Privacy

Grantwell helps churches find grants. Here is what it keeps, and why.

What we store

Your email address, to send sign-in links and invitations. There are no passwords.
Your church's profile: what you type on the profile page (name, business number, city, programs, budget, contact details). It's used to match grants and to write drafts and emails.
Your church's API keys (Claude, Brave Search), encrypted. They're only used for the AI features your team runs and are never shown again after saving.
Grant finder results your team saves.
A sign-in cookie, and when each person last signed in. No advertising or tracking cookies.
The internet address a sign-in request came from, for two days, to limit abuse.
The email address of anyone your team invites, until they join or the invitation expires (14 days).

Who sees it

People on your church's team.
When your team uses an AI feature, the profile and grant details for that request are sent to Anthropic (Claude) under your church's API key, and finder searches go to Brave Search under your key.
Sign-in emails are sent through our email provider (Resend).
The site and its database run on Cloudflare, which also keeps short-lived server logs.
The person who runs Grantwell can see each church's name, its team members' email addresses and which API keys are saved (never the keys themselves), and can reach the database to keep the service working.

We don't sell or share your information otherwise.

Public data

Grant awards and charity information on this site come from government open data (Government of Canada, CRA and British Columbia) and are already public.

Deleting

An owner can delete the church's account, and anyone can delete their own, from the Account page. Deletion is immediate. Database backups are kept by our hosting provider for up to 30 days and then expire.