Privacy policy

Information we collect

When you join the waitlist. The waitlist form is a Google Form. It collects what you enter, such as your name, email, institution, and role, and Google processes it under its own privacy policy.

When you create an account. Your name, email address, and password. Passwords are stored only as a secure hash by our authentication provider; we never see them.

Lab data you enter. Information you and your teammates add to the app, such as awards, budgets, spending, encumbrances, proposals, documents, deadlines, and personnel records including names, roles, salaries, and effort percentages.

Technical information. Our hosting and error monitoring providers record standard technical data, such as IP address, browser type, pages requested, and error details, to keep the service running and secure.

Cookies and local storage

The website does not use advertising or analytics cookies. The app uses cookies that are needed to keep you signed in and to remember whether you are viewing the demo, and it stores display preferences, such as theme and selected lab, in your browser. You can clear these at any time in your browser settings; you will be signed out.

How we use information

• To provide the app: storing your lab's data, showing it to the people you invite, and sending account emails such as confirmations, password resets, and invitations.
• To send deadline reminders and notifications you have turned on.
• To contact waitlist members about access and product updates. You can ask to be removed at any time.
• To keep the service secure, fix errors, and prevent abuse.
• To meet legal obligations.

Who can see your lab's data

Only members of your lab who you or your teammates invite can see your lab's data. Access is enforced in the database, not just in the app, so one lab cannot read another lab's records. Your lab or institution controls its data; we process it on your behalf to provide the service. Our staff access customer data only when needed to support you, fix a problem, or comply with the law.

Service providers

We use a small number of providers to run GrantsManager. Each receives only what it needs:

• Supabase: database, sign-in, and file storage, hosted in the United States (AWS US East).
• Vercel: hosting for the website and app.
• Google: the waitlist form, and web fonts loaded by the app.
• Email delivery provider: sends account emails and reminders.
• Error monitoring provider: receives technical details when something breaks.

Funding opportunities shown in the app come from the public Grants.gov API. We do not send your personal information to Grants.gov.

How long we keep information

We keep account and lab data while your account is active. If you delete your lab or ask us to delete your account, we delete the data within 30 days, except where the law requires us to keep it. Copies in backups are removed as those backups expire. Waitlist entries are deleted on request or once they are no longer needed.

Your choices and rights

You can view and update your information in the app, and ask us to access, export, correct, or delete personal information we hold about you. Depending on where you live, laws such as the GDPR or the California Consumer Privacy Act may give you additional rights. Email hello@seaport.studio and we will respond within 30 days. If your institution manages your account, we may refer your request to it.

Security

We encrypt data in transit and at rest and limit access to it. No system is perfectly secure, but we work to protect your information. See our security page for details.

Children

GrantsManager is built for research professionals and is not directed to children under 16. We do not knowingly collect their information.

Changes to this policy

If we make material changes, we will update the date above and notify account holders by email or in the app before the changes take effect.

Contact

Questions about privacy: hello@seaport.studio