01
Privacy Policy
NexGrant is built by Secure Lanes LLC for nonprofits, community organizations, and grant writers to find, evaluate, and manage grant funding. This policy explains what information NexGrant collects, why, and what happens to it, including when NexGrant sends something to an AI provider or to Apple.
What we collect
The table below covers every category of data NexGrant handles. "Linked to identity" means it's tied to your account or organization rather than anonymous.
| Data type | Linked to identity | Purpose | Used for tracking |
|---|---|---|---|
| Account info (name, email) | Yes | Sign-in, communication | No |
| Organization profile (mission, budget, EIN, etc.) | Yes, to org | Fit Score analysis, applications | No |
| Contacts (funders, partners) | Yes, to org | CRM / relationship tracking | No |
| Uploaded documents | Yes, to org | Grant applications, extraction | No |
| Financial records (budgets, expenses) | Yes, to org | Award tracking, reporting | No |
| Purchase information | Yes, to org | Subscription entitlement | No |
| App interaction & diagnostics | Pseudonymous | Reliability, bug fixing | No |
| Content sent for AI processing | Yes, to org | Extraction, drafting assistance | No |
| Push/local notification tokens | Yes | Deadline & task reminders | No |
NexGrant does not sell data, does not use it for advertising, and does not share it across companies for cross-app tracking. Nothing here is used to build an advertising profile of you.
Who processes it
NexGrant runs on a small set of infrastructure and AI providers, each bound by their own data-processing terms and used only to operate the features you use directly:
Before anything is sent to OpenAI or Anthropic, NexGrant redacts obvious secrets (API keys, bearer tokens) and sends only the content needed for that specific request, such as a pasted grant announcement or your organization's verified profile fields relevant to a narrative question. AI providers do not receive your login credentials, payment details, or documents you haven't chosen to import or use in a draft.
Document uploads
Files you upload (grant PDFs, determination letters, budgets) are stored in private, access-controlled storage scoped to your organization. They are never publicly reachable. Every download uses a short-lived signed link, and only members of your organization with appropriate permissions can retrieve them.
Security
Every organization's data is isolated at the database level using row-level security. One organization's records are enforced as unreadable to another's, not just hidden by the interface. AI provider keys and database service credentials never leave our servers; the app itself holds no secret capable of accessing another organization's data.
Retention & deletion
You can export your organization's data and delete your account at any time from Settings → Account Management. Deleting your account:
- Removes your personal profile and revokes your session immediately.
- Removes your membership from every organization you belong to.
- If you are an organization's sole owner with other members, you'll be asked to transfer ownership first; if you're its only member, the organization and its data are deleted with you.
- Retains financial, award, and audit-log records your organization is required to keep for grant compliance, anonymizing your personal association with them where retention is required but attribution is not.
Your rights
You may request a copy of your data, correction of inaccurate data, or deletion, at any time, in-app via Data Export and Account Management, or by contacting us directly.
Privacy questions
privacy@nexgrant.app. We respond to privacy and data requests within 5 business days.