Privacy Policy
Last updated 6 June 2025
1 · Who we are
Grants Finder AI ("we", "us", "our") provides an EU-centric grant-discovery service at grantsfinderai.com and app.grantsfinderai.com (together, the "Services"). We favour EU-based data-processing partners and host our primary systems in Frankfurt-am-Main, Germany.
2 · Personal data we collect
| Purpose | Categories | Retention | |
|---|---|---|---|
| Account & wizard | Company name, VAT-ID, contact name, email, project details | Contract performance 6 (1)(b) | 3 yrs after last activity |
| Payments | Billing address, last 4 card digits, Stripe IDs | Contract 6 (1)(b) / Legal obligation 6 (1)(c) | 10 yrs (tax law) |
| Usage logs | IP, browser UA, pages, timestamps | Legitimate interest 6 (1)(f) (security, analytics) | 30 days (aggregated thereafter) |
| Marketing (opt-in) | Email, name | Consent 6 (1)(a) | Until withdrawal |
| Support | Emails, chat transcripts | Legitimate interest 6 (1)(f) | 2 yrs |
3 · Cookies & trackers
We use functional cookies and PostHog analytics. Non-essential cookies load only after explicit consent via our cookie banner. You can withdraw consent anytime in "Cookie Settings".
4 · How we share data
| Category | Location | Safeguard |
|---|---|---|
| Stripe (payments) | EU & US | 2021 SCC Module 2 |
| Supabase (database, auth) | DE | In-EU hosting |
| OpenAI (o3 model) | US | 2021 SCC Module 3 + encryption in transit |
| Resend (email) | DE & US | 2021 SCC Module 3 |
We never sell personal data.
5 · International transfers
When data is processed outside the EEA (e.g. by OpenAI in the US) we rely on the EU Standard Contractual Clauses and have performed a transfer-impact assessment.
6 · Your rights
Access · Rectification · Erasure · Restriction · Portability · Objection · Withdraw consent. Email team@mail.grantsfinderai.com. You may lodge a complaint with the Dutch lead supervisory authority (Autoriteit Persoonsgegevens).
7 · Security measures
TLS 1.3 in transit, AES-256 at rest, least-privilege RLS, annual penetration test.
8 · Children
Our Services are not directed to persons under 16. We do not knowingly process such data.
9 · Changes
If we materially change this Policy we will email account holders and post the revised text ≥ 30 days before it takes effect. Continued use after the effective date constitutes acceptance.
10 · Contact
team@mail.grantsfinderai.com · +31 (0) 20 xxx xxxx