Privacy Policy

Your privacy matters to us. Learn how we collect, use, and protect your personal data.

Last updated: February 2026

Privacy and data protection

Introduction

Grantory is operated by Innofy AS ("we", "us", or "our"), a company registered in Norway. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Information We Collect

Account Information

When you create an account, we collect your email address and any profile information you choose to provide, such as your name, organization details, and contact information.

Application Data

If you apply for funding opportunities, we collect the information you provide in your applications, including documents, project descriptions, and supporting materials.

Usage Information

We automatically collect certain information about your device and how you interact with our platform, including IP addresses, browser type, pages visited, and timestamps.

How We Use Your Information

  • To provide and maintain our platform services
  • To process and manage your applications
  • To match you with relevant funding opportunities using AI
  • To communicate with you about your account and applications
  • To improve our services and develop new features
  • To ensure the security and integrity of our platform
  • To comply with legal obligations

AI and Automated Processing

Grantory uses artificial intelligence to enhance your experience. This includes:

  • Matching you with relevant funding opportunities
  • Providing writing assistance for applications
  • Summarizing and analyzing opportunity requirements
  • Extracting information from uploaded documents

When you use AI features, the following data may be sent to our AI service providers: your profile information, opportunity details, and application content. This data is processed solely to provide the requested service and is not retained by our AI providers beyond the immediate request.

All AI-generated content is clearly marked. Critical decisions, such as funding awards, always require human review. You have the right to request human review of any automated decision that significantly affects you.

How We Share Your Information

We may share your information in the following circumstances:

  • With Funders: When you apply for opportunities, your application data is shared with the relevant funding organization.
  • Service Providers: We work with trusted third parties who assist in operating our platform, such as cloud hosting and AI services.
  • Legal Requirements: We may disclose information when required by law or to protect our rights and safety.

Third-Party Data Processors

We use the following third-party services to operate our platform. Each processor handles data strictly on our instructions and in accordance with our data processing agreements.

Provider Purpose Data Processed Location
Anthropic (Claude AI) AI drafting, application review, data extraction Profile details, opportunity descriptions, application content United States
Voyage AI Semantic search and opportunity matching Profile text, opportunity descriptions United States
Stripe Payment processing Email, subscription details United States
Tigris (Fly.io) File storage Uploaded documents, avatars European Union

These services process data solely on our instructions and do not use your data to train their AI models.

Your Rights

Under GDPR and applicable laws, you have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing of your data
  • Restrict Processing: Request limitation of how we use your data

To exercise these rights, contact us at privacy@grantory.com.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When you delete your account, we will delete or anonymize your personal data within 30 days, unless we are required to retain it for legal purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Cookies and Tracking

We use essential cookies to ensure our platform functions correctly. These cookies are necessary for authentication and security. We do not use third-party advertising or tracking cookies.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Innofy AS

Email: privacy@grantory.com

Country: Norway

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.