GrantGettr is a product of Voss AI Consulting. We are committed to protecting your privacy and handling your data transparently. This policy explains what information we collect, how we use it, who we share it with, and what rights you have.
If you have questions, email us at rob@robvoss.com or visit vossaiconsulting.com.
Data We Collect
Account Information
Your name and email address, collected when you create your GrantGettr account.
Organization Profile
Information you provide to power grant matching: your organization name, type, mission statement, operating budget, geographic scope, demographics served, and strategic goals.
AI-Extracted Profile
When you describe your organization or project in free text, our AI (Claude by Anthropic) extracts structured fields including sector verticals, keywords, a problem statement, target audience, and funding stage. You can review and edit everything the AI extracts before it is saved.
Grant Application Data
Drafts, edits, section content, budget data, and exported documents you create inside the platform. This content belongs to you.
Usage Data
Which grants you have searched or saved, applications you have generated, features you have used, and session timing. We use this to improve matching quality and track your subscription usage.
Payment Information
All payment processing is handled entirely by Stripe. We never see, transmit, or store your credit card number or bank details. We receive only a subscription status and customer identifier from Stripe.
How We Use Your Data
- ✓To match you with grants and federal contracts relevant to your organization.
- ✓To generate AI-assisted grant application drafts tailored to your profile.
- ✓To track your subscription usage against your plan's monthly application limit.
- ✓To process billing and manage your subscription through Stripe.
- ✓To improve our grant matching algorithm and platform features.
- ✓To send account-related communications (subscription confirmations, usage alerts, policy updates).
- ✓We do not use your data for advertising, and we do not sell it to third parties.
Third-Party Services
We use the following services to operate GrantGettr. Each receives only the data necessary to perform its function.
Anthropic (Claude AI)
Receives your free-text descriptions and organization data to extract your grant profile and draft application sections. Anthropic does not use API-submitted data to train its models. See Anthropic's usage policies at anthropic.com.
Stripe
Handles all payment processing. We never store credit card numbers. Stripe is PCI DSS compliant.
Supabase
Hosts our PostgreSQL database. Your data is encrypted at rest (AES-256) and in transit (TLS). Row-level security ensures each account can only access its own data.
HubSpot
Stores contact information, organization profile fields, and GrantGettr usage metrics such as matched grants, saved grants, application counts, reviewer-score activity, and estimated pipeline value. We use this for customer relationship management and account communications. We do not share your application draft content with HubSpot.
Vercel
Hosts the GrantGettr web application. No user data is stored on Vercel servers beyond standard request logs (IP address, URL, timestamp), which are retained for 30 days.
SAM.gov
We query SAM.gov's public federal contract database to surface contract opportunities. No user data is sent to SAM.gov — we query public APIs only.
Data Retention
Account data is retained for as long as your account is active. If you close your account, your profile data is deleted within 30 days.
Application drafts are retained for 12 months after the date of last edit. You can delete individual applications at any time from your dashboard.
Deletion requests are honored within 30 days. Email rob@robvoss.com with “Delete My Data” in the subject line.
Your Rights (GDPR & CCPA)
Depending on where you live, you may have some or all of the following rights regarding your personal data. We honor these rights regardless of your location.
Right to Access
Request a copy of the personal data we hold about you.
Right to Correct
Request correction of inaccurate or incomplete data.
Right to Delete
Request deletion of your personal data ("right to be forgotten").
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restrict
Ask us to stop processing your data while a dispute is resolved.
Right to Object
Object to processing based on legitimate interest.
Withdraw Consent
Withdraw consent at any time where processing is consent-based.
No Sale of Data
California residents: we do not sell personal information.
EU/UK residents: Data is processed under the lawful bases of contract performance (to provide the service you signed up for) and legitimate interest (to improve matching and platform quality). To exercise any right or lodge a complaint, email rob@robvoss.com with “GDPR Request” in the subject line.
Security Measures
- ✓All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
- ✓Database data is encrypted at rest using AES-256.
- ✓Passwords are never stored in plain text — we use hashed authentication.
- ✓API keys and secrets are stored in environment variables, never in source code.
- ✓Row-level security in our database ensures each account can only access its own data.
- ✓We apply security patches and dependency updates on a regular schedule.
Cookies & Local Storage
Local Storage:We use your browser's localStorage to persist your session identifier (gg_userId) so you remain logged in between visits. No cookies are set for this purpose.
Analytics: Vercel Analytics may set performance cookies to measure page load times and aggregate usage patterns. No personally identifiable information is included in these measurements.
No advertising cookies: We do not use advertising networks, retargeting pixels, or behavioral tracking cookies of any kind.
Children's Privacy
GrantGettr is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal data, please contact us at rob@robvoss.com and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. Continued use of GrantGettr after the effective date of any update constitutes your acceptance of the revised policy.
Contact Us
For privacy questions, data access requests, or GDPR/CCPA requests:
Voss AI Consulting
Email: rob@robvoss.com
Website: vossaiconsulting.com
For GDPR requests, please include “GDPR Request” in your email subject line.