Privacy Policy

1. Introduction

GrantSense AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at grantsense.com (the "Service").

This policy complies with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

• NGO Details: Organization name, registration number, state, district, sectors, contact information
• User Account Data: Name, email address, phone number, password (encrypted)
• Profile Information: NGO documents, certifications, beneficiary details, project descriptions
• Partner Information: Name, email, bank account details (for commission payments), KYC documents
• Payment Data: Transaction IDs, payment status, subscription details (we do NOT store card numbers or CVV)
• Usage Data: Search queries, grant views, eligibility checks, proposal generation requests

2.2 Technical Data

• IP addresses, browser type, device information
• Access times, pages viewed, navigation patterns
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information for the following purposes:

• Grant Matching: To provide personalized grant, CSR, and tender recommendations based on your NGO profile
• Eligibility Analysis: To assess your organization's eligibility for funding opportunities using AI
• Proposal Automation: To generate AI-assisted grant proposals and documentation
• Account Management: To create and manage your user account and subscriptions
• Payment Processing: To process subscription payments and partner commissions
• Communication: To send grant alerts, notifications, and important updates
• Platform Improvement: To analyze usage patterns and improve our services
• Security & Compliance: To detect fraud, prevent abuse, and comply with legal obligations

4. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Data may be retained for up to 3 years after account closure
• Security Logs: Retained for a minimum of 180 days as per Indian cybersecurity best practices
• Financial Records: Retained for 7 years as per Indian tax and accounting laws
• Legal Holds: Data subject to legal proceedings retained until resolution

5. Third-Party Services

We use the following third-party services that may collect or process your data:

• OpenAI: For AI-powered grant matching, eligibility analysis, and proposal generation
• Razorpay: For secure payment processing (payment gateway)
• Telegram: For automated notifications and grant alerts
• Email Service Providers: For transactional emails and notifications
• Hosting Provider (Vercel): For platform hosting and content delivery
• Turso (Database): For secure data storage

These third parties have their own privacy policies and are bound by confidentiality agreements. We do not sell your personal data to third parties.

6. Your Rights Under Indian Law

Under the Information Technology Act, 2000, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Right to Data Portability: Request export of your data in a machine-readable format
• Right to Withdraw Consent: Withdraw consent for data processing (may affect service availability)
• Right to File Grievance: Contact our Grievance Officer (details below)

To exercise any of these rights, please contact us at support@grantsense.com

7. Cookies and Tracking

We use cookies and similar tracking technologies for:

• Authentication and session management
• Security and fraud prevention
• Analytics and platform performance monitoring
• Remembering your preferences and settings

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

8. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of sensitive data in transit (HTTPS/TLS) and at rest
• Password hashing using industry-standard algorithms
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure API key management for third-party integrations
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending email notifications to registered users
• Displaying a notice on our platform

Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Grievance Redressal / शिकायत निवारण

As per the Information Technology Act, 2000 and Rules, you may contact our Grievance Officer for any privacy-related concerns:

12. Contact Us

For questions about this Privacy Policy or our data practices, please contact us: