1. Who is responsible
Iteranium Inc., a federal Canadian corporation, of 85 Heartlake Road South, Brampton, Ontario L6W 3K1, Canada, is responsible for the personal information it holds through Granttude. Our privacy officer is Aditya Saxena, reachable at grants@iteranium.com. By registering for or using Granttude you agree to this policy and to our terms of service.
2. What we collect
- Your account: your name and work email address as your Google or Microsoft account gives them to us, your organisation, your role, and when your address was confirmed. We do not receive your Google or Microsoft password.
- Your organisation’s answers to the funding check, and the reading taken from them.
- What we ask you, and your answers, the documents you give us, and the steps of your journey with us.
- Security records: when you signed in or out, and, for fifteen minutes to an hour, the network address a request came from, which we use to stop repeated attempts to break into accounts.
- Your agreement to these terms and this policy: the date and the version you accepted. Your consent to marketing email, if you gave it: the date and the wording you agreed to.
- Optional questions about who owns or leads your organisation (for example, ownership by women, Indigenous or Black owners). These are sensitive. They are always optional, and skipping one changes nothing else in your reading.
- When you sign up for a subscription: the name, title, email and phone of the person who signs; the type and number of the photo ID they showed us in person, which we record once to confirm who signed; the signature they drew; the businesses covered, the plan, the number of people and the revenue band; the billing contact and any tax numbers; and the PDF of the signed agreement with its digital fingerprint.
We do not collect card numbers: when you pay by card, you enter it on our payment provider’s own page.
3. Why we use it
- to give you your reading and the service you signed up for;
- to keep your account and our systems secure, and to prevent misuse;
- to bill you, when you subscribe;
- to meet our legal obligations and to establish or defend legal claims;
- to send you marketing email, only if you agreed to it, and you can stop it at any time.
Messages the account itself needs, such as security notices and changes to these documents, are not marketing and are sent whether or not you agreed to marketing email. We do not sell personal information, and we do not use your information to train any AI model.
4. Who sees it
- The people in your own organisation who hold accounts.
- Named people at Iteranium who run the service, and approved outside experts assigned to your application, each bound to confidentiality. Each time one of them opens your organisation’s records, it is recorded, and you can see that record on your account.
- Never another organisation, including one applying to the same funding.
- The companies that run parts of the service for us, only for that purpose: our hosting provider (Vercel Inc.), MongoDB (our database), Google and Microsoft (sign-in), our email provider, our payment provider when you pay, and, where the assistant is switched on for you, the AI model provider that answers it.
- A court, regulator or law enforcement body, where the law requires it. Where the law allows, we tell you first.
- A buyer or successor, if Iteranium Inc. is reorganised or sold, who must keep to this policy.
5. Where it is kept
Your organisation’s records are stored in Canada (Toronto). Parts of the service run on servers in Montreal, Canada. Some of the providers above may process information in other countries, including the United States, where it may be accessible to the authorities there under their law.
6. How we protect it
Access is by company account only, Iteranium staff are always asked for a second factor, every organisation is kept apart from every other, and access to your records is logged. No system is perfectly secure. If a breach of our safeguards creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner of Canada as the law requires.
7. How long we keep it
For as long as your account is open. When you ask us to delete it, we do so within thirty days, and copies in our backups expire soon after. We may keep what the law requires us to keep, such as invoices and tax records, and a record of any breach of our safeguards for two years. A signed agreement, with its signature and the photo ID details recorded with it, is kept for six years after the end of the tax year in which its term ends, as a business record, and then deleted.
8. Cookies
A cookie keeps you signed in. It cannot be read by scripts on the page and is sent only to this site. A few more last only minutes: while you enter a sign-in code, while you are away signing in with Google or Microsoft, or just after you create an invitation. Your choice of light or dark display is kept in your own browser, and a conversation with the assistant stays in your browser tab and ends when you close it. We use no advertising or tracking cookies.
9. Your choices and your rights
- to see the personal information we hold about you, and correct it;
- to withdraw your consent to marketing email at any time;
- to have your account and your organisation’s records deleted;
- to complain to our privacy officer at grants@iteranium.com, and, if you are not satisfied, to the Office of the Privacy Commissioner of Canada.
We answer a request within thirty days. We may need to confirm who you are first.
10. Information you give us about other people
If you give us information about colleagues, directors, owners or others, you confirm that you are entitled to, and that they know it will be used as this policy describes.
11. Children
Granttude is for organisations and the adults who act for them. It is not meant for anyone under 16.
12. Changes
We will tell you of a material change to this policy before it applies, and, where the change matters, ask you to agree to the new version. The full terms of the service are in our terms of service.
13. Contact
Iteranium Inc., 85 Heartlake Road South, Brampton, Ontario L6W 3K1, Canada. Email: grants@iteranium.com.