Effective September 29, 2026. GrantParty is operated by Capstone Tech (“we”).
What GrantParty does with your data
GrantParty drafts grant applications and government proposals from the documents and records you give it. To do that, it stores what you upload, reads it with AI models operated by third parties, looks up public information on the web, and saves the drafts back to your account. This page says exactly what is collected, where it goes, and how to get it removed.
Information we collect
- Account data: name, email address, password (stored as a bcrypt hash), organization name, role.
- Organization records you enter: mission and program descriptions, tax status, board members, key staff (including titles, biographies, time commitments and pay rates), financial statements and budgets, certifications, past performance, partner and contact records.
- Files you upload: funding announcements, RFPs, determination letters, audits, budgets, prior applications and any other document you add.
- Work product: drafts, fact ledgers, budget models, decisions and the writer’s activity log and transcript for each application.
- Usage data: request logs (IP address, request path, timing), an audit log of changes made in your account, and product analytics when enabled.
How we use it
- To read your funding document and records and draft, score and export your application.
- To research public facts (statistics, wage data, partner requirements) that the draft cites.
- To operate, secure and support the service, and to bill for it.
- To send account email: invitations, password resets, notices about your applications.
We do not sell your data and do not use your content to advertise to you or anyone else.
Who receives your data
These providers process data on our behalf. Each receives only what its job needs.
- Amazon Web Services (us-east-2, Ohio)
- Hosts the application, database, file storage, cache and logs. Files and database volumes are encrypted at rest; all connections use TLS.
- OpenAI
- Parses uploaded funding documents and drafts and reviews narrative text. OpenAI states that API data is not used to train its models and that abuse-monitoring logs are kept for up to 30 days.
- DeepSeek
- Drafts application packages and extracts profile information from uploaded documents. DeepSeek states that it stores personal data on servers in the People’s Republic of China and may use data to improve its models unless the customer opts out. Content sent includes the funding document, your organization profile, staff and board records, financial records and content library text.
- Firecrawl
- Fetches public web pages and runs web searches on the writer’s behalf. It receives the URLs and search queries, which may include your organization’s name and program terms, and nothing else from your account.
- Mixpanel
- Product analytics, when enabled: page views, feature use, your user ID and email. No uploaded content.
- Stripe
- Payment processing. Card details go to Stripe directly and are never stored by GrantParty.
- FormSubmit
- Relays the contact form on the public landing page to our support inbox.
- Email delivery (SMTP provider)
- Sends account, invitation and password-reset email.
Data is also shared inside your own organization’s account with the people you invite, and with law enforcement or regulators when the law requires it.
Where your data is stored and how it is protected
Your account, records and files are stored in Amazon Web Services in the United States (Ohio). Data is encrypted in transit with TLS and at rest. Each organization’s records are separated by row-level security in the database, so a user can only reach their own organization’s data. Every change made through the application is written to an audit log. Secrets and API keys are held in AWS Secrets Manager.
How long we keep it
For as long as your account is active. When you close your account, or ask us to, we delete your organization’s records, files and drafts within 30 days, after which they remain only in encrypted database backups that expire after 7 days. Request and audit logs are kept for 30 days. Third-party processors keep data according to their own terms, summarized above.
Your choices and rights
- You can view and edit everything in your organization profile, content library and applications at any time.
- You can export your applications as Word, PDF or CSV files from the application page.
- You can ask us to correct, export or delete your data, or to close your account, by emailing the address below. We answer within 30 days.
- If you do not want your content sent to a particular AI provider, tell us before you upload; we can tell you what the service can do without it.
Children
GrantParty is for organizations and their staff. It is not directed to anyone under 18, and we do not knowingly collect their information.
Changes
If we add a processor, change where data is stored, or change how we use it, we will update this page and its effective date, and email account holders when the change affects them.