Privacy Policy
Last updated: 2026
What we collect
When you sign up we collect your name, email address, and (if you authenticate with Google) your avatar. As you use GrantFlow you voluntarily provide information about your business or school in your profile, plus any documents you upload to the vault.
How we use it
We use your profile and documents to surface relevant grants and to generate application drafts. When you request an AI generation, the sanitized profile and grant details are sent to Anthropic for that single request. We do not sell your data and we do not allow providers to use it for model training.
Where it lives
Account data is stored in Supabase (PostgreSQL) with Row Level Security so other users cannot access your records. Uploaded documents are stored in a private Supabase Storage bucket scoped to your user ID.
Your rights
You can export or delete your data at any time from /dashboard/settings. Account deletion removes your profile, applications, tracker, and documents.
Contact
Questions? Reach us at privacy@grantflowai.com.