Privacy Policy
Last updated: October 11, 2026
1. What we collect
When you create an account, we collect your email address and a password (stored securely by our authentication provider). When you subscribe, payment details are processed by Stripe; we retain subscription identifiers and status, not card details. We also store the profile fields, saved awards, notes, comments, and checklists you provide. Behavioral analytics and session replay are disabled.
2. Grant data
Grant, PI, and patent records are public data aggregated from U.S. federal sources (NIH RePORTER, NSF, SBIR.gov, USAspending, and the USPTO Open Data Portal). Your watchlist, notes, comments, and checklists are shared only within your organization. Your profile is visible to teammates. Uploaded avatars use public image URLs; do not upload sensitive documents or images as an avatar.
3. How we use data
We use your data to provide the service: authenticate you, manage subscriptions, display your saved items, and provide service notifications. We do not sell personal data.
4. Cookies & sessions
We use a session cookie to keep you signed in. No third-party advertising cookies are used.
5. Third-party processors
Supabase (database, authentication, and image storage), Stripe (billing), Vercel (hosting), and Inngest (background jobs) process data needed to operate the service. When configured, Sentry receives error types and code locations with request data, identity fields, and error-message text removed. Hosting providers may retain operational logs for reliability and security.
6. Your rights
Contact [email protected] to request access, export, correction, or deletion of your account data. Leaving a team stops future team notifications but does not automatically delete shared comments or saved research. Shared workspace records, billing records, and backups may require separate retention or deletion handling.
7. Contact
Questions about this policy: [email protected].