Privacy Policy

This Privacy Policy describes how My Grant CoPilot ("Company", "we", "us", or "our") collects, uses, maintains, and processes information that we receive from you ("Users", "you", or "your") through our website, mobile applications, and AI-powered grant writing platform (collectively, the "Services").

We are committed to protecting your privacy and being transparent about our data practices. This Privacy Policy explains the types of information we collect, how we use it, and your rights regarding your personal data. Please read this policy carefully to understand our practices regarding your personal information.

For the purposes of applicable data protection and privacy laws, My Grant CoPilot is a data controller in relation to the personal data of its Users.

My Grant CoPilot is operated by Ira Revels Consulting, LLC. For purposes of applicable data protection laws, Ira Revels Consulting, LLC is the data controller.

1. No Legal Obligation to Provide Information

You are not legally obligated to use our Services or to disclose any information to us. However, if you choose to use our Services, provision of certain information is necessary for us to provide those Services effectively. Without certain information, we may not be able to deliver the full functionality of the platform.

2. Types of Information We Collect

We collect several categories of personal data ("Personal Data") and non-identifiable information:

2.1 Information You Provide

• Account information (name, email address, password)
• Organization information (name, type, mission, focus areas)
• Contact information (phone number, address)
• Grant proposal content and documents
• Payment and billing information
• Communications with our support team

2.2 Information We Collect Automatically

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Location data (approximate geographic location based on IP address)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

When you enable integrations with third-party services (such as Google APIs for document access), we may collect information necessary to deliver our Services effectively. This information is not used to develop, improve, or train generalized AI and machine learning models.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide Services: Deliver and maintain our AI-powered grant writing platform
• To Improve Services: Develop, test, and enhance platform features and AI models
• To Personalize: Customize content, recommendations, and user experience
• To Communicate: Send service updates, technical notices, security alerts, and support messages
• To Process Payments: Handle billing, subscriptions, and transactions
• To Market: Send promotional materials, newsletters, and updates (with your consent)
• To Analyze: Monitor usage patterns, compile statistics, and conduct research
• To Protect: Prevent fraud, ensure security, and enforce our terms
• To Comply: Meet legal obligations and respond to lawful requests

4. Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your use of our Services. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Authenticate your account
• Analyze site traffic and usage patterns
• Provide personalized content and recommendations

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Services.

5. Sharing Information with Third Parties

We may share your information with third parties in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our platform, processing payments, hosting data, and providing customer support. These providers are contractually obligated to protect your information.

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

5.3 Legal Requirements

We may disclose information when required by law, court order, or legal process, or to protect our rights, property, or safety, or that of our users or the public.

5.4 With Your Consent

We may share information with other parties when you provide explicit consent.

6. Data Storage and Security

We store your personal data on secure servers owned or controlled by us or reputable cloud-service providers. We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods depend on:

• The nature of the information collected
• Legal and regulatory requirements
• Business and operational needs
• Dispute resolution requirements

When data is no longer needed, we will securely delete or anonymize it. Some aggregated, non-identifying statistical information may be retained indefinitely.

Personal data is erased within thirty (30) days of account closure or data deletion request, except where retention is required by applicable law.

8. International Data Transfers

Your information may be transferred to, stored, and processed in countries outside of your country of residence, including the United States. These countries may have different data protection laws than your country. When we transfer data internationally, we take appropriate safeguards to ensure your information receives adequate protection, including:

• Standard contractual clauses approved by regulatory authorities
• Compliance with applicable data protection frameworks
• Ensuring third-party service providers maintain adequate security standards

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to our processing of your personal data
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, please contact us at support@mygrantcopilot.com. We will respond to your request within the timeframe required by applicable law.

10. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

11. California Privacy Rights (CCPA and CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These rights include:

• Right to Know: Request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purpose for collecting it, and the third parties with whom it is shared
• Right to Access: Receive a copy of the specific pieces of personal information we hold about you in a portable, readily usable format
• Right to Correct: Request correction of inaccurate personal information we maintain about you
• Right to Delete: Request deletion of personal information we have collected from you, subject to certain legal exceptions
• Right to Opt-Out of Sale or Sharing: Direct us not to sell or share your personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Restrict our use of sensitive personal information (such as government identifiers, financial account details, or precise geolocation) to the purposes necessary to provide our Services
• Right to Non-Discrimination: Receive equal service and pricing regardless of whether you exercise your privacy rights
• Right to Authorize an Agent: Designate an authorized agent to submit requests on your behalf, provided you provide us with signed permission to do so

11.1 Categories of Personal Information

Under California law, we may collect the following categories of personal information, as applicable:

• Identifiers (name, email address, account credentials)
• Commercial information (payment and billing details)
• Internet or network activity (browsing history, usage data)
• Geolocation data (approximate location derived from IP address)
• Professional and employment information (organization name, role)
• Inferences drawn from the above to create a profile reflecting your preferences

11.2 Sensitive Personal Information

The CPRA introduces protections for sensitive personal information. If we collect any such information (for example, government-issued identification numbers or financial account access details), we limit its use to what is necessary to deliver our Services and process your requests. We do not use sensitive personal information to infer characteristics about you beyond what is required to provide the Services.

11.3 Submitting a Request

To exercise any of these rights, please contact us at support@mygrantcopilot.com. We will verify your identity before processing your request and will respond within the timeframe required by California law. You may also designate an authorized agent to submit a request on your behalf by providing us with written authorization signed by you.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the rights listed in Section 9 above. Our legal basis for processing your personal data includes:

• Performance of a contract with you
• Compliance with legal obligations
• Protection of legitimate interests
• Your consent (which you may withdraw at any time)

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Services after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: