Privacy Policy

1. Information We Collect

• Account information — name, work email and your organization profile (legal name, EIN, NAICS codes, state, budget range, contacts).
• Usage information — searches run, grants saved to your pipeline, AI analyses requested and feature usage counters.
• Device and network information — your IP address and a hashed device identifier (browser fingerprint) collected at signup. These are used solely to prevent duplicate free accounts and abuse of usage limits. The device identifier is stored as a SHA-256 hash and is never shared.

2. How We Use Information

To operate and secure the service, match opportunities to your organization, enforce plan limits, prevent abuse, provide support and send service notifications you have enabled.

3. Sharing

We do not sell your personal information. We share data only with service providers that process it on our behalf: our hosting and database provider, AI model providers used to analyze the grant-interest text you submit, and (once billing launches) our payment processor. Providers are bound by contract to use the data only for the services they provide to us.

4. Cookies and Tracking

We use essential cookies and local storage only — authentication, preferences and anti-abuse. No advertising or cross-site tracking cookies are used. See the Cookie Policy.

5. Your Rights (CCPA)

California residents may request access to, a copy of, correction of, or deletion of their personal information, and may opt out of any sale of personal information — which we do not conduct. Requests are fulfilled within 45 days and we will never discriminate against you for exercising these rights.

Submit a request through the Do Not Sell My Personal Information form.

6. Data Retention

Records are retained for 7 years by default, configurable per organization in Settings. Anti-abuse logs (signup IP and device hashes, AI analysis logs) are deleted after 90 days. Deleting an organization removes all associated pipeline data.

7. Security

Data is encrypted in transit and at rest, isolated per organization with row-level security, and administrative actions are recorded in an immutable audit log. Administrators can require multi-factor authentication.

8. Contact

Privacy questions: privacy@marketintelligence.app