MCGrantz is operated by Millennials Creatives LLC ("we", "us"). This policy explains what we collect, why, and the choices you have. Questions? Email finessehumxn@gmail.com.
| Data | Why |
|---|---|
| Email address and a hashed password | To create and secure your account. We never store your password in plain text. |
| Client organization profiles you enter (name, mission, EIN, budget, keywords) | To search and score grant opportunities for those organizations. You control what you enter. |
| Saved opportunities, status notes, and deadlines | To power your pipeline and deadline reminders. |
| Usage counts (searches, drafts) and plan | To enforce plan limits and billing. |
| Security events: sign-ins, password resets, and the IP address and time of those events | To protect your account and provide an audit trail. |
| Stripe customer identifier (if you subscribe) | To manage your subscription. Card details are handled by Stripe — we never see or store them. |
Opportunity, award-history, and foundation information comes from public sources — Grants.gov, USASpending.gov, and IRS Form 990 filings (via ProPublica). We do not create records about private individuals from these sources; they describe organizations and public awards.
When AI features are enabled, the organization profile and the text of the specific opportunity you choose are sent to our AI provider (Anthropic) to reason about eligibility and produce draft language. This happens only when you trigger a scoring or drafting action. We do not use your data to train models, and our provider processes it to return your result, not to train on it.
We rely on a small number of service providers to run MCGrantz: our hosting provider, Stripe (payments), and our email and AI providers where configured. Each receives only the data needed for its function. Today these are: Render (hosting), Stripe (payments), Anthropic (AI features), and Resend (email).
We keep your account data while your account is active. You can delete client organizations and saved opportunities at any time. To delete your entire account, contact us and we will remove your data within 30 days, except where we must retain records for legal or tax reasons.
You can view your recent security events in the app, sign out of all sessions, reset your password, and request access to or deletion of your data. Depending on where you live (for example, under GDPR or the CCPA), you may have additional rights; contact us to exercise them.
See our Trust & Security page for how we protect accounts and data.
We will update the date above when this policy changes and, for material changes, notify account holders.