Effective Date: April 1, 2026
1. Information We Collect
We collect only what we need to run the service well:
- Email address and name — collected when you subscribe to receive our weekly digest.
- Organization profile data — collected when you complete onboarding. This includes your organization type, primary mission area, annual budget range, geographic operating area, grant experience level, and SAM.gov registration expiry date (if provided). All of this is optional but helps us personalize your digest.
- Email engagement data — our email providers (Resend and Beehiiv) automatically track email opens and link clicks. This helps us understand which grants are most relevant to subscribers.
- Payment information — if you subscribe to a paid plan, payment is handled entirely by Stripe. We never see or store your full credit card number, CVV, or bank details. Stripe provides us only with confirmation of payment and your subscription status.
We do not collect social media profiles, location data beyond what you tell us, or any information from third-party data brokers.
2. How We Use Your Information
We use your information only to operate and improve GrantCommand:
- Deliver the weekly digest — your email address is used to send you the Tuesday morning grant digest.
- Personalize grant matches — your organization profile (mission area, budget, geography) is used to score and filter grants for relevance to your work.
- Send deadline reminders and alerts — Premium subscribers receive Thursday deadline alerts and SAM.gov expiry reminders based on the dates you provide.
- Improve our scoring algorithms — aggregate engagement data (not individually identifiable) helps us refine how we score and rank grants.
- Process payments — billing information is passed to Stripe to manage your subscription.
We do not use your information for advertising, and we do not sell it to third parties. Ever.
3. Data Sharing
We share your data only with the service providers needed to operate GrantCommand:
- Beehiiv — our primary newsletter platform, handles subscriber management and email delivery of the weekly digest.
- Resend — handles transactional emails such as welcome messages, onboarding prompts, and deadline alerts.
- Stripe — processes all payments for paid subscriptions. Stripe is PCI-compliant and handles your payment data under their own privacy policy.
- GitHub — our website (grantcommand.com) is hosted on GitHub Pages. GitHub may log standard web traffic metadata.
- Cloudflare — provides CDN services and security protections for our website. Cloudflare may process requests through their global network.
We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes.
4. Data Retention
We keep your data for as long as you are an active subscriber. If you unsubscribe, we will delete your personal data from our systems within 30 days, except where we are required by law to retain certain records (such as billing records, which Stripe may retain per their legal obligations).
You can request deletion of your data at any time by emailing support@grantcommand.com.
5. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correct — ask us to update or fix inaccurate information about you.
- Delete — request that we delete your personal data ("right to be forgotten").
- Unsubscribe — opt out of emails at any time using the unsubscribe link in any email we send, or by contacting us.
To exercise any of these rights, email us at support@grantcommand.com. We'll respond within 30 days.
6. Cookies
Our website uses minimal cookies. We do not use advertising cookies, analytics tracking cookies, or any third-party marketing cookies. Cloudflare may set a security cookie to protect against bots and malicious traffic — this is strictly functional and does not track you across other websites.
Our emails may contain a small tracking pixel (provided by Beehiiv and Resend) to track whether the email was opened. You can disable this by turning off image loading in your email client.
7. Children's Privacy
GrantCommand is designed for nonprofit organizations, schools, and their staff — not for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes — such as collecting new types of data or sharing data in new ways — we will notify subscribers via email before the changes take effect. The effective date at the top of this page will always reflect the most recent version.
9. Contact
Questions, requests, or concerns about your privacy? Get in touch: