Privacy Policy

1. Who We Are & Scope of This Policy

Grant Search US (doing business as "Grant Search International™") is the legal entity that operates this Platform. References to "Grant Search US" or "Grant Search International™" throughout this policy refer to the same legal entity.

This Privacy Policy explains how Grant Search US ("we," "us," or "our") collects, uses, stores, and shares information about you when you use the Grant Search US platform and services ("Platform"). It applies to all users, including free and paid subscribers, and anyone who visits our website.

This Policy satisfies the privacy notice requirements of the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA); the Virginia Consumer Data Protection Act (VCDPA); the Colorado Privacy Act (CPA); the Connecticut Data Privacy Act (CTDPA); the Texas Data Privacy and Security Act (TDPSA); the Oregon Consumer Privacy Act (OCPA); the Montana Consumer Data Privacy Act (MCDPA); the Indiana Consumer Data Protection Act (IN SB 5, eff. Jan. 1, 2026); the Kentucky Consumer Data Protection Act (KY HB 15, eff. Jan. 1, 2026); the Rhode Island Data Transparency and Privacy Protection Act (RI HB 7787, eff. Jan. 1, 2026); and other applicable state comprehensive privacy laws. This Policy is separate from our Terms & Conditions and Cookie Policy.

2. Information We Collect

We collect the following categories of personal information:

A. Information You Provide Directly: • Identifiers: name, email address, and account password (hashed). • Professional/Organizational Data: business name, type (nonprofit, for-profit, etc.), industry, location, description, mission statement, year founded, employee count, annual revenue, and website. • Sensitive Personal Information: Tax ID / EIN and DUNS number (used solely to pre-fill grant applications — classified as "sensitive personal information" under CPRA and treated accordingly). • Grant Application Content: answers, narratives, uploaded documents, and notes you create within the Platform. • Communications: messages you send through the Support page or email. • Financial Data: subscription plan, payment amount, and card-last-four (collected by our payment processor; we receive only a tokenized reference).

B. Information Collected Automatically: • Usage Data: pages visited, features used, buttons clicked, search queries, and time spent on the Platform. • Device & Connection Data: IP address, browser type, operating system, and referring URLs. • Authentication Tokens: session tokens stored in cookies and local storage (see Cookie Policy).

C. Sensitive Personal Information (CPRA / State Privacy Law Classification): The following information we collect is classified as "sensitive personal information" under CPRA and equivalent categories under other state laws: (i) Tax ID / EIN; (ii) government-issued identifier numbers (e.g., DUNS); (iii) precise account credentials (passwords). We use sensitive personal information only to provide the Services to you. We do not use or disclose sensitive personal information for any other purpose without your explicit consent. You have the right to limit our use and disclosure of sensitive personal information.

3. How We Use Your Information

We use your information for the following purposes and legal bases:

• Service Delivery (Contract Performance): to provide grant discovery, AI-powered eligibility analysis, application drafting, budget tools, and all other Platform features. • Personalization (Legitimate Interest / Contract): to match you with relevant grants based on your organization profile, industry, location, and funding needs. • AI Assistance (Contract / Consent): your profile and application content are used as context for AI-generated drafts and analysis within your session. We do not use your application content to train AI models without your explicit consent (see Section 8c of Terms). • Billing (Contract): to process payments, manage subscriptions, and handle refund requests. • Communications (Consent / Legitimate Interest): to send deadline reminders, product updates, and service notifications. You may opt out of marketing emails at any time via the unsubscribe link in any email or in your notification settings. Transactional/service emails (e.g., receipts, security alerts) cannot be opted out of while your account is active. • Safety, Security & Fraud Prevention (Legitimate Interest / Legal Obligation): to detect fraud, investigate abuse, enforce our Terms, and comply with law enforcement requests. • Analytics & Improvement (Legitimate Interest): to understand aggregate Platform usage and improve features. We use only privacy-respecting analytics and do not build individual behavioral profiles for advertising purposes. • Legal Compliance (Legal Obligation): to comply with applicable laws, regulations, and lawful governmental requests.

We do not use your information for any purpose that is incompatible with the purposes disclosed above without providing you additional notice and, where required, obtaining your consent.

4. Sharing of Your Information

WE DO NOT SELL YOUR PERSONAL INFORMATION. WE DO NOT SHARE YOUR PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING.

We share your data only in the following limited circumstances:

• Service Providers (Processors): third-party vendors who help us operate the Platform, including cloud hosting providers (Base44), payment processors, and email delivery services. These providers access your data only to perform services on our behalf and are contractually prohibited from using it for any other purpose. • AI Sub-Processors: as described in Section 4a below. • Legal Obligations: when required by law, court order, subpoena, or government authority, or when necessary to protect the rights, safety, or property of Grant Search US or others. We will notify you of such disclosures where legally permitted. • Business Transfers: in the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your data may be transferred. We will provide at least 30 days' notice before your data becomes subject to a materially different privacy policy. • With Your Explicit Consent: for any other purpose, only with your prior written agreement.

We do not share personal information with data brokers, advertising networks, analytics companies for profiling purposes, or any third party for their own marketing purposes.

4a. AI Processing & Sub-Processors

When you use AI-powered features — including AI draft generation, narrative assistance, budget analysis, eligibility evaluation, and similar tools — your grant application content (including text you have written, your organization profile, and related context) is transmitted to third-party AI service providers ("AI Sub-Processors") to generate responses.

Current AI Sub-Processors:

• Base44 AI Integration Layer — Grant Search US uses Base44's InvokeLLM integration, which routes AI requests through enterprise-tier API agreements with leading AI providers. Under these agreements, AI providers are contractually prohibited from using your content to train, improve, or fine-tune their AI models. Your data is processed transiently to generate the requested output and is not retained by the AI provider beyond the processing window.

What this means for you: • Your grant narratives and application content are NOT used to train AI models. • Content is transmitted over encrypted connections (TLS 1.3). • AI providers process your content as a "data processor" under Data Processing Agreements (DPAs) that satisfy GDPR Article 28 and CCPA service provider requirements. • No human at an AI provider reviews your content in the ordinary course of operations.

CCPA — AI Processing as a Service Provider: All AI Sub-Processors operate under contractual service provider agreements prohibiting them from selling, retaining, using, or disclosing your personal information for any purpose other than performing the specific AI services requested.

Texas AI Governance Notice: As required by the Texas Responsible Artificial Intelligence Governance Act (TX HB 149, eff. Jan. 1, 2026), we disclose that our Services use AI systems to process personal data for grant analysis and drafting assistance. These systems do not make consequential decisions about your legal rights or financial eligibility for public benefits — they assist with commercial grant applications only.

Colorado & Minnesota AI Training Disclosure: As required by Colorado Privacy Act regulations and Minnesota privacy law amendments (2025–2026), we disclose that your personal information and application content are NOT used to train, improve, or fine-tune any large language models or generative AI systems. Our AI sub-processor agreements contractually prohibit the use of your data for model training. We do not collect, use, or sell personal information for the purpose of training large language models.

Minnesota Profiling Disclosure: Under Minnesota privacy law, if we engage in profiling that produces legal or similarly significant effects, we will provide the rationale for such decisions, inform you of actions you could take to secure a different outcome, and provide the right to review and correct data with re-evaluation. Grant Search US does not engage in profiling that produces legal or similarly significant effects on users — our AI tools assist with commercial grant applications only and all outputs require human review before use.

You may opt out of AI-powered features by choosing not to use the Generate, AI Draft, or similar AI buttons. All AI features are optional.

4b. PDF Auto-Fill Processing — Transient Data Processing

When you use the AI PDF Auto-Fill feature, your uploaded PDF forms and reference documents are processed transiently as follows:

DATA PROCESSING ACTIVITIES: • Upload: You upload a PDF form and optional reference documents (Word, PDF, or other supported formats). • Field Detection: Our AI system analyzes the PDF structure to detect form fields and their labels. • Data Extraction: Reference documents are processed to extract relevant answers for form fields. • Field Mapping: AI maps extracted data to detected form fields based on semantic similarity. • Temporary Storage: Files are stored encrypted for up to 24 hours during processing and review. • Automatic Deletion: All uploaded files and processed data are automatically deleted from our servers within 24 hours of job completion. • User Download: You download the filled PDF to your local device — we do not retain a copy.

LEGAL BASIS FOR PROCESSING: • Contract Performance (GDPR Art. 6(1)(b)): Processing is necessary to provide the PDF auto-fill service you have requested. • Consent (GDPR Art. 6(1)(a)): By uploading documents, you consent to transient processing for form-filling purposes. • Legitimate Interest (CCPA/TDPSA/etc.): Processing is necessary to deliver the core functionality of the Platform.

DATA MINIMIZATION: We process only the minimum data necessary to complete the form-filling task. No PDF content is used for model training, analytics, or any purpose beyond providing the service to your account.

RETENTION: PDF files are retained for a maximum of 24 hours post-processing, then automatically and permanently deleted. No backup copies are retained beyond this period.

SECURITY: All PDF uploads are encrypted in transit (TLS 1.3) and at rest (AES-256). Access is restricted to the automated processing system only — no human personnel review uploaded PDFs in the ordinary course of operations.

Your Rights: You may request immediate deletion of your uploaded PDFs at any time by contacting support via the Support page.

5. Payment Data & Financial Information

Payment processing is handled entirely by our third-party payment processor (Base44/Wix Payments). Grant Search US does not store your full credit card number, CVV, expiration date, or bank account details on our servers.

For fraud prevention and billing management purposes, we may retain: • The last four digits of your payment card. • A tokenized payment reference provided by the payment processor. • Payment amount, date, billing period, and plan type. • IP address at the time of purchase (retained 90 days; see Section 8).

Your Tax ID / EIN and revenue information are stored encrypted using AES-256 and used solely to pre-fill grant applications. They are never shared with payment processors, advertisers, or data brokers. These fields are classified as sensitive personal information under CPRA.

6. Cookies & Tracking Technologies

We use cookies and similar technologies (local storage, session tokens) for the following purposes:

• Authentication (Essential): to keep you securely logged in during your session. • Security (Essential): to protect against CSRF attacks and unauthorized access. • Preferences (Functional): to remember your display settings and saved filters. • Analytics (Optional): to understand aggregate usage patterns. We use privacy-respecting analytics and do not build individual behavioral profiles for advertising purposes.

We do NOT use third-party advertising cookies, cross-site tracking cookies, or cookies that facilitate targeted advertising. See our full Cookie Policy for details, a representative cookie inventory, and instructions on managing your preferences.

7. Data Storage, Security & Breach Notification

Your data is stored on servers located in the United States (hosted by Base44). We implement the following security measures:

• AES-256 encryption for data at rest. • TLS 1.3 for all data in transit. • Role-based access controls (RBAC) limiting personnel access to user data. • Regular security reviews and vulnerability assessments. • Automated PII purge routines (IP addresses purged after 90 days).

For full details, see our Security page.

DATA BREACH NOTIFICATION: In the event of a security incident involving your personal data, we will: • Notify affected users within 72 hours of discovery where feasible, or as soon as reasonably practicable. • Notify applicable state authorities within the timeframes required by applicable law (e.g., California, New York, Texas breach notification laws). • Provide required information about the nature of the breach, data affected, and remedial steps.

While we implement industry-standard protections, no system is completely immune to breaches.

8. Data Retention

We retain your personal data as follows:

• Active Account Data: retained for the life of your account plus a 30-day grace period. • Account Deletion: upon deletion request, personal data is removed within 30 days, except: — Financial transaction records retained up to 7 years (tax/accounting legal requirement). — Fraud investigation records retained as long as the investigation is active. — Data subject to legal hold or litigation hold retained for the duration of such hold. • IP Addresses: collected for fraud detection, retained maximum 90 days, then automatically purged. • Support Communications: retained 2 years after last contact, then deleted. • Anonymized/Aggregated Usage Data (non-identifying): may be retained indefinitely for product improvement.

Deletion requests under applicable state privacy laws (CCPA, VCDPA, etc.) are processed within 45 days of verification, with a one-time 45-day extension if notice is provided.

9. Your Rights — All Users

Regardless of your location, you have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you. • Correction/Rectification: request that inaccurate or incomplete data be corrected. • Deletion/Erasure: request that we delete your personal data (subject to legal retention requirements). • Portability: request your data in a portable, machine-readable format (JSON or CSV). • Opt-Out of Marketing: unsubscribe from marketing emails at any time via the unsubscribe link in any email. • Withdraw Consent: withdraw previously given consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us via the Support page. We will verify your identity before processing the request and respond within the applicable legal deadline (typically 30–45 days).

10. CCPA / CPRA — California Residents

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), effective January 1, 2023:

• Right to Know (CCPA § 1798.110): request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, including the sources, purposes, and third parties with whom it was shared. • Right to Delete (CCPA § 1798.105): request deletion of personal information we have collected, subject to certain exceptions (legal obligation, fraud prevention, etc.). • Right to Correct (CPRA § 1798.106): request correction of inaccurate personal information. • Right to Opt Out of Sale or Sharing (CCPA § 1798.120): WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION. We do not sell personal data to third parties, and we do not share it for cross-context behavioral advertising. You may still submit a Do Not Sell or Share request at our Do Not Sell page. • Right to Limit Use of Sensitive Personal Information (CPRA § 1798.121): we do not use your sensitive personal information (Tax ID/EIN, precise credentials) for any purpose beyond what is necessary to provide the Services. • Right to Non-Discrimination (CCPA § 1798.125): we will not discriminate against you for exercising your CCPA/CPRA rights. You will not receive a different price, quality of service, or level of access as a result. • Right to Know About Automated Decision-Making (CPRA Regulations, eff. Jan. 1, 2027): we will provide required disclosures when CPRA automated decision-making regulations take effect.

Global Privacy Control (GPC) Signal: We process opt-out preference signals sent through browser settings or extensions, including the Global Privacy Control signal, as requests to opt out of the sale or sharing of personal information. Since we do not sell or share personal information, honoring a GPC signal has no effect on your service experience. You may also submit a formal request via our Do Not Sell page at any time.

FINANCIAL INCENTIVE DISCLOSURE (CCPA § 1798.125(b) & § 1798.130(a)(5)(c)): Grant Search US operates a Referral Program under which users may earn platform credits (which have no cash value) when referred users sign up. Under CCPA, credits offered in exchange for referrals may constitute a "financial incentive" or "price or service difference" based on the collection, use, or disclosure of personal information. We disclose the following: (a) the value of the referral credits is determined by the platform and is non-cash, non-transferable, and has no monetary value; (b) the credits are provided as a promotional reward, not as compensation for your personal data; (c) we do not collect, use, or disclose your personal information in a manner that entitles you to additional compensation beyond the stated credit value; (d) you may opt out of the Referral Program at any time by not sharing referral links; (e) participation in the Referral Program is voluntary and does not affect your access to or quality of the core Services. We do not offer financial incentives or penalties based on the collection, deletion, or sale of personal information beyond the Referral Program.

DATA MINIMIZATION (CCPA § 1798.100(c) & State Law Requirements): Grant Search US limits the collection of personal information to what is reasonably necessary and proportionate to achieve the purposes for which it was collected, as required by California, Colorado, Minnesota, and other state privacy laws. We do not collect categories of personal information beyond what is necessary to provide the Services, prevent fraud, comply with legal obligations, and perform the other disclosed purposes. When the purpose for which personal information was collected is no longer applicable, we will delete or further process the data in an anonymized form.

To submit a CCPA/CPRA request: contact us via the Support page with "CCPA Privacy Request" in your message. We will verify your identity and respond within 45 days (extendable once by 45 days with notice). You may designate an authorized agent to submit requests by providing written authorization.

Authorized Agent Requests: authorized agents must provide written authorization signed by the consumer. We may require the consumer to directly verify their identity with us.

11. State Privacy Rights — Residents of Other States

Residents of the following states with comprehensive privacy laws have rights substantially equivalent to those described in Section 10. We honor these rights uniformly for all U.S. residents:

States with active laws as of June 2026: Virginia (VCDPA) · Colorado (CPA) · Connecticut (CTDPA) · Texas (TDPSA) · Oregon (OCPA) · Montana (MCDPA) · Iowa (ICPA) · Indiana (eff. Jan 1, 2026) · Kentucky (eff. Jan 1, 2026) · Rhode Island (eff. Jan 1, 2026) · Utah (UCPA) · New Hampshire (eff. Jan 1, 2025) · New Jersey (eff. Jan 15, 2025) · Delaware (eff. Jan 1, 2025) · Tennessee (eff. Jul 1, 2025) · Minnesota (eff. Jul 31, 2025) · Maryland (eff. Oct 1, 2025) · Nebraska (eff. Jan 1, 2025) · Iowa (eff. Jan 1, 2025)

Your rights in these states include: right to access, right to correct, right to delete, right to portability, right to opt out of sale/targeted advertising/profiling, and right to appeal our decisions.

Right to Appeal: if we deny your privacy rights request, you may appeal the decision by contacting us via the Support page. We will provide a written response to your appeal within 45 days (or the applicable state deadline). If your appeal is denied, we will provide information about how to submit a complaint to your state's attorney general.

To exercise any of these rights, contact us via the Support page. We respond within the applicable legal deadline for your state (generally 45 days from verified request).

12. GDPR — EEA & UK Residents (Legacy Accounts)

Grant Search US has implemented geo-blocking for EU/EEA visitors. GDPR obligations apply to any legacy EEA/UK accounts and any inadvertent access. If you are an EEA or UK resident, the following applies:

Legal Basis for Processing: • Contract Performance: to provide the Services you have subscribed to. • Legitimate Interests: to improve the Platform, prevent fraud, and protect our legal rights (balanced against your interests). • Consent: for marketing communications (withdrawable at any time). • Legal Obligation: to comply with applicable laws.

Data Transfers: When personal data of EEA/UK residents is transferred to the US, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission (Decision 2021/914), or UK International Data Transfer Agreements (IDTAs).

Data Subject Rights (GDPR Chapter III): right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), object to processing (Art. 21), and not be subject to solely automated decision-making with significant effects (Art. 22). Contact us via the Support page to exercise these rights.

Right to Lodge Complaint: you may lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national DPA in the EEA).

Data Controller: Grant Search US, 24196 Alicia Parkway, Suite I, Mission Viejo, CA 92691.

13. Children's Privacy (COPPA)

PLATFORM NOT DIRECTED AT MINORS — AGE 18+ ONLY: Grant Search US is intended SOLELY for users who are at least 18 years old. This Platform is NOT directed at minors under 18, and we do not knowingly collect personal information from users under 18. We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

BY USING Grant Search US, YOU REPRESENT AND WARRANT THAT YOU ARE AT LEAST 18 YEARS OLD. If you are under 18, you may not use this Platform under any circumstances.

If we learn that we have inadvertently collected information from a user under 18, we will delete it promptly. If you believe a minor has provided us with personal information, contact us via the Support page immediately.

If we learn that we have inadvertently collected information from a user under 18, we will delete it promptly. If you believe a minor has provided us with personal information, contact us via the Support page immediately.

FOR K-12 EDUCATORS AND EDUCATION APPLICANTS: If you are a K-12 educator, school administrator, or district employee using Grant Search US for education grant applications, you must NOT enter any student names, ages, student ID numbers, academic records, or personally identifiable information about minors into the Platform. Use only aggregate, anonymized, or de-identified data. You are solely responsible for ensuring your use complies with FERPA, COPPA, and all applicable state student privacy laws (including Maryland, Connecticut, Colorado, California, and other state teen privacy statutes enacted 2024-2026). Grant Search US bears no liability for COPPA violations, FERPA violations, or state minor privacy law violations arising from your use of the Platform.

13a. International Users — Additional Jurisdiction-Specific Privacy Rights

The following notices apply to users in specific international jurisdictions in addition to the rights described in Sections 9–12.

NEW ZEALAND — Privacy Act 2020: If you are located in New Zealand, you have rights under the Privacy Act 2020 (NZ), which aligns with GDPR-level protections. You have the right to: access personal information we hold about you, request correction of inaccurate personal information, and lodge a complaint with the Office of the Privacy Commissioner (OPC) at privacy.org.nz. In the event of a notifiable privacy breach affecting your data, we will notify the OPC and affected individuals as required by the Privacy Act 2020. Contact privacy@grantsearchus.com for NZ privacy rights requests.

JAPAN — Act on Protection of Personal Information (APPI) 2022 Amendments: If you are located in Japan, your personal data is governed by the Act on Protection of Personal Information (APPI), as amended effective April 1, 2022. You have the right to: request disclosure of personal information we hold about you, request correction or deletion of inaccurate data, and lodge a complaint with the Personal Information Protection Commission (PPC) at ppc.go.jp. CROSS-BORDER TRANSFER NOTICE: Your personal data is transferred to and processed in the United States. Japan has not issued an adequacy finding for the United States under APPI. By using Grant Search US, you consent to this cross-border transfer as permitted under APPI Article 24. You may withdraw consent at any time by deleting your account. Contact privacy@grantsearchus.com for APPI rights requests.

13b. India DPDP Act — Indian Data Principals

India's Digital Personal Data Protection Act 2023 (DPDP Act) governs the processing of personal data of individuals located in India.

If you are located in India, you have the following rights as a "Data Principal" under the DPDP Act:

• Right to Access Information: you may request a summary of the personal data we process about you and the processing activities related to it. • Right to Correction and Erasure: you may request correction of inaccurate or misleading personal data, and erasure of personal data that is no longer necessary or that you no longer consent to our processing. • Right to Grievance Redressal: you may lodge a grievance with us regarding our processing of your personal data. We will respond within 30 days. • Right to Nominate: you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity.

Data Transfer Notice: Your personal data is transferred to and processed in the United States. The United States does not have an adequacy determination under the DPDP Act. By using Grant Search US, Indian data principals consent to this cross-border data transfer pursuant to Section 16 of the DPDP Act (voluntary disclosure / consent basis). You may withdraw consent at any time by deleting your account, but withdrawal does not affect the lawfulness of prior processing.

Consent Manager / Grievance Officer: Grant Search US does not currently qualify as a "Significant Data Fiduciary" under the DPDP Act. Grievances may be directed to privacy@grantsearchus.com. We will respond within 30 days as required by Rule 12 of the DPDP Rules (2025).

Note: DPDP Rules are being finalized as of June 2026. We will update this notice as rules are finalized and effective dates are confirmed.

14. Automated Decision-Making & Profiling

Grant Search US uses AI-powered automated processes to provide certain features, including:

• Grant matching and eligibility scoring (algorithmic recommendations). • AI draft generation and proposal evaluation. • Fraud detection and account security monitoring.

None of these automated processes make legally or similarly significant decisions about you — they assist with commercial grant applications and account security only. You always have the ability to review, edit, and override AI-generated recommendations. No automated process is the sole basis for any decision that produces a legal effect or similarly significant impact on you.

California residents: when CPRA automated decision-making regulations take effect (Jan. 1, 2027), we will provide required opt-out rights and disclosures.

15. Third-Party Links

The Platform may contain links to external grant funder websites, government portals, and third-party resources. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit through links on our Platform. Grant Search US is not responsible for the privacy practices of any third parties.

Grant funder websites (Grants.gov, SAM.gov, foundation portals, etc.) are operated by separate organizations with their own privacy policies and terms.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes — particularly those affecting how we use or share your personal data, or that affect your rights — we will:

• Notify you via email to the address on file at least 7 days before changes take effect. • Display a prominent notice within the Platform. • Update the "Last updated" date at the top of this page.

For changes required by law or new regulatory guidance, we may provide shorter notice. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy. If you do not accept material changes, you should stop using the Platform and cancel any active subscription before the effective date.

17. Contact & Privacy Requests

For privacy-related questions, data requests, or to report a privacy concern:

Online: Support page (fastest — recommended) Mail: Grant Search US, ATTN: Privacy, 24196 Alicia Parkway, Suite I, Mission Viejo, CA 92691

We aim to respond within 2 business days and will complete all verified privacy rights requests within the applicable legal deadline.

For formal GDPR/UK GDPR inquiries, use the same contact information. Our Data Processing Agreement (DPA) is available at /dpa.