Privacy Policy

Last Updated: March 2026

GrantSync is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information in compliance with the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and applicable federal education privacy laws.

Information We Collect

We collect the following categories of personal information:

Identifiers: name, email address, account credentials
Professional information: job title, school district, role assignments
Commercial information: budget data, vendor/staff records, ticket history
Internet activity: login timestamps, pages visited, device/browser information

We never collect student personally identifiable information (PII). GrantSync is designed for administrative budget management only.

How We Use Data

Your data is used solely to provide budget management services, improve our platform, and communicate service updates. We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

Your California Privacy Rights (CCPA/CPRA)

California residents have the following rights:

Right to Know: Request what personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt out of the sale or sharing of personal information (we do not sell your data)
Right to Non-Discrimination: Exercise your rights without receiving discriminatory treatment
Right to Limit Use: Limit the use of sensitive personal information

To exercise any of these rights, email privacy@grantsyncit.com. We will respond within 45 days.

Data Security

All data is encrypted in transit (TLS 1.2+) and at rest. Access is restricted to authorized personnel via role-based controls. We comply with FERPA, COPPA, and California education data privacy regulations (AB 1584, SOPIPA).

Data Retention & Deletion

Your data is retained for the duration of your subscription plus 90 days. Upon request, we will delete all personal information within 45 days, except where retention is required by law. You may request a full data export at any time.

Third-Party Services

We use limited third-party services for authentication (Google, Microsoft) and email delivery (Resend). These providers are contractually bound to protect your data. We do not use third-party advertising or tracking services.

GrantSync does not sell your personal information.

We do not sell, rent, or share personal information with third parties for monetary consideration or cross-context behavioral advertising. This notice is provided in accordance with the CCPA and CPRA.

Contact

Privacy questions or data requests? Contact privacy@grantsyncit.com