Legal
Privacy Policy
Version 1.0. This policy explains what we collect through the grant intake process, why we collect it, and the choices you have.
Information we collect
We collect the information you provide through the intake process. This includes your contact details; organizational identity, formation and registration information; governance information; grant history; project and program details; population served; financial and budget information; documents you choose to upload; and your consent and acknowledgement records. We also collect limited technical information such as timestamps and, where you have consented, analytics data about how the intake experience is used.
We do not ask for, and you should not submit, Social Security numbers, bank account numbers, payment card numbers, health records or client-level personal information about the people your organization serves.
How we use information
- To review and qualify your grant request
- To assess organizational readiness and identify documentation gaps
- To prepare your consultation and, if appropriate, a scope of work
- To communicate with you about your request
- To maintain administrative, audit and legal records
- To improve the intake experience, using aggregate analytics where consented
We do not sell your information. We do not share it with advertising networks. Analytics technologies never receive the content of your intake.
How information is shared
Information is accessible to authorized internal personnel with a role-based need to review it. It may be shared with service providers that host, secure or operate this system under confidentiality obligations, and with funders or partner organizations only with your direction or approval, or where required by law.
Retention
Submitted intakes and supporting documents are retained for the period necessary to perform the review, support any resulting engagement, and satisfy record-keeping obligations. Incomplete drafts held in your browser remain on your device until you clear them or they expire. Consent and audit records are retained separately to demonstrate compliance.
Your rights and choices
- Request a copy of the information we hold about you
- Request correction of inaccurate information
- Request deletion, subject to record-keeping obligations
- Withdraw analytics or marketing consent at any time
- Opt out of marketing communications
Cookie and analytics choices can be changed at any time through the Cookie Preferences link in the footer. To make a privacy request, visit Privacy & Compliance. We respond to verified requests within 30 days.
Security
Information is transmitted over encrypted connections and stored in access-controlled systems. Uploaded documents are held in private storage that is not publicly accessible, and access is limited to authorized reviewers. No system can guarantee absolute security, and you should send highly sensitive material only when specifically requested.
Children
This service is intended for organizational representatives and is not directed to children under 13. We do not knowingly collect information from children.
Changes
When this policy changes materially, the version number is updated and the new version applies to submissions made after that date. The version in effect at your submission is recorded with your intake.