Privacy Policy

1. Who We Are

Grant Nexus LLC (“Grant Nexus,” “we,” “us”) is a Colorado limited liability company that operates an AI-powered grant matching platform for colleges and universities.

Contact: info@grantnexus.ai

2. What Data We Collect

2.1 Faculty Professional Information

• Name — Full name as listed on university directories
• Email address — Institutional email
• Department and title — Academic department and position
• Research keywords — Areas of research interest
• Research summaries — AI-generated summaries based on publicly available information

Source: This information is collected from publicly available university faculty directories and institutional websites.

2.2 User-Contributed Profile Edits

Faculty members may voluntarily edit their profiles. Users should only include information they are comfortable being used for grant matching and visible to their institution’s administrators. Do not include confidential, unpublished, or proprietary research information.

2.3 Account Information

For users who create accounts: name, email address, institutional affiliation, and login session data (JWT tokens). Some accounts use password login with salted password hashes; others use magic-link login.

2.4 Grant Data

Federal grant opportunity data is sourced from Grants.gov, a public federal database.

2.5 What We Do NOT Collect

• ❌ Student education records (not subject to FERPA)
• ❌ Social Security numbers
• ❌ Financial or banking information (payments processed by Stripe)
• ❌ Health information
• ❌ Browsing history or tracking data

3. How We Use Your Data

• Match faculty with grants — AI algorithms compare research profiles against federal grant opportunities
• Generate match scores — Relevance scoring to help identify promising opportunities
• Enhance research profiles — AI-generated summaries to improve matching accuracy
• Communicate — Send match notifications, service updates, and support responses
• Improve the Service — Analyze aggregate usage patterns

We do not use your data for advertising, profiling, or any purpose unrelated to grant matching.

4. Data from Public Sources

Faculty professional information is initially gathered from publicly available university websites and faculty directories — the same information available to anyone visiting your institution’s website.

5. Third-Party Service Providers

We use local AI models for research profile processing. Faculty data processed by AI does not leave our infrastructure. We do not send faculty data to third-party AI services (OpenAI, Google, etc.).

6. Data Sharing

We do not sell your data. Period.

We share data only with the service providers listed above, law enforcement if required by valid legal process, and the Subscribing Institution for their own faculty data.

7. Data Retention

• Active subscriptions: Data retained for the duration of the subscription
• After termination: Customer Data deleted within 90 days
• Data export: Available upon request at any time

8. Security Measures

• Encryption in transit: All data transmitted via HTTPS/TLS
• Encryption at rest: Database encrypted via Supabase infrastructure
• Authentication: JWT-based sessions with role-based access controls; support for magic-link login and hashed-password login
• Access control: Role-based; faculty see only their own profiles and matches
• Infrastructure: Enterprise cloud providers with documented security controls (Supabase, Vercel)

9. Cookies

We use minimal cookies for essential functionality only: authentication and session cookies. We do not use tracking, advertising, or third-party analytics cookies.

10. Your Privacy Rights

You have the right to:

• Know what data we have about you
• Access your data through the platform or upon request
• Correct inaccurate data
• Delete your data at any time
• Export your data in CSV/JSON format

California Residents (CCPA)

You have additional rights including: right to know, right to delete, right to opt-out of sale (we do not sell data), and right to non-discrimination.

Colorado Residents (Colorado Privacy Act)

We are committed to honoring data subject rights regardless of current applicability thresholds.

11. Data Breach Notification

In the event of a data breach affecting personal information, we will notify affected users and relevant regulatory authorities within 72 hours of confirming the breach, in accordance with the Colorado Privacy Act and other applicable laws.

12. Student Data

Grant Nexus does not collect, store, process, or access student education records. Our Service deals exclusively with faculty professional information. We are not subject to FERPA.

13. Children’s Privacy

The Service is designed for educational institutions and their faculty. We do not knowingly collect data from individuals under 18.

14. Changes to This Policy

Material changes will be communicated via email at least 30 days before taking effect.

15. Contact Us

Grant Nexus LLC
Email: info@grantnexus.ai
Website: https://grantnexus.ai