Privacy policy

Last updated: 29 October 2026

This policy explains what personal data GrantAIlor (the operator of GrantAIlor, "we") collects when you visit the public website or use the service, why, how long we keep it, and the rights you have. If your organization has signed a separate agreement with us, that agreement prevails where it differs.

1. Data we collect

Trial and contact forms: name, email address, organization name, organization type, country, fields of interest and your message.
User accounts: display name, username, email address (if provided), role, and your password, stored only as a salted hash.
Your organization's data: organization profile and eligibility profile, fields and focus areas, research ideas you track, assessments, internal comments, units and their focal points, and MOU files you upload.
Technical data: an activity log of actions in the app (time, action, user, IP address) for security and troubleshooting; a sign-in cookie and a language cookie; push notification subscriptions if you turn them on.

Information about grant calls comes from funders' public web pages. It is not personal data about you.

2. Why we use it

To create your account and send you a sample report built from the profile in your request.
To provide the service: filter calls by your organization's scope, score how well they fit, send notifications and weekly reports.
To answer your questions and support you.
To keep the service secure and to improve its accuracy.

We do not sell personal data, do not use it for advertising, and do not share one customer's data with another customer.

3. Service providers and automated processing

We rely on providers for hosting, backups and email delivery; they process data only to provide those services to us. Some steps that read funders' public pages use third-party automated language-processing (AI) tools. For the optional tailored tips service, only an anonymous profile of the organization (type, country, fields, topics of interest) is used, never its name, people's names or email addresses.

4. Retention and security

Trial and contact requests that do not become customers are deleted after 365 days.
Account and organization data are kept while the service is in use. When the service ends, the organization can export all of its data and ask us to delete it.
Access is limited by role; passwords are hashed; data is backed up daily.

5. Your rights

You may ask to access, correct, export or delete your personal data, or withdraw consent for its use, in line with Vietnamese law on personal data protection. Organization administrators can export or delete their organization's data; otherwise contact us using the details below.

6. Cookies

We only use cookies needed for the site to work: one to keep you signed in and one to remember your language. We do not use advertising or tracking cookies.

7. Changes

When this policy changes, we update the date at the top of this page and notify customer organizations of significant changes.

8. Contact

the operator of GrantAIlor
Contact form