Privacy Policy
Last updated: Nov 9, 2026
Privacy Policy
Last updated: Nov 9, 2026
Privacy Policy
Last updated: Nov 9, 2026
01
01
Who we are
Who we are
Granter is the trading name of GRANTER PORTUGAL UNIPESSOAL LDA, NIF 518452867, Rua da Prata 80, 1100-415 Lisboa, Portugal (“Granter”, “we”). We provide an AI-powered platform that helps organisations find, prepare and manage applications for grants and other funding.
For any question about this policy or your personal data, contact us at compliance@granter.ai. Our Data Protection Officer, Bernardo Tavares, can be reached at the same address.
Granter is the trading name of GRANTER PORTUGAL UNIPESSOAL LDA, NIF 518452867, Rua da Prata 80, 1100-415 Lisboa, Portugal (“Granter”, “we”). We provide an AI-powered platform that helps organisations find, prepare and manage applications for grants and other funding.
For any question about this policy or your personal data, contact us at compliance@granter.ai. Our Data Protection Officer, Bernardo Tavares, can be reached at the same address.
02
02
Who this policy covers
Who this policy covers
This policy explains how we handle personal data where we decide why and how it is processed (we are the controller). That covers:
visitors to granter.ai
people who contact us, request a demo or subscribe to our communications
people who sign up for an open trial
contacts at our customers, partners and suppliers
Platform and website are handled differently. Everything inside the Granter platform, including AI processing, is hosted and processed in the EU under our security controls. Our public website and our marketing and sales tools use standard third-party services, described separately below.
What it does not cover: content our customers upload to the platform. That is governed by the contract we sign with each customer; for questions about it, contact that organisation.
Open trial: trial use is for evaluation only and is governed by our Terms of Service and this policy, with Granter as data controller. You are responsible for the content you upload; please do not upload confidential documents or other people’s personal data.
This policy explains how we handle personal data where we decide why and how it is processed (we are the controller). That covers:
visitors to granter.ai
people who contact us, request a demo or subscribe to our communications
people who sign up for an open trial
contacts at our customers, partners and suppliers
Platform and website are handled differently. Everything inside the Granter platform, including AI processing, is hosted and processed in the EU under our security controls. Our public website and our marketing and sales tools use standard third-party services, described separately below.
What it does not cover: content our customers upload to the platform. That is governed by the contract we sign with each customer; for questions about it, contact that organisation.
Open trial: trial use is for evaluation only and is governed by our Terms of Service and this policy, with Granter as data controller. You are responsible for the content you upload; please do not upload confidential documents or other people’s personal data.
03
03
What we collect, why, and for how long
What we collect, why, and for how long
Activity
Data
Purpose
Legal basis
Retention
Website: visits
Data
Device and browser data, pages visited, cookie identifiers
Purpose
Run the site, measure its use, improve our marketing
Legal basis
Consent (essential cookies: legitimate interest)
Retention
Per cookie (section 4)
Website: visits
Data
Device and browser data, pages visited, cookie identifiers
Purpose
Run the site, measure its use, improve our marketing
Legal basis
Consent (essential cookies: legitimate interest)
Retention
Per cookie (section 4)
Website: contact and demo requests
Data
Name, work email, company, role, message
Purpose
Reply to you and follow up on your request
Legal basis
Legitimate interest
Retention
As long as the relationship is active; deleted on request
Website: contact and demo requests
Data
Name, work email, company, role, message
Purpose
Reply to you and follow up on your request
Legal basis
Legitimate interest
Retention
As long as the relationship is active; deleted on request
Marketing emails
Data
Name, email, engagement with our emails
Purpose
Send news and offers you asked for
Legal basis
Consent
Retention
Until you unsubscribe
Marketing emails
Data
Name, email, engagement with our emails
Purpose
Send news and offers you asked for
Legal basis
Consent
Retention
Until you unsubscribe
Platform: open trial account
Data
Name, email, organisation, login data, platform usage, content you upload
Purpose
Let you evaluate the platform
Legal basis
Our Terms of Service
Retention
Deleted 90 days after the trial ends, unless you become a customer
Platform: open trial account
Data
Name, email, organisation, login data, platform usage, content you upload
Purpose
Let you evaluate the platform
Legal basis
Our Terms of Service
Retention
Deleted 90 days after the trial ends, unless you become a customer
Platform: operation and security
Data
Technical logs, error reports, security events
Purpose
Keep the platform secure, reliable and working
Legal basis
Legitimate interest
Retention
Deleted 90 days after the contract ends.
Platform: operation and security
Data
Technical logs, error reports, security events
Purpose
Keep the platform secure, reliable and working
Legal basis
Legitimate interest
Retention
Deleted 90 days after the contract ends.
Customer and supplier contacts
Data
Contact details of people at the organisation
Purpose
Manage the business relationship and billing
Legal basis
Contract; legal obligation
Retention
Relationship term; invoices as long as tax law requires
Customer and supplier contacts
Data
Contact details of people at the organisation
Purpose
Manage the business relationship and billing
Legal basis
Contract; legal obligation
Retention
Relationship term; invoices as long as tax law requires
What you have to give us: only the details needed to use the platform (name, email, organisation and login). Without them we cannot open your account. Everything else, such as contact forms, marketing emails and analytics cookies, is optional, and saying no does not affect your access.
We use anonymised, aggregated usage metrics that do not identify you to evaluate and improve the platform.
What you have to give us: only the details needed to use the platform (name, email, organisation and login). Without them we cannot open your account. Everything else, such as contact forms, marketing emails and analytics cookies, is optional, and saying no does not affect your access.
We use anonymised, aggregated usage metrics that do not identify you to evaluate and improve the platform.
04
04
Cookies and tracking
Cookies and tracking
This section covers our public website, granter.ai. The Granter platform itself uses only the essential cookies needed to sign you in and keep your session secure. Our website uses essential cookies to work, and, only with your consent, analytics and marketing cookies through Microsoft Clarity, HubSpot and Google Analytics. You choose in the cookie banner on your first visit and can change your choice at any time through the cookie settings link in the website footer.
This section covers our public website, granter.ai. The Granter platform itself uses only the essential cookies needed to sign you in and keep your session secure. Our website uses essential cookies to work, and, only with your consent, analytics and marketing cookies through Microsoft Clarity, HubSpot and Google Analytics. You choose in the cookie banner on your first visit and can change your choice at any time through the cookie settings link in the website footer.
Type
Provider
Purpose
Duration
Essential
Provider
Framer
Purpose
Run the website
Duration
Session
Essential
Provider
Framer
Purpose
Run the website
Duration
Session
Analytics
Provider
Google Analytics, Microsoft Clarity
Purpose
Measure visits and how the site is used (including Clarity heatmaps and session recordings)
Duration
Up to 2 years
Analytics
Provider
Google Analytics, Microsoft Clarity
Purpose
Measure visits and how the site is used (including Clarity heatmaps and session recordings)
Duration
Up to 2 years
Marketing
Provider
HubSpot
Purpose
Track visits from our campaigns and forms
Duration
Up to 13 months
Marketing
Provider
HubSpot
Purpose
Track visits from our campaigns and forms
Duration
Up to 13 months
05
05
How we use AI
How we use AI
The Granter platform uses AI models to search funding opportunities and to generate drafts, analyses and recommendations. The models run on Microsoft Azure in EU regions, provided by Microsoft Ireland Operations Ltd.
No training on your content: we do not use your content or the platform’s outputs to train AI models, and we do not allow our providers to.
Human review: outputs are suggestions. Users review and approve them before any submission or decision; the platform does not take decisions about you on its own.
Transparency: AI-generated content is presented as such inside the platform.
The Granter platform uses AI models to search funding opportunities and to generate drafts, analyses and recommendations. The models run on Microsoft Azure in EU regions, provided by Microsoft Ireland Operations Ltd.
No training on your content: we do not use your content or the platform’s outputs to train AI models, and we do not allow our providers to.
Human review: outputs are suggestions. Users review and approve them before any submission or decision; the platform does not take decisions about you on its own.
Transparency: AI-generated content is presented as such inside the platform.
06
06
Who we share data with
Who we share data with
We do not sell personal data. We share it only with service providers that process it on our instructions, under contracts with data protection terms, and with authorities where the law requires it.
We do not sell personal data. We share it only with service providers that process it on our instructions, under contracts with data protection terms, and with authorities where the law requires it.
Category
Providers
Applies to
Granter platform (EU only)
Providers
Microsoft Azure, Brevo, Sentry, LangSmith
Applies to
Platform users
Granter platform (EU only)
Providers
Microsoft Azure, Brevo, Sentry, LangSmith
Applies to
Platform users
Public website and analytics
Providers
Framer, Google Analytics, Microsoft Clarity, HubSpot, Typeform
Applies to
Website visitors
Public website and analytics
Providers
Framer, Google Analytics, Microsoft Clarity, HubSpot, Typeform
Applies to
Website visitors
Sales, contracts and billing
Providers
HubSpot, Apollo.io, PandaDoc, InvoiceXpress
Applies to
Leads and customer contacts
Sales, contracts and billing
Providers
HubSpot, Apollo.io, PandaDoc, InvoiceXpress
Applies to
Leads and customer contacts
Office tools
Providers
Google Workspace
Applies to
Anyone who contacts us
Office tools
Providers
Google Workspace
Applies to
Anyone who contacts us
The providers that process content customers upload to the platform are listed in each customer’s contract.
The providers that process content customers upload to the platform are listed in each customer’s contract.
07
07
Transfers outside the EU
Transfers outside the EU
Granter platform: all platform data, including AI processing, stays in the EU. Microsoft Azure, Sentry, LangSmith and Brevo process it in EU regions.
Website, marketing and sales tools: some providers (Google Analytics, Microsoft Clarity, HubSpot, Apollo.io) may process data in the United States. There we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards.
Granter platform: all platform data, including AI processing, stays in the EU. Microsoft Azure, Sentry, LangSmith and Brevo process it in EU regions.
Website, marketing and sales tools: some providers (Google Analytics, Microsoft Clarity, HubSpot, Apollo.io) may process data in the United States. There we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards.
08
08
Security
Security
The Granter platform runs entirely in the EU on Microsoft Azure. We protect personal data with technical and organisational measures that include access control with multi-factor authentication, encryption, logging and monitoring, and peer review of every change to our software. If a personal data breach puts your rights at risk, we will notify the CNPD and, where required, you.
The Granter platform runs entirely in the EU on Microsoft Azure. We protect personal data with technical and organisational measures that include access control with multi-factor authentication, encryption, logging and monitoring, and peer review of every change to our software. If a personal data breach puts your rights at risk, we will notify the CNPD and, where required, you.
09
09
Your rights
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To exercise them, email compliance@granter.ai.
You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To exercise them, email compliance@granter.ai.
You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.
10
10
Changes to this policy
Changes to this policy
We may update this policy from time to time. The date of the latest version is shown below.
Last updated: Nov 9, 2026
We may update this policy from time to time. The date of the latest version is shown below.
Last updated: Nov 9, 2026
