Legal

Privacy Policy

Effective date: April 14, 2026 · ZJN Consulting LLC

GrantComply ("we," "us," or "our") is operated by ZJN Consulting LLC. This Privacy Policy explains how we collect, use, and protect information when you use the GrantComply platform at app.grantcomply.app.

We take the privacy of public sector data seriously. Your jurisdiction's data is isolated from all other organizations and is never shared, sold, or used to train AI models.

1. Information We Collect

We collect the following categories of information:

• Account information — name, email address, job title, and jurisdiction name provided during signup
• Jurisdiction data — demographics, grant information, procurement records, project details, and documents you upload
• Usage data — pages visited, features used, and actions taken within the platform (used to improve the product)
• Payment information — billing details processed by Stripe. We do not store credit card numbers on our servers.
• Communications — emails you send to us and support requests

2. How We Use Your Information

• To provide and operate the GrantComply platform
• To send grant match notifications and product updates you've opted into
• To respond to support requests
• To process billing and manage subscriptions
• To improve platform features based on aggregate usage patterns
• To comply with legal obligations

3. Data Isolation and Security

Each jurisdiction's data is strictly isolated using row-level security (RLS) enforced at the database level. No user can access another organization's data. Documents, grant records, procurement history, and AI-generated content are scoped exclusively to your jurisdiction.

We use industry-standard security practices including encrypted connections (HTTPS/TLS), secure cloud infrastructure via Supabase, and access controls limiting which team members can view your data.

4. AI and Third-Party Services

GrantComply uses the following third-party services to operate:

• OpenAI — powers AI features including grant Q&A, procurement guidance, and document generation. Content sent to OpenAI is subject to their data processing agreement. We do not use your data to train OpenAI models.
• Supabase — database and file storage hosting
• Stripe — payment processing
• Resend — transactional email delivery
• Vercel — application hosting
• PostHog — product analytics and session replay. PostHog collects anonymous usage events, page views, and session recordings to help us understand how the platform is used and identify issues. No personally identifiable information is shared with PostHog beyond anonymous session identifiers. See PostHog's Privacy Policy.

We do not sell your data to any third party, and we do not permit third parties to use your data for their own marketing purposes.

5. Public Transparency Pages

If your jurisdiction enables the Public Transparency feature, certain information — including active grant names, project descriptions, and budget utilization — will be publicly visible at grantcomply.app/transparency. You control this setting and can disable it at any time from your Jurisdiction Profile.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days to allow for reactivation, after which it is permanently deleted upon request. Documents stored in our file storage system are deleted when you delete them or when your account is closed.

7. Your Rights

You have the right to:

• Access the data we hold about your jurisdiction
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, contact us at hello@grantcomply.app.

8. Cookies

We use essential cookies to maintain your login session and anonymous analytics cookies via PostHog to understand how the platform is used. We do not use advertising cookies or track you across other websites. You can disable cookies in your browser settings, but this will prevent you from staying logged in.

9. Children's Privacy

GrantComply is designed for use by government professionals and is not directed at children under 13. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users by email of material changes at least 30 days before they take effect. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

11. Contact