Privacy policy

Who we are

Grantopic ("we", "us") provides a web product that helps founders discover and understand EU funding opportunities. For privacy questions or GDPR requests, contact privacy@grantopic.eu.

General product questions: hello@grantopic.eu.

What we collect

• Account data: name, email address, and password (stored and hashed by Firebase Authentication).
• Company profile: details you enter for matching (for example legal name, sector, stage, TRL, team size, revenue band, consortium preferences).
• Workspace data: saved calls, application tracker entries, and email alert preferences.
• Billing metadata: if you subscribe, Stripe customer and subscription identifiers and status (card details are handled by Stripe, not stored on Grantopic servers).
• Technical logs: standard server and security logs needed to operate and protect the service.
• Optional analytics cookies: Firebase Analytics measurement data, only if you accept analytics cookies.

Why we process it (legal bases)

• Contract: to create your account, provide matching and workspace features, run your free trial, and manage a paid subscription.
• Legitimate interests: to secure the service, prevent abuse, and improve reliability.
• Consent: optional analytics cookies; email digests you enable in Alerts.
• Legal obligation: where we must keep limited records for tax or accounting after a paid subscription.

Cookies

We use an essential session cookie (grantopic_session) to keep you signed in. That cookie is required for the product to work.

Optional analytics cookies (Firebase Analytics / Google) load only after you accept them in the cookie notice. You can change your mind later by clearing site data for Grantopic in your browser, then revisiting and choosing again.

Processors

• Google Firebase — Authentication, Firestore, Storage, App Hosting, and (if consented) Analytics.
• Stripe — subscription payments and billing.
• Resend — transactional email digests when alerts are enabled.

These providers process data on our instructions to deliver the service. Their own privacy terms also apply to their platforms.

Where data is processed

Grantopic is operated for users in the EU/EEA. Infrastructure may run on cloud regions outside Spain (for example Firebase / Google Cloud). Where transfers occur, we rely on appropriate safeguards offered by those providers (such as Standard Contractual Clauses).

Retention

We keep account and workspace data while your account is active. When you delete your account in-app, we delete your Firebase Auth user and Firestore profile/workspace data, and we cancel an active Stripe subscription where possible. Limited billing records may remain with Stripe or in our systems if required for accounting.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and objection where applicable. You can:

• Update your company profile in Company account.
• Delete your account from Company account (this removes product data as described above).
• Email privacy@grantopic.eu for other requests.
• Cancel or manage paid billing from Billing.

You may also lodge a complaint with your local data protection authority.

Children

Grantopic is intended for business users and founders. It is not directed at children under 16.

Changes

We may update this policy as the product evolves. The "Last updated" date at the top will change when we do. Material changes may also be noted in the product or by email.