Privacy Policy

1. Data Controller

App Factory Dev Ltd ("we", "us", "our") is the data controller for personal data collected through the GrantForge website and waitlist. Company registered in England and Wales, Company No. 16567409.

When you use the GrantForge platform to manage grant applications, your organisation acts as the data controller for applicant data, and we act as the data processor on your behalf.

2. What Data We Collect

Waitlist signups: Email address only.

Account holders: Name, email address, organisation name, role within organisation.

Platform usage: Grant application data (as processor), trustee review scores and comments, meeting records and decisions, uploaded documents.

Technical data: IP address, browser type, pages visited, and usage patterns collected via cookies and server logs.

3. Legal Basis for Processing

We process personal data under the following legal bases (UK GDPR Article 6):

• Contract: To provide the Service you have subscribed to
• Legitimate interests: To improve our Service, communicate product updates, and ensure security
• Consent: For waitlist signups and optional marketing communications
• Legal obligation: To comply with applicable laws and regulations

4. How We Use Your Data

• To provide and maintain the Service
• To notify you about changes to our Service
• To communicate about your waitlist status or account
• To provide customer support
• To monitor usage and improve the Service
• To detect, prevent and address technical issues or abuse

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: Cloud hosting, email delivery, and payment processing providers who assist in operating the Service, bound by data processing agreements
• Legal requirements: When required by law, regulation, or legal process

All third-party processors are based in the UK or EEA, or have appropriate safeguards in place for international data transfers.

6. Data Retention

Waitlist data: Retained until the Service launches and you either subscribe or ask to be removed.

Account data: Retained for the duration of your subscription and for 30 days thereafter, after which it is permanently deleted.

Grant data: Retained for the duration of your subscription. Upon termination, you have 30 days to export your data before permanent deletion.

Your data is yours. You can export it at any time.

7. Your Rights (UK GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at hello@grantforge.org. We will respond within one month.

8. Cookies

We use the following types of cookies:

• Essential cookies: Required for the Service to function (authentication, security)
• Functional cookies: Remember your preferences and settings
• Performance cookies: Help us understand how visitors use the Service

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Service functionality.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, regular security assessments, and secure development practices. However, no method of transmission over the Internet is 100% secure.

10. Children's Privacy

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top reflects the most recent revision.

12. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113

13. Contact

For questions about this Privacy Policy or to exercise your data rights:

App Factory Dev Ltd
Company No. 16567409
Email: hello@grantforge.org