Privacy Policy

Last updated: January 15, 2025

1. Information We Collect

We collect information that you provide directly to us when using our services, including but not limited to:

• Registration information (name, email address, password)
• Profile data (organization details, location, preferences)
• Usage data (how you interact with our platform)
• Marketing Attribution Data: If you consent to marketing attribution tracking, we collect UTM parameters (source, medium, campaign, content, term), referrer information, landing page data, and country information. This data is associated with your email address for marketing analytics purposes.
• Analytics Data: If you consent to analytics tracking, we collect page views, feature usage, session recordings, and interaction data through our analytics provider (PostHog).

2. How We Use Your Information

We use the information we collect to provide and improve our services, communicate with you, and ensure the security of our platform. Specifically:

• Marketing Attribution: We use UTM parameters and marketing attribution data to understand which marketing channels drive registrations, optimize our advertising spend, and improve our marketing campaigns. This data is only collected and used if you have explicitly consented to marketing attribution tracking.
• Analytics: We use analytics data to understand how you use our platform, identify bugs, improve user experience, and make product decisions. This data is only collected if you have explicitly consented to analytics tracking.
• Service Delivery: We use your registration and profile data to provide core platform functionality, including grant recommendations, application management, and user authentication.

3. Consent and Tracking

We respect your privacy and comply with GDPR, CCPA, and other applicable privacy regulations. Before collecting any marketing attribution or analytics data, we will:

• Display a consent modal asking for your explicit opt-in to marketing attribution and analytics tracking
• Clearly explain what data we collect and how we use it
• Allow you to accept all, reject all, or customize your consent preferences
• Store your consent preferences in your browser's localStorage
• Only collect and process data for which you have given explicit consent

You can change your consent preferences at any time through your account settings or by clearing your browser's localStorage.

4. Data Retention

We retain your personal information only as long as necessary for the purposes stated in this policy:

• Marketing Attribution Data: Retained for up to 24 months from the date of collection, after which it is automatically deleted or anonymized.
• Analytics Data: Retained according to our analytics provider's retention policy (typically 12-24 months).
• Account Data: Retained for as long as your account is active. You can request account deletion at any time.

Upon request, we will delete your personal information within 30 days, subject to legal obligations that may require us to retain certain data.

5. Data Protection

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access or disclosure, including encryption, access controls, and regular security audits.

6. Your Rights

Under GDPR, CCPA, and other applicable privacy laws, you have the following rights:

• Right to Access: Request a copy of your personal information we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal information
• Right to Withdraw Consent: Withdraw your consent to marketing attribution or analytics tracking at any time
• Right to Data Portability: Request your data in a machine-readable format
• Right to Object: Object to processing of your personal information for marketing purposes

To exercise any of these rights, or for any privacy-related concerns, please contact us at justina@grantedtech.ca. We will respond to your request within 30 days.