Privacy Policy

Last updated: July 2026

ZeraGrants ("we," "us," or "our") is committed to protecting the privacy of the nonprofits and individuals who use our grant discovery and shortlisting service. This policy explains how we collect, use, and protect your information.

Information we collect

When you request a sample shortlist or become a client, we collect the information you provide: your organization name, work email address, mission description, geography served, and any other details you share to help us find relevant grants. We also collect standard server logs (IP addresses, request timestamps) for security and operations purposes.

Website analytics

This website records anonymous usage events (for example, which button was clicked or which page referred you) to understand how the site is used. This is first-party only: no cookies are set, no third-party analytics or advertising service is used, and no fingerprinting technique is used. These events are not linked to your name, email address, or any information you submit through our forms.

How we use your information

We use your organization details solely to research and prepare grant shortlists tailored to your mission and eligibility profile. We do not use your information for any other commercial purpose.

We do not sell your data

We do not sell, rent, or trade your organization's information, and we never share it with third parties for their own marketing or commercial purposes. The only sharing we do is with the service providers described below, who process data strictly on our behalf and under our instructions.

Service providers

We use trusted service providers to operate ZeraGrants, including Google Workspace for email, Amazon Web Services for hosting, and AI-assisted research tools that support our analysts in preparing and checking shortlists using relevant details about your organization. Some provider processing may occur outside Canada, including in the United States. Every shortlist is reviewed by a human analyst before delivery. Providers are permitted to use your information only to provide services to us.

Where your data is stored

Intake submissions and client data are stored in Canada, on Amazon Web Services (AWS).

Data security

We store intake submissions securely and limit access to authorized team members only. Submissions are encrypted in transit and stored with access controls.

Data retention

We retain sample-shortlist requests and other inquiries for up to 24 months after our last contact with you, after which they are deleted. Client data is retained for the duration of the engagement and up to 12 months afterward. You may request deletion of your data at any time by contacting us; as this is currently a manual process, we will complete it within 30 days of your request.

Contact us

Questions about this policy? Contact David Shiferaw, Founder, at hello@zeragrants.ca — he is responsible for privacy at ZeraGrants and will respond promptly.

This is a working privacy policy for the beta period. A complete, legally reviewed policy will be published before public launch.