Privacy Policy

This Privacy Policy explains how Go Fund It Now collects, uses, shares, protects, and retains information when you use the Go Fund It Now platform, websites, support channels, AI-assisted proposal workflows, opportunity discovery tools, and related services.

We treat customer data, uploaded proposal materials, organizational profiles, generated drafts, and funding strategy workspaces as confidential customer content. We process that content only to provide, secure, support, and improve the services described in this policy.

Account and identity data: name, work email, organization name, role, state, website, authentication identifiers, team membership, billing status, referral and campaign attribution, and support contact details.

Organization and eligibility data: nonprofit, business, or agency profile details, entity type, EIN where provided, capabilities, certifications, service areas, funding preferences, and onboarding answers used to match opportunities and assess eligibility.

Customer content: uploaded solicitations, proposals, resumes, budgets, attachments, notes, templates, prior submissions, generated drafts, chat prompts, AI outputs, comments, task content, and document metadata.

Usage, device, and security data: log events, IP address, browser and device details, session information, product actions, feature usage, indexing status, error diagnostics, audit records, and security telemetry.

Cookies and similar technologies: identifiers stored in your browser by us and by the analytics providers described in section 10, used to keep you signed in, remember preferences such as your region, and measure how the site and product are used.

Payment and subscription data: plan, invoice, subscription, and payment status information. Payment card details are processed by our payment processor and are not stored by Go Fund It Now.

We use customer data to create and manage accounts, authenticate users, enforce team access controls, provide opportunity discovery, index documents, generate proposal drafts, analyze requirements, maintain workspaces, deliver support, process billing, secure the platform, investigate abuse, comply with legal obligations, and improve product reliability.

We may use deidentified or aggregated operational metrics, such as feature usage, latency, error rates, ingestion status, and model-quality signals, to improve the service. Those metrics are not used to reveal a customer proposal, strategy, or organization-specific confidential content.

Go Fund It Now does not use customer proposal content, uploaded documents, prompts, chat history, generated drafts, organization profiles, or workspace data to train foundation models or third-party AI models unless a customer gives explicit written opt-in permission for a separately described program.

We use AI providers through API or enterprise-style service channels intended for customer processing, not consumer chat accounts. Where provider settings or contract terms allow, we disable provider training and restrict retention for abuse monitoring. If a provider cannot support confidential no-training processing for a workflow, we do not send customer proposal content to that provider for that workflow.

Human review of customer content is limited to the access rules in this policy. We do not browse customer proposals for model training, benchmarking, marketing examples, or competitive intelligence.

Your organization controls access to its workspaces and proposal content through authenticated user accounts, team membership, roles, and any ProServ or delegated-access grants you approve.

Go Fund It Now personnel may access customer content only when necessary to provide support requested by you, troubleshoot service issues, investigate security or abuse events, perform quality assurance on a reported defect, satisfy a legal obligation, or operate an approved professional-services engagement. Personnel access is limited to authorized staff or contractors with a business need and confidentiality obligations.

Service providers may process customer content only to operate the platform, such as cloud hosting, storage, search, document parsing, payment processing, analytics, email delivery, security monitoring, or AI inference. They are not allowed to use customer content for their own advertising or model training beyond their contract with us.

We do not sell customer data. We do not share customer proposal content with advertisers or data brokers.

We may share data with infrastructure, security, payment, communication, analytics, document-processing, search, and AI-inference providers that help us operate the service. We require those providers to protect the data, process it only for the contracted service, and apply appropriate confidentiality and security controls.

We may disclose information if required by law, court order, regulatory request, or to protect the rights, safety, and security of Go Fund It Now, our customers, or the public. When legally permitted, we will make reasonable efforts to notify affected customers of requests for their content.

We retain account data, organization profiles, uploaded documents, generated drafts, proposal workspaces, chat history, and related metadata while the account is active or as needed to provide the service.

Customers may delete documents and workspace content through the product where deletion controls are available, or request deletion through support. Deleted customer content is removed from active systems within a commercially reasonable period, generally within 30 days, unless retention is required for security, billing, legal compliance, dispute resolution, or backup integrity.

Backups and disaster-recovery copies may retain deleted content for up to 90 days before aging out of backup cycles. Audit logs, billing records, security events, and legal records may be retained longer when necessary for compliance, fraud prevention, dispute resolution, or enforcement of our agreements.

We use administrative, technical, and organizational safeguards designed to protect customer data, including authenticated access, role-based authorization, service-to-service authentication, encryption in transit, cloud storage controls, monitoring, audit logging, and least-privilege access practices.

No system is perfectly secure. Customers are responsible for protecting credentials, maintaining appropriate team access, reviewing outputs before use, and promptly reporting suspected unauthorized access or security issues.

Depending on your location and relationship with Go Fund It Now, you may have rights to request access, correction, export, deletion, objection, restriction, or portability of certain personal information. Organization administrators may also manage team membership and access to organization content.

To exercise privacy rights or ask questions about this policy, contact Go Fund It Now support or your account representative. We may need to verify your identity and authority before acting on a request involving account or organization data.

We use cookies, local storage, and similar browser technologies for three purposes. Strictly necessary: keeping you signed in, protecting the session, and routing requests. Preference: remembering choices such as the region shown on the public funding feed. Analytics: understanding which pages and features are used so we can improve them.

Analytics cookies are set by Google Analytics 4 and PostHog, two of the service providers covered by section 6. Google Analytics is used on the public marketing site and product for pageview measurement and sets identifiers in the _ga family; your IP address is processed by Google as part of that measurement. PostHog is used for product analytics and feature flags. Neither is used for advertising, and we do not sell the data either collects.

Strictly necessary cookies cannot be turned off without breaking sign-in. Analytics cookies can be refused: most browsers allow you to block or delete cookies for a site, and browser or extension controls that block these providers will stop the analytics collection described here without affecting your ability to use the product. Sending a Global Privacy Control or Do Not Track signal, where your browser supports it, is another way to indicate your preference.

Cookie lifetimes vary by purpose. Session cookies expire when you close the browser; the region preference and analytics identifiers persist for up to twenty-four months unless you clear them.

We may update this Privacy Policy as our services, providers, or legal obligations change. When changes are material, we will provide notice through the product, email, or another appropriate channel. Continued use of the service after the effective date means the updated policy applies to future use.