Privacy Policy

We collect the following categories of personal information:

Account Information: When you sign in using Google OAuth, we receive your name, email address, and profile photo from Google. We do not receive your Google password.

Business Profile Data: Information you voluntarily enter in your business profile, including business name, industry, province, number of employees, annual revenue, and business description. This information is used solely to generate grant matches and application drafts for you.

Usage Data: Anonymous technical information about how you use our platform, including pages viewed, features used, and session duration. This data is collected in aggregate form and cannot identify you individually.

Payment Information: We use Stripe to process payments. We do not store your credit card number, CVV, or full payment details on our servers. Stripe's privacy policy applies to all payment data.

Communications: If you contact us by email or use our support features, we retain those communications to assist you and improve our service.

We do not collect Social Insurance Numbers (SIN), banking credentials, government-issued ID numbers, or other sensitive identifiers.

We use your personal information for the following purposes:

- **Service Delivery:** To provide grant discovery, eligibility checking, and AI application writing services - **Account Management:** To authenticate your identity and maintain your account - **Personalization:** To match you to relevant grants based on your business profile - **Billing:** To process subscription payments through Stripe - **Communication:** To respond to your inquiries and send service-related notifications - **Improvement:** To analyze usage patterns and improve our platform (using anonymized data) - **Legal Compliance:** To comply with applicable Canadian laws and respond to lawful requests

We do not use your personal information for targeted advertising or sell it to third parties for marketing purposes.

We disclose your personal information only to:

AI Infrastructure Provider: We use Anthropic's API to power our application writing features. Business profile data you enter is processed by Anthropic's systems to generate application drafts. Anthropic's privacy policy and Data Processing Agreement govern this processing.

Payment Processor: Stripe processes payment information in accordance with their privacy policy and PCI DSS compliance standards.

Legal Requirements: We may disclose your information if required by Canadian law, court order, or government authority. Where permitted, we will notify you of such requests.

Business Transfers: If GrantWise Canada is acquired or merges with another entity, your information may be transferred. We will provide notice before this occurs.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Your data is stored on servers located in Canada and the United States. We use industry-standard security measures including:

- HTTPS encryption for all data in transit - Encrypted storage for sensitive data at rest - Access controls limiting employee access to personal information - Regular security reviews and updates

No method of transmission over the Internet is 100% secure. While we use commercially reasonable measures to protect your information, we cannot guarantee absolute security.

You have the following rights regarding your personal information:

Access: You may request a copy of the personal information we hold about you.

Correction: You may request correction of inaccurate or incomplete personal information.

Deletion: You may request deletion of your personal information. We will delete your account and associated data within 30 days of your request, subject to legal retention requirements.

Withdrawal of Consent: You may withdraw consent to our collection and use of your information at any time by deleting your account or contacting us.

Complaint: If you believe we have violated your privacy rights, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, contact us at privacy@grantwisecanada.ca.

GrantWise Canada complies with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (marketing emails) if you have provided express consent. Every marketing email includes an unsubscribe link. Transactional emails (account confirmations, billing receipts, service notifications) are sent as necessary for service delivery and do not require separate consent under CASL.

You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by emailing hello@grantwisecanada.ca.

We use cookies and similar technologies to: - Maintain your authentication session (necessary cookies) - Remember your preferences (functional cookies) - Understand how you use our platform (analytics cookies)

We do not use advertising or tracking cookies. You may disable cookies in your browser settings, though this may affect platform functionality.

GrantWise Canada is intended for business users aged 18 and older. We do not knowingly collect personal information from individuals under 18. If you believe a minor has provided us with personal information, please contact privacy@grantwisecanada.ca.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our website at least 14 days before the change takes effect. Your continued use of GrantWise after the effective date of any changes constitutes your acceptance of the updated policy.

For privacy questions, requests, or concerns, contact our Privacy Officer at:

GrantWise Canada Inc. Email: privacy@grantwisecanada.ca General: hello@grantwisecanada.ca

For complaints about our privacy practices, you may also contact the Office of the Privacy Commissioner of Canada at 1-800-282-1376 or priv.gc.ca.