01Information We Collect
We collect information in three ways: information you give us, information we collect automatically, and information we receive from third parties.
- Account & profile data: name, work email, organization, role, and password when you create an account or request a demo.
- Award & compliance data: the awards, grants, expenses, reports, documents, and related records you and your team enter into the Services ("Customer Data").
- Billing data: where you subscribe to a paid plan, billing contact details and the last four digits and card type of your payment method (full card numbers are handled by our payment processor, not stored by us).
- Usage & device data: pages viewed, features used, approximate location derived from IP address, browser type, device identifiers, and log data collected automatically.
- Communications: messages you send us, support requests, and demo-scheduling details.
02How We Use Information
We use the information we collect to:
- Provide, operate, secure, and improve the Services;
- Authenticate users and administer accounts and subscriptions;
- Generate the reports, dashboards, and compliance tracking you request;
- Respond to demo requests, support tickets, and other communications;
- Send service, security, and administrative notices, and, where permitted, product updates you can opt out of;
- Detect, prevent, and investigate fraud, abuse, and security incidents; and
- Comply with legal obligations and enforce our agreements.
We do not sell your personal information, and we do not use Customer Data to train third-party advertising models.
03Legal Bases for Processing
Where the GDPR or similar laws apply, we process personal data on the following bases: performance of our contract with you; our legitimate interests in operating and improving the Services; your consent (which you may withdraw at any time); and compliance with legal obligations.
05Data Retention
We retain personal data for as long as your account is active or as needed to provide the Services, then for the period required to meet legal, tax, audit, and compliance obligations. Customer Data is retained per your subscription and can be exported or deleted on request. When data is no longer needed, we delete or anonymize it.
06Security
We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit, access controls, and audit logging. No method of transmission or storage is perfectly secure, but we work continuously to protect your data and will notify you of material breaches as required by law.
07Your Rights & Choices
Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. You can exercise these rights by contacting us at the address below. You may also opt out of non-essential emails at any time using the unsubscribe link.
09International Transfers
We may process and store information in countries other than where you live. Where we transfer personal data across borders, we use appropriate safeguards such as standard contractual clauses.
10Children's Privacy
The Services are intended for organizations and their staff, not for children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.
11Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the Services or by email.
12Contact Us
Questions about this Policy or your data can be sent to our team, and we will respond within a reasonable timeframe.