Privacy Policy
Last updated: October 5, 2026
GrantWise Canada (“GrantWise”, “we”) provides grant management software for Canadian nonprofits, Indigenous organizations, public bodies, and the consultants who serve them. This policy explains what personal information we handle, why, where it is stored, and the choices you have.
Who is responsible
GrantWise Canada, operated by Siraj Sohail Syed, is responsible for the personal information described here. Questions or requests can be sent to sohail09.syed@gmail.com.
What we collect
- Account information: your name, work email address, and role, and your organization’s name and profile details.
- Workspace content: the grant records, contribution agreements, budgets, reporting dates, notes, contacts, and documents you or your team enter or upload.
- Technical information: basic information needed to run and secure the service, such as sign-in activity and error logs.
- Messages: emails you send us, and the sign-in links, reminders, and notifications we send you.
Please do not upload personal information about members of the public, beneficiaries, or clients unless you have the authority to do so and it is necessary for your grant work.
How we use it
- To provide, secure, and support the service, including sign-in and team access.
- To send sign-in links, deadline and reporting reminders, and service notices.
- To generate drafts, summaries, and analysis when you use AI features (see “Service providers” below).
- To respond to your questions and to improve the product.
We do not sell personal information.
Service providers and where data is stored
We use the following providers to run GrantWise. Some of them store or process information outside Canada, including in the United States. Your information may therefore be subject to the laws of those countries.
| Provider | Purpose | Location |
|---|---|---|
| Fly.io | Application hosting | Toronto, Canada (primary region) |
| Supabase | Database, authentication, and file storage | United States |
| Anthropic | AI-assisted drafting and analysis, when you use those features | United States |
| Resend | Sending sign-in links and notification emails | United States |
| Stripe | Payment processing, when online checkout is available | Handled by Stripe; we do not store card numbers |
| Microsoft Clarity | Usage analytics on our public marketing pages only | United States |
When you use AI features, the text you provide for that request (for example, parts of a grant record or your organization profile) is sent to the AI provider to generate a response. Do not use AI features with information you are not permitted to share with a service provider.
Analytics
We use Microsoft Clarity (session recordings and heatmaps) on our public marketing pages, such as the home page, preview, about, and blog pages, to understand how visitors use the site. They are not loaded inside the signed-in application, on the sign-in page, or on authentication pages.
Security
Connections to GrantWise use HTTPS. Sign-in uses one-time email links rather than stored passwords, and access to a workspace is limited to the people invited to it. No system is perfectly secure, and we cannot guarantee absolute security.
Retention and deletion
We keep workspace content while your account or pilot is active so you can use it. On request, we will delete your workspace content or return it to you. Contact us at the email above. We may keep limited records where needed for security, legal, or accounting reasons.
Your choices and rights
You can ask to access or correct the personal information we hold about you, withdraw consent where it applies, or ask us to delete your account. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.
Children
GrantWise is a business service and is not directed at children.
Changes
We may update this policy. We will change the “Last updated” date above when we do, and notify account holders of material changes.