1. Information We Collect

We collect information you provide directly to us, such as when you create an account, update your profile, or communicate with us. This may include:

Contact information (name, email address, phone number)
Organization details
Financial data (integrated via QuickBooks Online)
Usage data and cookies

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send you technical notices, updates, security alerts, and support messages
Respond to your comments, questions, and requests
Analyze trends, usage, and activities in connection with our services

We do not share your personal information with third parties except as described in this policy:

With third-party vendors and service providers who need access to such information to carry out work on our behalf
In response to a request for information if we believe disclosure is in accordance with any applicable law, regulation, or legal process
If we believe your actions are inconsistent with the spirit or language of our user agreements or policies, or to protect the rights, property, and safety of GrantLink or others

4. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction.

5. QuickBooks Online Integration

Our service integrates with QuickBooks Online. When you connect your QuickBooks account, we access and store certain financial data necessary to provide our grant management services. We adhere to Intuit's developer terms and data protection requirements.

6. ChatGPT Integration

When you connect GrantLink to ChatGPT, GrantLink uses OAuth to verify your identity and selected organization. At your request, the integration may share relevant GrantLink records with OpenAI so ChatGPT can answer your question. The integration is read-only by default. Specific supported writebacks, or broader write access, are available only when you explicitly enable them. The integration does not return OAuth tokens, passwords, or raw integration errors as tool data.

7. Service Providers and Recipients

We use service providers for authentication, application hosting, data storage, accounting integrations, support, and user-requested AI interfaces. They process information only to provide those services to GrantLink or as otherwise permitted by their terms and applicable law.

8. Data Retention

We retain account and organization information while your account is active and for as long as reasonably necessary to provide the service, meet legal obligations, resolve disputes, enforce agreements, and protect the service. After an account closure or verified deletion request, we delete or de-identify information unless continued retention is required for those purposes. Residual copies may remain temporarily in routine backups until those backups are overwritten.

9. Your Rights and Controls

You may update, correct, or delete information about you at any time by logging into your online account or by contacting us. You can disconnect GrantLink from ChatGPT in ChatGPT settings and disconnect QuickBooks from GrantLink's integration settings.

10. Cookies

We use cookies and similar technologies to collect information about your activity, browser, and device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

With your permission, we load Google Ads to measure advertising performance. Google receives visit and ad-click information and events when you create an account or successfully submit our contact form. We do not include contact-form contents, email addresses, or financial records in these conversion events. We do not enable personalized advertising through this integration. Learn more about how Google uses information from sites that use its services.

Google Ads does not load before you accept advertising cookies. Use “Cookie settings” at the bottom of public marketing pages to accept or reject them later. Withdrawing consent reloads the page to stop Google Ads; it does not undo data already sent. We save your choice in this browser’s local storage until you change it or clear that storage. This choice controls advertising only, not essential cookies or our existing PostHog product analytics.

With your advertising consent, we also measure trials from ads shown in ChatGPT. We retain OpenAI’s opaque ad-click reference in this browser’s local storage for up to 30 days. When a trial is confirmed, PostHog sends OpenAI that reference, the trial’s subscription item ID, event time, and our website origin. These conversion events do not include names, email addresses, phone numbers, IP addresses, financial records, or a monetary value. We do not install OpenAI’s browser pixel or use automatic customer-data matching. We opt these events out of future user-level personalization. Rejecting advertising cookies removes the retained click reference and stops future delivery; it does not undo events already sent. See OpenAI’s Conversion Terms.

11. Changes to this Policy

We may change this privacy policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, we may provide you with additional notice.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at wes@grantlink.app.