Privacy Policy

1. Who we are

Grant Mastermind is a software service operated by One Percent Network LLC, a limited liability company organised under the laws of the State of New Mexico, United States (“we”, “us”). This policy explains how we handle personal data when you visit grantmastermind.com or use the Grant Mastermind workspace.

For any privacy matter you can reach us at privacy@grantmastermind.com.

2. Data we process

We collect and process the following categories of data:

• Account data — name, email, hashed password, workspace, role, and language preference.
• Client profile data — entity details, statutory purposes, programmes, funding history and documents that you (or your colleagues) upload to build client profiles.
• Project data — match scores, simulator replies, drafts and revisions associated with specific EU grant calls.
• Technical data — IP address, user-agent, access timestamps and security logs used to operate the service and prevent abuse.
• Usage data — aggregate metrics (workspaces, proposals per cycle) used to monitor the product.

3. Why we process it

We process the data above on the following legal bases:

• To deliver the contracted service (contractual necessity).
• To comply with legal obligations (tax, accounting, answering lawful requests).
• For our legitimate interest in operating, securing and improving the service.
• With your consent where required, for example for optional analytics or marketing.

4. AI processing

Grant Mastermind uses large-language-model providers (currently Anthropic’s Claude API) to analyse calls, score fit, simulate evaluator questions and draft sections. Content sent to the LLM provider is transmitted over TLS and is not used by the provider to train their foundation models under the terms we operate. We do not sell client content to third parties.

5. Storage and security

Application data is hosted on Cloudflare’s edge network (Workers, D1, KV, R2) and mirrored between EU and US regions. Sensitive fields are encrypted at rest with AES-256-GCM. Passwords are stored using bcrypt with per-user salts. Access to production data is limited to authorised engineers and audited.

6. Retention

We keep account and workspace data for as long as the account is active and for up to 24 months after closure to comply with accounting and audit obligations. You can request earlier deletion at any time unless a legal retention period applies.

7. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, to portability, and to withdraw consent. You can exercise these rights by emailing privacy@grantmastermind.com. You may also lodge a complaint with the competent supervisory authority in your country.

8. International transfers

Because our infrastructure is distributed globally, personal data may be transferred to and processed in jurisdictions outside your country of residence, including the United States. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.

9. Changes

We may update this policy to reflect changes in the service or regulation. Material changes will be communicated through the product or by email at least 30 days before taking effect.