Privacy Policy

1. Who we are

The Great Grantsby is an EU grant monitoring service operated from the Netherlands. We help academic researchers and research labs discover relevant funding opportunities.

Data controller: The Great Grantsby
Contact:contact@grantsby.eu

2. What data we collect and why

When you create an account or use our service, we collect:

• ◆Email address — for authentication (magic link sign-in) and to send grant digests.
• ◆Research profile — your name, institution, career stage, research domains, keywords, grant history, and preferences. Used to match and score grants for you.
• ◆Chat messages — conversations with Grant Chat, stored to maintain conversation history.

We do not collect payment information or browsing data beyond what is necessary for the service.

3. Legal basis for processing

We process your personal data on the basis of your consent (Article 6(1)(a) GDPR). By creating an account, you consent to us storing and using your data as described in this policy. You may withdraw your consent at any time by emailing us at contact@grantsby.eu.

4. How long we keep your data

We keep your account data for as long as your account is active. Specifically:

• You can delete your account and all associated data at any time via the Settings page.
• Account deletion removes your profile, grant assessments, chat history, and all personal data.
• If you request deletion via email, we will process it within 30 days.

5. Who we share your data with

We do not sell or share your personal data with third parties for marketing or commercial purposes.

Your data is stored using Supabase, Inc. as our data processor (PostgreSQL cloud database). Supabase processes data on our behalf under a data processing agreement and does not use your data for any other purpose. Our database is hosted in the EU (Frankfurt region).

Transactional emails (sign-in links, confirmations) are sent via Resend, Inc. as our email processor.

Our web hosting is provided by Vercel, Inc., which may process server logs containing your IP address as part of normal HTTP request handling.

Subscription billing for Pro is processed by Mollie B.V. (Amsterdam, Netherlands). When you upgrade, Mollie receives your email address, name, and payment-method details directly — we never store payment-method data on our servers. Mollie acts as an independent controller for fraud prevention and as our processor for the subscription itself. Mollie's privacy notice: mollie.com/privacy.

Personalised relevance text on grant matches is generated by Anthropic PBC (Claude API). Your research-profile fields and the grant text are sent to Anthropic at digest-generation time. Anthropic does not train on API content. Their privacy notice: anthropic.com/privacy.

6. Your rights

Under GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to our processing of your data.
• Withdrawal of consent — withdraw your consent at any time without affecting prior processing.

To exercise any of these rights, email us at contact@grantsby.eu. We will respond within 30 days.

7. Cookies and analytics

We use Vercel Analytics, a privacy-friendly analytics tool that collects anonymous page view data without cookies or personal identifiers.

We may also use Microsoft Clarity to understand how the service is used (session replays, heatmaps, click analytics). Clarity uses cookies to identify returning visits within a session. It does not capture passwords, payment information, or fields marked sensitive. Microsoft acts as our data processor under a data processing agreement.

Clarity is only loaded after you explicitly accept our cookie banner. You can withdraw consent at any time by clearing your browser's site data for grantsby.eu, which will prompt the banner again on your next visit.

8. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

9. Complaints

If you believe we have handled your personal data incorrectly, you have the right to lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens (AP)
autoriteitpersoonsgegevens.nl

We would appreciate the opportunity to resolve any concern directly first — please reach out to us before filing a formal complaint.

10. Changes to this policy

We may update this privacy policy as the service evolves. Significant changes will be communicated by email to registered users. The "last updated" date at the top of this page always reflects the current version.