Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, including your name, email address, and organization name. We also collect the content you store in your Happy Grants account (content library sections, grant templates, and application responses) in order to provide our service. If you sign up for one of our free reports or directories, we collect your email address and which page you signed up from, so we can send what you asked for.

We automatically collect certain technical information when you visit our website or use our service, including IP address, browser type, pages visited, how you arrived, and usage patterns. We collect this with the analytics and advertising tools described in section 5, and use it to improve Happy Grants, diagnose issues, and understand whether our advertising works. When you submit a sign-up form, we also keep a one-way scrambled (hashed) version of your IP address, which cannot be turned back into the address, only to stop automated abuse such as mass sign-ups.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Happy Grants service
• Process your grant application content using AI (Google Gemini API, with Anthropic Claude API as a backup)
• Send transactional emails such as password resets and team invitations
• Process subscription payments via Stripe
• Respond to support requests
• Monitor usage to enforce plan limits
• Understand how people find and use our website and app
• Measure whether our advertising leads people to create an account

3. AI Processing

Happy Grants uses Google's Gemini models, with Anthropic's Claude models as a backup, to power its AI features: matching and scoring grants against your organization, drafting and refining application answers, AI chat, extracting questions from funder templates, building your organization profile from uploaded documents, compliance checks, reviewer simulation, and specialized drafting tools (SR&ED, letters of intent, budgets).

When you use these features, the relevant content is sent from our servers to Google, or to Anthropic if Google is unavailable, for processing in the United States and other countries where they operate. Depending on the feature, this can include your organization profile, content library text, text extracted from documents you upload, grant question text, and your chat messages. Your data at rest remains in our Canadian database. Google's and Anthropic's use of this data is governed by their paid commercial API terms, under which neither uses your content to train its models, and we do not use your content to train AI models. All AI calls are made server-side, and outputs are presented to you for review and editing. See How Happy Grants Uses AI for a plain-language explanation.

4. Data Sharing

We do not sell your personal information. We share your data only with the third-party service providers necessary to operate and measure Happy Grants:

• Supabase: database hosting (Canada region)
• Google (Gemini API): AI processing of organization and application content (United States and other countries)
• Anthropic: backup AI processing of organization and application content (United States)
• Stripe: subscription billing and payment processing
• Resend: transactional email delivery
• Vercel: application hosting and website analytics
• Google (Analytics and Ads): website and product analytics, and measuring which ads lead to sign-ups; with Google signals, aggregated demographics and cross-device reporting (United States and other countries)
• PostHog: product analytics, masked session replay and error reports (usage patterns, never application content) (United States)
• Sentry: error monitoring and diagnostics

We never share the content of your account, such as your applications, content library, or uploaded documents, with Google or any other advertising or analytics provider.

5. Analytics, Advertising and Cookies

We use a small number of measurement tools on www.happygrants.com and app.happygrants.com to understand how people find and use Happy Grants, and to measure whether our advertising works:

• Google Analytics: records pages visited, how you arrived (for example, from a search or an ad), device and browser type, approximate location based on your IP address, and actions such as creating an account, clicking a button, or filling in a form. For forms we record which fields were filled in and whether the form was sent, never what you typed. On www.happygrants.com we have Google Analytics Advertising Features turned on, including Google signals: if you are signed in to a Google account and have allowed ads personalization, Google may associate your visit with your Google account information. That gives us aggregated demographics and interests, and lets us see a visit and a later sign-up as one person across devices. We never receive information that identifies you from this.
• Google Ads conversion tracking: tells us when someone who clicked one of our Google ads goes on to create an account, including when they move from our website to the app.
• PostHog: product analytics about which features are used, and the same button and form events described above. PostHog may also record a session replay, a reconstruction of how a page was used. On our public website, everything typed into a form is masked before it leaves your browser. Inside the signed-in app the masking is stricter: every field you type in and every piece of text on the screen is replaced before anything is sent, so a replay shows us the layout, where you clicked, how far you scrolled and where you paused, and never the contents of your grant applications, your content library, your uploads or the funders you are looking at. That masking happens in your browser, so the text never reaches PostHog at all. PostHog also records where visitors click and how far they scroll, shown to us as heat maps, with no typed text. Session replay and heat maps are never recorded for visitors whose device is set to a European time zone, or does not share a time zone at all (as privacy-focused browsers do). We also record errors the app runs into, so we can fix what breaks; an error report carries the page and the technical fault, not what you were writing.
• Vercel Web Analytics: page views and a few key actions, such as sign-ups, used to understand overall traffic.

When you create an account, we may also send Google a hashed version of your email address. Hashing turns your email into a one-way code before it leaves your browser. Google uses that code only to match your sign-up to an ad click, and reports back to us whether an ad led to a sign-up, not who you are. Google calls this enhanced conversions.

Google handles this information as described in How Google uses information from sites that use its services. If you are signed in to a Google account and have allowed personalized ads, Google may also use it to show you Happy Grants ads on other websites.

The advertising features above run on our public website only. The signed-in app at app.happygrants.com sends no advertising signals: Google signals and ads personalization are switched off there, so what you store with us is never used to target advertising, to you or to anyone else.

Most of this is collected in your browser. One thing is not: when a subscription payment succeeds, our own server tells Google Analytics and PostHog that a purchase happened, so we can tell which plans people choose and which advertising led to a sale. That report carries the plan, the amount and currency, and account and organization identifiers that mean nothing outside Happy Grants. It never carries your name, your email address or your card details, and because it comes from our server rather than your browser, it is sent whether or not you block analytics cookies. Stripe holds the payment details, as described above.

These tools use cookies and similar browser storage. We also use essential cookies to keep you signed in, and the app does not work without them.

If you open the site from one of our own test links, a cookie named traffic_type marks your visits as test traffic so we can leave them out of our numbers. Ordinary visitors never get it.

Visitors from the EU, the UK and Switzerland. Happy Grants serves Canadian and US organizations and we do not run a cookie consent banner. Advertising and analytics storage is therefore denied by default for visitors from those countries, and stays denied: we do not set advertising or analytics cookies for you, and no advertising signals are sent.

Your choices:

• Block or delete analytics and advertising cookies in your browser settings. You can still use Happy Grants with them blocked.
• Install the Google Analytics opt-out browser add-on.
• Turn off personalized ads in My Ad Center in your Google account.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information and organization data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes.

7. Security

We protect your data using industry-standard practices: passwords are hashed using bcrypt, sessions use signed tokens that expire and refresh automatically, and all data in transit is encrypted using TLS. Access to your organization's data is restricted to authenticated members of your organization.

8. Your Rights

You may request a copy of your personal data, ask us to correct inaccurate data, or request deletion of your account and associated data at any time by contacting us at the email below. You can limit analytics and advertising measurement at any time using the choices in section 5.

You can also delete your organization yourself. If you are its owner, open Settings, then Organization, in the app and use Delete organization and account at the bottom of the page. You confirm by typing the organization name. Any paid subscription is cancelled immediately, with no further charges. The organization's profile, content library, applications, reports and team access are deleted right away, and so is your login, unless you also belong to another organization on Happy Grants. Records we must keep for legal or financial purposes, and copies in routine backups, are handled as described in section 6.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in the app. Continued use of Happy Grants after changes take effect constitutes your acceptance of the updated policy.

10. Contact

Questions about this privacy policy? Contact us at privacy@happygrants.com