Security & your data

Last updated November 14, 2026

GrantCorral is a workspace for freelance grant writers. This page describes how we protect the data you store with us. The [Privacy Policy](/privacy) and [Terms of Service](/terms) are the formal versions.

Your workspace is separate from everyone else's

Each account belongs to a workspace. Client records, documents, awards, drafts and pipelines are stored with that workspace's id, and the app only returns rows for the workspace you're signed into. Another customer who guesses a client or award id gets an error, not your data.

Connections and storage

• The site is served over HTTPS.
• The customer database sits on a Fly.io volume with encryption at rest enabled.
• Passwords are stored as scrypt hashes, not in plain text.
• Sign-in sessions use signed, HTTP-only cookies. We store only a hash of each session token.

Backups

Every day the app writes a consistent copy of the customer database onto the same Fly.io volume and keeps the newest 14 copies. A separate daily job also copies the database off that server, encrypts it, and stores it on a different machine for 30 days. We tested a restore from the off-site copy on November 14, 2026: we decrypted it and checked its integrity without changing the live database. These backups are for recovery if something goes wrong. They are not a substitute for your own export.

Export and deletion

• You can export a single client or your whole workspace at any time (Plan & billing → Export your data, or "Export client data" on a client page). The download is a ZIP of CSV files, plus the text of your documents and drafts.
• To delete your account and data, email grantcorral.support@gmail.com. There is no self-serve delete button yet. After we close the account we delete workspace content within 30 days, as described in the Privacy Policy.

AI drafts

When you click a draft button, we send Google's Gemini API your instructions, the client's profile and grant history, relevant funder facts, and the full text of the documents included in that draft (you choose them for letters and applications; report drafts include the award's documents automatically). We use Google's paid Gemini API. Under Google's terms for that tier, Google does not use your prompts or responses to improve its products and processes them under its data-processing terms. It still logs them for a limited period to check for misuse and for required legal disclosures. Don't put confidential information in documents or profiles you draft from unless it's needed. See the Privacy Policy. Nothing is sent to Google unless you ask for a draft.

Questions

Email [grantcorral.support@gmail.com](mailto:grantcorral.support@gmail.com).