Privacy Policy

Last updated July 3, 2026

This Privacy Policy explains how GrantFlow, operated by Media4U (“we,” “us,” or “our”), collects, uses, and protects information when you use our Service. By using GrantFlow, you agree to this Policy.

Information we collect

  • Account information - your name and email address, provided through our authentication provider when you sign up.
  • Organization content - the nonprofit profile, grant details, drafts, and other information you enter to use the Service.
  • Billing information - handled by our payment processor. We receive subscription status and limited billing details, but we do not store your full card number.
  • Usage data - basic technical and usage information generated as you interact with the Service, used to operate, secure, and improve it.

How we use information

We use the information we collect to:

  • provide, maintain, and improve the Service and its features;
  • generate the AI research, drafts, and other outputs you request;
  • process subscriptions and communicate with you about your account;
  • secure the Service, enforce our Terms, and comply with the law.

We do not sell your personal information, and we do not use your organization content for advertising.

Service providers we share with

We share information with trusted providers only as needed to run the Service. These include:

  • Clerk - authentication and account management;
  • Stripe - subscription payment processing;
  • Convex - application database and backend;
  • Vercel - website and application hosting;
  • Anthropic - the AI models that power drafting and research;
  • Resend - transactional and reminder email delivery.

These providers process information under their own privacy and security terms. We may also disclose information if required by law or to protect our rights and users.

AI processing

To generate drafts, funder research, and related features, the content you submit is sent to our AI provider for processing. We use these providers to deliver the feature you requested; review each AI output before relying on it.

Cookies

We use essential cookies to keep you signed in and to operate the Service. We do not use cookies for third-party advertising.

Data retention

We keep your information for as long as your account is active and as needed to provide the Service. You may request deletion of your account and associated data; we will honor such requests except where we must retain information to comply with legal obligations.

Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and tenant isolation so one organization cannot access another’s data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

Contact

Questions about this Policy or your data? Contact us at support@media4u.fun.