Privacy Policy

We collect information you provide directly, including:

• organization profile details (name, legal type, province, focus areas, partners);
• proposal text and section drafts you create or generate;
• documents you upload to your knowledge base;
• voice input you choose to provide for dictation or read-aloud features.

We also collect limited technical information needed to operate the service, such as basic request logs.

We use your information to:

• generate, score, and improve grant content at your request;
• match your profile to relevant funding opportunities;
• save and load your profile, projects, and drafts;
• operate, secure, and maintain the service.

To generate drafts, scores, matches, and answers, we send the relevant content to Amazon Bedrock for AI inference. This inference is processed in the United States via Amazon Bedrock cross-region inference: the content is transmitted to return a result to you and is not retained by the AI provider after the request completes.

Because this processing takes place in the United States, the content you submit for AI features is subject to a cross-border transfer and, while it is being processed there, may be accessible to U.S. governmental authorities under applicable U.S. law. By using the AI features you consent to this transfer. We do not use your content to train our own models, and the AI provider does not use content submitted through Bedrock to train its base models. Your stored data (profile, drafts, and documents) remains in Canada, as described in section 4.

Your profile and drafts are stored in Amazon DynamoDB, and uploaded knowledge base documents are stored in Amazon S3, both in the Canada (Central) region (ca-central-1). Your data is stored in Canada; only the transient content sent for AI features is processed in the United States, as described in section 3. Some workspace data (such as drafts in progress) is also cached locally in your browser so the app loads quickly.

We do not sell your personal information. We share it only with the service providers that help us operate the service (such as our cloud infrastructure provider), and only to the extent needed to provide it. We may disclose information if required by law.

We use reasonable technical and organizational safeguards to protect your information, including encryption at rest for stored data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We keep your information for as long as your account is active or as needed to provide the service. You can request deletion of your data, and we will remove it unless we are required to retain it by law.

Subject to applicable law, you have the right to access, correct, and request deletion of your personal information, and to withdraw consent to its processing. To exercise these rights, contact us using the details below. Residents of Quebec have additional rights under Law 25, including the right to data portability.

The service uses local browser storage to remember your active project, profile, and in-progress drafts. This data stays on your device until you clear it or it is replaced by a newer copy.

We may update this policy from time to time. Material changes will be reflected by an updated effective date.

For privacy questions or to exercise your rights, contact our privacy officer at privacy@cangrant.ai.