Privacy Policy

We collect the following categories of information:

• Account & profile data: name, email address, password (stored only as a hash), role (applicant, donor, or admin), country, biography, organization details, and any profile information you provide.
• Authentication data: if you sign in with Google, we receive your Google account email and basic profile details via Google OAuth.
• Application & grant content: proposals, answers, budgets, documents, and other materials you submit or post as part of grants and applications.
• Verification documents: identity, organization, or eligibility documents you upload for verification.
• Payment data: subscription and transaction records. Card details are collected and processed by our payment provider (Paystack); we do not store full card numbers.
• Usage & device data: IP address, browser/user-agent, pages viewed, and actions taken, used for security, analytics, and audit logs.
• Cookies: see the Cookies section below.

• To create and manage your account and authenticate you.
• To operate the Service: posting grants, submitting and reviewing applications, verification, collaboration, and notifications.
• To process subscriptions and payments and to send related receipts and reminders.
• To provide AI-assisted features (for example, idea validation and application ranking).
• To keep the Service secure, prevent fraud and abuse, and enforce rate limits.
• To maintain audit logs, comply with legal obligations, and resolve disputes.
• To communicate with you about your account, security, and service updates.

We do not sell your personal data. We share information only as needed to run the Service:

• Other users: profile and application/grant content is shared with the counterparties it is intended for (e.g. a donor reviewing your application, or applicants viewing a published grant).
• Service providers: Paystack (payments), Cloudinary (file storage), Google (authentication and AI features), and our email provider, each acting on our behalf.
• Legal: where required by law, regulation, legal process, or to protect the rights, safety, and security of users and the Service.

We keep personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we remove or anonymize your personal data, except where we are required to retain certain records (for example, transaction records for accounting and legal compliance).

We use industry-standard measures to protect your data, including encrypted transport (HTTPS), hashed passwords, scoped access controls, and short-lived authentication tokens stored in secure, HttpOnly cookies. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data (much of this you can update in your profile).
• Delete your account and associated personal data.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.

To exercise these rights, contact us at the address below.

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. These are essential to the Service and cannot be disabled without affecting core functionality. We do not use cookies to sell your data.

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We and our service providers may process and store data in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in line with this policy.

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date. Significant changes may be communicated to you directly.

Questions about this policy or your data? Contact us at [email protected].