The short version
GrantLink exists to help small nonprofits find funding, prove impact, and focus on what matters most. We don't sell your data, we don't run ads, and we don't share your information with third parties for marketing. Your data is yours.
What we collect
- Account information — If you create an account, we store your email address and an encrypted password (managed by Supabase Auth). We never see or store your password in plain text.
- Email subscriptions — If you sign up for grant alerts, we store your email and focus area preferences so we can send you relevant opportunities.
- Data you upload — Impact data (CSVs), saved opportunities, application tracking notes, and organization profiles are stored in your account and only accessible by you.
- Opportunity submissions — If you submit a funding opportunity, we store the funder and opportunity details you provide.
Analytics
We use two analytics tools to understand how people use GrantLink so we can improve it:
- Plausible Analytics — A privacy-friendly tool that counts pageviews and traffic sources without cookies or personal identifiers. No data is shared with advertisers.
- Google Analytics — Tracks pageviews, session duration, and general usage patterns. Google may set cookies and process data per their privacy policy. We do not use Google Analytics to target ads or share data with third parties.
We do not use advertising pixels, browser fingerprinting, or cross-site tracking for marketing purposes.
How we use your data
- To send you grant alerts you subscribed to
- To power your dashboard (saved grants, applications, impact data)
- To send deadline reminders for opportunities you've saved
- To improve GrantLink (we may look at aggregate, anonymous usage patterns)
We will never sell, rent, or share your personal data with advertisers, data brokers, or any third party for their own purposes.
Third-party services
We use a small number of services to operate GrantLink:
- Supabase — Database and authentication. Your data is stored in a Supabase project we control. Supabase does not use your data for their own purposes.
- Resend — Email delivery. We send emails (alerts, reminders) through Resend. They process your email address solely to deliver messages on our behalf.
- Vercel — Hosting. GrantLink is hosted on Vercel. They may process standard server logs (IP addresses, request timestamps) as part of infrastructure operations.
- Plausible Analytics — Cookie-free, privacy-friendly pageview analytics. No personal data is collected or shared.
- Google Analytics — Usage analytics. Google processes data per their own privacy policy. We use it only to understand how GrantLink is used, not for advertising.
Cookies
GrantLink uses essential cookies for authentication (keeping you logged in) and analytics cookies from Google Analytics to understand general usage patterns. We do not use advertising cookies or sell cookie data to third parties.
Your rights
- Delete your account — You can delete your account and all associated data from your dashboard settings. This is permanent and immediate.
- Unsubscribe — Every email includes an unsubscribe link. One click removes you from all future emails.
- Export your data — Contact us at grantlinkfeedback@gmail.com and we'll provide a copy of your data.
Data retention
We keep your data for as long as your account is active. If you delete your account, we permanently remove all your data from our systems. Email subscriber data is retained until you unsubscribe, at which point your email is marked inactive and no longer used.
Changes to this policy
If we make meaningful changes to this policy, we'll update the date at the top and notify active users by email.