Privacy Policy

Last updated: September 2025

At Grant Flow, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data.

Who We Are

Grant Flow provides services and software to help nonprofit organizations write, manage, and track grant applications and awards. Our website address is https://www.grantflow.com.

Information We Collect

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, along with the visitor’s IP address and browser user agent string to help with spam detection.

  • An anonymized string created from your email address (a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/.
  • After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the site can download and extract location data from images.

Cookies

  • If you leave a comment, you may opt in to saving your name, email address, and website in cookies for convenience. These cookies last one year.
  • A temporary cookie is set when you visit our login page to determine if your browser accepts cookies; it is discarded when you close your browser.
  • When you log in, we set cookies to save your login information and display preferences. Login cookies last for two days, display options cookies last for a year. If you select “Remember Me,” your login persists for two weeks. Logging out removes these cookies.
  • If you edit or publish an article, an additional cookie is saved containing the post ID of the article you edited. This cookie expires after one day.

Embedded Content from Other Websites

Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves as though you have visited the other website directly. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with the embedded content.

Integration with Google Services (Google Drive)

Our software may allow you to connect your Google account to Grant Flow to access and manage files stored in Google Drive that are relevant to grant applications. When you connect your Google account, we may request access to the following:

  • Google Drive file metadata (file name, type, last modified date).
  • Google Drive file contents only when you explicitly choose to upload or link files to Grant Flow.
  • Basic profile information such as your Google account email address, for account linking and authentication.

We access this data solely to enable you to upload, organize, and manage grant-related documents within our platform. We do not access or use any other Google account data.

You may revoke Grant Flow’s access to your Google account at any time by visiting your Google Account Permissions page.

How We Protect Your Data

We recognize that grant-related documents and data may include sensitive or confidential information. To protect your information, including data retrieved through Google Drive, we implement the following safeguards:

  • Encryption: All data in transit between your device, Google services, and our platform is encrypted using HTTPS/TLS. Files stored in our system are encrypted at rest.
  • Access Controls: Only authorized personnel with a need to know can access user data, and access is strictly logged and monitored.
  • Limited Use: We only use Google user data for the purpose of providing the features you have chosen (e.g., storing and managing grant-related files). We do not use Google data for advertising or marketing.
  • Data Retention: Files and associated data remain under your control and are retained only as long as your organization maintains an active account with Grant Flow, unless you choose to delete them earlier.
  • User Control: You can disconnect your Google account or delete uploaded files at any time from within the platform.

What We Won’t Do with Your Data

  • We do not sell your company or personal data—including Google user data—to third parties.
  • We do not use Google user data to build advertising profiles or for marketing purposes.
  • We do not share Google Drive contents with third parties except as required by law or with your explicit consent.

Who We Share Your Data With

We only share your data with trusted third parties in the following circumstances:

  • Service Providers: With companies that help us operate, improve, or support our services (e.g., cloud storage providers, payment processors, customer support platforms). These providers are required to handle your data securely and only for the purposes we specify.
  • Legal Compliance: If required by law, or if we believe it’s necessary to comply with legal obligations, respond to lawful requests, or protect our rights, property, or safety.
  • Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that process. We will notify you if such a transfer occurs and explain your choices.
  • With Your Consent: If we want to share your data in any other way, we will ask for your explicit consent first.

Data Retention

  • Comments: Retained indefinitely, so follow-up comments can be recognized and approved automatically.
  • Grant Flow Software Users: All company-related data input into the software will be returned to you within six months of termination of your software agreement.
  • Registered Users: Personal information in user profiles is stored as long as your account is active. You may view, edit, or delete your personal information at any time (except for your username). Website administrators may also view and edit that information.

Your Rights Over Your Data

If you have an account on this site, or have left comments, you may request an exported file of the personal data we hold about you, including any data you have provided to us. You may also request that we erase personal data we hold about you, except where we are legally obligated to retain it.

Contact Us

If you have any questions about this Privacy Policy or how your data is handled, you may contact us at:

Email: [email protected]