GrantReady.app ("we," "us," "our," or "the Platform") is operated by Sable Echelon Innovations LLC. We are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

1. Information We Collect

When you create an account and use GrantReady.app, we collect the following information you provide directly to us:

• Personal information: Your name, email address, and login credentials
• Organization details: Organization name, organization type (nonprofit, small business, etc.), mission statement, entity stage, and formation date
• Grant readiness data: Your responses to the 12-level grant readiness assessment, your readiness score, and identified gaps
• Funder matching data: Grant opportunities saved, match scores, and application statuses
• Activity data: Documents uploaded, budgets created, compliance items tracked, and AI advisor conversations
• Subscription information: Plan tier, billing period, and payment status (processed via Stripe — we do not store your full card number)

2. Automatically Collected Information

When you access the Platform, we automatically collect certain technical and usage data:

• IP address and approximate geographic location
• Device type, browser type, and operating system
• Usage analytics: pages visited, features used, time spent, and click patterns
• Login activity, including timestamps and authentication events
• Cookies and similar tracking technologies (see Section 8)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our grant readiness services and tools
• Personalize grant recommendations and readiness assessments based on your organization profile
• Send you important updates, deadline reminders, compliance alerts, and service-related notifications
• Process subscription payments and manage your account
• Ensure platform security, prevent fraud, and detect unauthorized access
• Conduct analytics and research to improve our features and user experience
• Comply with legal obligations and enforce our Terms of Service

4. Information Sharing

We do NOT sell your personal data. We may share your information in the following limited circumstances:

• Service providers: We share data with trusted third-party vendors who help us operate the Platform (e.g., Stripe for payment processing, cloud hosting providers). These providers are bound by data protection agreements and may only use your data to provide services to us.
• Legal authorities: We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of our users or others.
• Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity, subject to the protections of this Privacy Policy.
• Your team members: If you invite team members to your organization, they may access shared data within that organization context.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit using SSL/TLS
• Encryption of data at rest
• Secure password hashing — we never store passwords in plain text
• Role-based access controls limiting data access to authorized personnel only
• Regular security reviews and monitoring for unauthorized access
• Secure backup and disaster recovery procedures

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete information
• Deletion: Request that we delete your personal data (subject to legal retention requirements)
• Withdraw consent: Withdraw consent for data processing where we rely on your consent
• Object to processing: Object to certain types of processing of your data
• Data portability: Request an export of your data in a machine-readable format

To exercise any of these rights, contact us at privacy@sableecheloninnovationsllc.com. We will respond to your request within 30 days.

7. Data Retention

We retain your information as follows:

• Active accounts: Your data is retained for as long as your account is active and you use the Platform
• Deleted accounts: When you delete your account, we permanently delete your data within 90 days, except where we are legally required to retain certain records (e.g., financial records for tax compliance) for a longer period
• Subscription records: Billing and payment records are retained for the period required by applicable tax and financial regulations

8. Cookies and Tracking

We use cookies and similar tracking technologies on the Platform:

• Essential cookies: Required for login, session management, and core platform functionality. These cannot be disabled if you wish to use the Platform.
• Analytics cookies: Used to understand how visitors interact with the Platform so we can improve it. These are set with your consent.

You can manage cookie preferences through the cookie consent banner displayed on your first visit, or through your browser settings. Disabling certain cookies may limit some features of the Platform.

9. Maryland Residents (MODPA Compliance)

If you are a resident of Maryland, you have additional rights under the Maryland Online Data Privacy Act (MODPA):

• Data minimization: We limit the collection of personal data to what is reasonably necessary for the purposes described in this policy
• Right to opt out of targeted advertising: You may opt out of the processing of your personal data for targeted advertising purposes
• Right to access, correct, or delete portable data: You may request access to, correction of, or deletion of your personal data, and may obtain a portable copy of your data in a readily usable format
• Global Privacy Control (GPC): We recognize and respond to GPC browser signals as a valid opt-out request for the sale or sharing of personal data or targeted advertising

To exercise your MODPA rights, contact us at privacy@sableecheloninnovationsllc.com.

10. Children's Privacy

The Platform is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make significant changes, we will notify you via email or through a prominent notice on the Platform. The "Last Updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Email: privacy@sableecheloninnovationsllc.com
Company: Sable Echelon Innovations LLC
Address: 30 N Gould St F, Sheridan, WY 82801