Grant Pursuit

Grant Pursuit Privacy Policy

Effective August 31, 2026

Homeless Pets Foundation, Inc. ("HPF," "we," "us," or "our") operates Grant Pursuit, a grant-operations workspace for authorized nonprofit teams. This policy explains how Grant Pursuit handles personal information and organization data.

Information we collect

  • Google profile data. When you choose Sign in with Google, we receive the Google account identifier, name, email address, and profile image made available through the openid, email, and profile scopes. We use this data only to authenticate you, match an invitation, create or maintain your Grant Pursuit account, and protect account access.
  • Account and organization data. We process account settings, organization membership and roles, authentication and multi-factor status, nonprofit profiles, funder and opportunity records, applications, reports, budgets, evidence, attachments, comments, tasks, approvals, audit history, and connector settings supplied by authorized users.
  • Operational and security data. We collect browser and device details, IP address, timestamps, request identifiers, session and cookie data, feature activity, error reports, security events, and audit logs needed to operate, secure, troubleshoot, and improve the service.
  • Support data. We receive the contact information and message content you submit when requesting help or exercising a privacy right.

Google sign-in does not give Grant Pursuit your Google password or access to Gmail, Google Drive, Google Calendar, or Google Contacts. The separate Google Workspace connector is disabled for this rollout; any future connector would require a separate, explicit authorization and additional disclosure.

How we use information

We use information to authenticate users; enforce invitations, roles, and organization boundaries; provide grant research and workflow features; preserve evidence, revisions, approvals, and audit records; deliver requested notifications and exports; prevent abuse; investigate incidents; provide support; comply with law; and maintain and improve Grant Pursuit. We do not use Google user data for advertising, and we do not sell personal information.

Cookies and similar technologies

Grant Pursuit uses essential cookies and local browser storage for secure sessions, cross-site request forgery protection, active-organization selection, authentication state, and user preferences. These technologies are necessary for the service to work. We do not use advertising cookies or cross-site behavioral advertising.

How we disclose information

We disclose information only as needed:

  • to other authorized members of your organization according to their roles and the collaboration features you use;
  • to service providers that process data for us, including Supabase for authentication, database, and storage; Railway for application hosting; Stripe for subscription billing; Sentry for scrubbed error monitoring; Resend for requested email delivery; Trigger.dev for scheduled work; and configured AI or integration providers only when an authorized user invokes those features;
  • to comply with law, protect rights and safety, investigate misuse, or respond to a valid legal process; and
  • as part of a merger, reorganization, or transfer of the service, subject to appropriate confidentiality and notice obligations.

Processors may use information only to provide contracted services to us and must protect it under their agreements and applicable law.

Retention and deletion

We retain account and organization data while the relevant account or organization uses Grant Pursuit and afterward only as reasonably needed for legal obligations, security, dispute resolution, fraud prevention, backups, and documented nonprofit recordkeeping. Retention varies by data type and organization requirements. When deletion is authorized, we delete or de-identify data from active systems and allow protected backups to expire on their normal cycle unless law requires longer retention.

You may request account data access, correction, export, or deletion through your organization administrator or our contact page. Organization records may belong to the organization and may require administrator approval or retention. You can also disconnect Grant Pursuit from your Google Account settings; doing so stops future Google authentication but does not by itself delete records already held in Grant Pursuit.

Security

We use role-based access, organization-level data isolation, encrypted connections, protected credentials, multi-factor authentication controls, audit logging, monitoring, backups, and other administrative and technical safeguards appropriate to the information we process. No system is completely secure, so we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have rights to know, access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal or complain to a regulator. We will verify requests and may retain information where permitted or required by law. HPF does not discriminate against people for exercising privacy rights.

Children

Grant Pursuit is a business service for authorized nonprofit personnel and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information.

International processing

Grant Pursuit and its providers may process information in the United States and other countries where privacy laws may differ. Where required, we use appropriate contractual or legal safeguards for transfers.

Changes to this policy

We may update this policy as Grant Pursuit or applicable law changes. We will post the revised policy here, update its effective date, and provide additional notice when a change is material.

Contact us

Submit privacy questions or requests through the Homeless Pets Foundation contact page, or write to Homeless Pets Foundation, Inc., 1343 Gresham Road, Marietta, GA 30062.