Privacy policy

Last updated: October 26, 2026. This policy covers grantcompass.co and the GrantCompass US app in ChatGPT and Claude. It explains what personal data we collect, why, who receives it, how long we keep it, and the choices you have.

What we collect

• Business details you enter in the eligibility matcher, the application-drafting tool or the app: for example your state, industry, business structure, number of employees, years operating, what you need funding for, and your answers to application questions.
• Owner-group information, only if you choose to give it (for example women-, veteran- or minority-owned), because some programs are reserved for those groups. It is always optional.
• Account details: your email address and, if you sign in with Google, the name on your Google account.
• Your saved programs, reports, drafts and email preferences.
• Purchase records: what you bought and when. Card details go directly to our payment provider, Stripe; we never see or store them.
• Usage data: pages visited, clicks and session interactions recorded by our analytics tools, technical error reports, and whether our emails were delivered, opened or clicked, and, if you arrived from one of our ads, the ad click identifier.
• Page-view log: our own server also records each page view: the page, the referring website, the country and the device type. It sets no cookies and stores no IP address.

How we use it

• To match you to funding programs and check basic eligibility.
• To generate your report and, if you use it, draft application answers.
• To run your account, process purchases and send sign-in links, receipts and deadline reminders you asked for.
• To send occasional emails about funding programs, which you can turn off at any time.
• To fix problems and improve the site and app.
• To measure whether our ads work and to show our ads to people who have visited the site (see Advertising).

We do not sell your data.

Who receives it

We share personal data only with service providers that run parts of GrantCompass for us, and only for that purpose:

• Hosting and database: Netlify (website) and Supabase (accounts and data storage).
• Payments: Stripe.
• Email delivery: Resend.
• Sign-in: Google, if you choose to sign in with Google.
• Analytics: Google Analytics and Microsoft Clarity.
• Advertising: Microsoft Advertising and Google Ads (see Advertising).
• AI drafting: Anthropic processes the business details and answers you enter into the application-drafting tool to write your draft.

We may also disclose data where the law requires it.

Advertising

We advertise on Microsoft's search network (Bing and its partner sites) and on Google Search. Our site uses Microsoft's advertising tag to record visits and steps such as starting a draft or opening checkout, so we can tell which ads lead to customers and show our ads again to people who have visited.

When you buy, our server tells Microsoft that a purchase happened, its value, the ad click identifier if you came from one of our ads, and your email address in hashed form (scrambled one way, so it can be matched but not read). We never send Microsoft your answers, your drafts or your email in readable form, and the tag never loads on private draft or report links. Microsoft handles this data under its own privacy statement.

Our site also uses Google's advertising tag, for the same purposes: to tell which Google ads lead to customers and to show our ads again to people who have visited. When you buy after clicking one of our Google ads, we tell Google that a purchase happened, its time and value, and that ad's click identifier. We do not send Google your email, your name, your answers or your drafts, and this tag also never loads on private draft or report links. Google handles this data under its own privacy policy; you can turn off personalized Google ads in My Ad Center.

How long we keep it

• Account data, saved programs, reports and drafts: while your account exists. We delete them within 30 days of a deletion request.
• Purchase records: as long as tax and accounting law requires.
• App request logs (ChatGPT and Claude, below): up to 12 months.
• Error reports and email delivery records: up to 24 months.
• Analytics: according to Google Analytics' and Microsoft Clarity's retention settings.
• Advertising: according to Microsoft Advertising's and Google Ads' retention settings.

Your choices

• Every marketing email has an unsubscribe link, and you can change email preferences on your account page.
• Owner-group information is always optional: you can skip it and still see every program open to you.
• You can remove saved programs at any time, and ask us to access, correct or delete your data by emailing us.
• In ChatGPT or Claude you can disconnect the app at any time.
• You can turn off personalized ads from Microsoft in your Microsoft ad settings, or block the tag with your browser's tracking protection.

GrantCompass in ChatGPT and Claude

GrantCompass US is also available as an app inside ChatGPT and as a connector in Claude (how it works). It needs no account and asks for no sign-in. When the assistant uses it, we receive only what the assistant sends to look up programs: a short description of the business or its funding need, and any of these details you chose to share: state, organization type, industry, number of employees, years operating, and (only if you volunteered it) whether the owners belong to a group some programs are reserved for.

We use those details only to answer that request. For each request we keep a log of which tool ran, the description (with email addresses, phone numbers, ZIP codes and identity words removed before it is stored), the non-identifying details above, which programs were returned, and which assistant made the call. We never store the owner-group answer itself, your name, your IP address or your conversation. Logs are kept for up to 12 months to understand what businesses are looking for and to improve results, then deleted. The app's responses contain only public program information and links to our program pages.

Links from the app to our program pages carry tags showing they came from ChatGPT or Claude, so our site analytics can count those visits. Your conversation itself is handled by OpenAI or Anthropic under their own privacy policies.

Children

GrantCompass is for businesses and organizations and is not directed at children under 16.

Who is responsible for your data

GrantCompass (grantcompass.co, and grantcompass.ca in Canada) is owned and operated by Khalid Hamadeh, its founder. He is responsible for the personal data described in this policy.

Changes and contact

We will update the date above when this policy changes. Questions, or a request to access, correct or delete your data? Email hello@grantcompass.co.