywhere on GrantTitan. That is a design rule of the platform, not a setting: there is no field for them, and teachers are asked not to put them in any field.
• Card numbers. Payments are handled by Stripe. GrantTitan never sees, stores, or transmits a full card number.

3. How information is used

Information is used to operate, verify, and secure the service — and for nothing else. That means: showing profiles and needs to the audiences the owner chose; checking eligibility against funders’ published rules; pre-filling and delivering applications; running the safety checks on messages; sending notices about grants, applications, and check-ins; keeping the audit log; and fixing problems when something breaks. Your information is never sold — not sold, not rented, and not used for advertising.

4. Who can see what

• The public layer of a profile — the organization’s story, where it works, its topics, and its website — is visible on the platform, because being findable is the point of the board.
• Contact details appear on a public profile only when the organization turns sharing on. Sharing starts off.
• The applicant-only layer — an organization’s EIN, budget size, saved documents, and direct contact details — is never public. It is visible solely to a funder reviewing an application that organization sent to that funder’s grant, and each view of a document is written to the audit log.
• Messages are visible to the two sides of the conversation they belong to. GrantTitan may review a conversation that has been reported, to enforce the safety rules.

5. Who processes information for us

A short list of companies handles information only to do a specific job for GrantTitan:

• Vercel — hosts the website and the platform.
• Stripe — processes payments, subscriptions, and payouts.
• FormSubmit — delivers messages sent through the support form to our support inbox.
• Porkbun — provides email forwarding for support@granttitan.com.

Each of them receives only what its job needs. If this list changes, this page changes with it.

6. How information is protected

Connections to GrantTitan are encrypted in transit, and stored information is encrypted at rest. Passwords are kept as salted hashes, never as readable text. Access inside the platform is role-based and least-privilege: each person — a teacher, a reviewer, a funder administrator — sees only what their role needs, and multi-factor authentication is available and encouraged. Documents are shared per application, not in bulk, and every view is logged. The fuller statement of these practices is on the Trust & Security page.

7. Your choices and rights

• See and update your account and profile information at any time, and correct a fact that is wrong.
• Control the public sharing of your contact details, and choose, for each need you post, who can see it.
• Export your organization’s data, and close the account. Closing an account never costs a fee.
• Ask what information we hold about you or your organization, and ask for it to be deleted — email support@granttitan.com and we will act on the request. Where a record must be kept briefly to close out an award or meet a legal duty, we will say so plainly.

GrantTitan accounts are for adults acting on behalf of an organization. As Section 2 states, the platform collects no information about students at all.

8. Changes and contact

When this policy changes, the new version is posted on this page with a new date. Changes apply from that date forward. Questions about privacy, or about anything in this policy: support@granttitan.com.