Privacy

GrantYard is operated by Gaply. You can reach us about anything on this page, including a request to see or delete your data, through the contact form.

Your email address, when you sign in. Sign-in is by emailed link, so the address is both the account and the way we reach you. There is no password to lose.

What you save. Opportunities you save, deadline alerts you switch on, and searches you ask us to re-run. This is the product — without it there is nothing on your dashboard.

What you send us. If you use the contact form we keep the name, email address and message, so a reply is possible and a request does not vanish into an unsent email.

Payment records, if you subscribe. We store your Stripe customer and subscription identifiers, the status of the subscription and when it renews. We never see or store your card number.

How you arrived, in limited form. A link from a campaign can carry a source and keyword, which we keep against your account so we can tell which posts are worth making. Two short-lived cookies carry those values from the link to the moment you sign up.

No card numbers, bank details or payment credentials. Those go directly to Stripe and never touch our servers.

No advertising profile, and no sale or sharing of your data with data brokers.

No tracking of you across other websites.

Supabase — the database and the sign-in system. Hosted in the EU (Frankfurt).

Vercel — hosting and delivery of the site itself.

Stripe — payments and subscription management, if you subscribe. Stripe is the controller of your payment details, under its own privacy policy.

Resend — sending the emails you have asked for: sign-in links, deadline alerts and the weekly email.

Google Tag Manager — only where analytics are enabled, and only to measure how the site is used in aggregate.

A session cookie that keeps you signed in. Without it, signing in would not persist past the page you are on.

A short-lived cookie remembering which page you were reading when you asked for a sign-in link, so you land back where you were.

Two short-lived campaign cookies carrying a source and keyword, as described above.

We do not use advertising cookies.

Account data stays while the account exists. Delete the account and it goes with it.

Contact messages are kept while they are useful for answering you and for our own record of what was asked.

Payment records are kept as long as tax and accounting rules require, which is longer than the subscription itself.

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it and your account with it. Write to us through the contact form and we will act on it.

If you are in the EU or UK you also have the right to complain to your national data protection authority.

You can stop the weekly email and any alert from your dashboard at any time. Sign-in links and receipts are not marketing and cannot be switched off while the account is open, because they are how the account works.

GrantYard is not aimed at children and we do not knowingly collect data from anyone under 16.

If this page changes in a way that affects you, we will say so here and update the date at the top. The date is the honest version of a changelog for a page this short.