Legal
Privacy Policy
Last updated: October 10, 2026
This policy names what this site actually collects, every service that touches your data, and how to get your data corrected or deleted. Nothing here is sold, and there are no advertising trackers.
What I collect
When you send the contact form: your name, email, organization, and your message, plus your IP address and browser identifier for spam control. If you create an account: your email and sign-in records. If you buy something: the purchase record (product, tier, your email). Card numbers go to Stripe and never touch this site. Nothing else is collected. There are no advertising or analytics trackers on this site.
Services that process data on my behalf
This site runs on a small set of processors: Supabase stores the database and handles accounts; Stripe handles payments; Cloudflare Turnstile screens the contact form for bots; Vercel hosts the site and keeps standard server logs; Resend sends the purchase-confirmation email. If you type a location into the Grant Lab map preview, that text goes to Mapbox to draw the map. Each processor receives only what its job requires.
The AI tools
What you type into the Grant Narrative Lab is sent to OpenAI to generate the response. I log usage events (timestamps, estimated token counts, IP address, and a per-browser visitor id) to enforce rate limits and stop abuse; I do not use your prompts to train anything. If you supply your own OpenAI API key, it stays in your browser (session-only unless you opt to remember it on your device) and is sent with your requests; it is never stored on my server.
In your browser
Local storage holds your theme preference, the Grant Lab visitor id, and, only if you switch on local autosave, your Grant Lab drafts. Cookies are functional only: sign-in sessions and anti-spam verification. No third-party advertising cookies, ever.
Retention and your rights
Contact-form submissions are kept so I can reply and follow up; account and purchase records are kept as long as your account or my legal obligations require. Email me and I will tell you what I hold about you, correct it, or delete it. Deletion requests are honored unless a legal or accounting obligation requires keeping a record.
Contact
Privacy questions: nathaniel@natfordplanning.com