Privacy Policy
Last updated: October 10, 2026
This policy explains what personal information NorthGrants collects, why, who we share it with, and the choices you have. NorthGrants is a sole proprietorship registered in British Columbia, Canada (“NorthGrants”, “we”, “us”).
Who to contact
Our Privacy Officer is responsible for how we handle personal information. Email support@northgrants.ca. We aim to reply within 30 days.
What we collect
- Quiz answers: your province or territory, industry, what you need funding for, number of employees and annual revenue range.
- Your email address, when you ask for your free report or buy a framework.
- How you found us: if you arrived through a link with a campaign tag (for example, from a partner website), we record the tag with your report request.
- Purchase details: what you bought, when, the amount, and your framework credit balance. Payments are processed by Stripe. We never see or store your card number.
- Framework requests: the programs you ask for frameworks for, whether each one was delivered, and the result of our automated quality check.
- Messages you send us, such as support or refund requests.
- Technical information:
- Our page-view counter records the page, the date and time, the website that sent you, and any campaign tag. It does not record your IP address or use cookies.
- To stop abuse of the report form, we keep scrambled (hashed) forms of your IP address and email address. They expire one hour after your last submission and are then deleted automatically.
- Like all websites, our web host’s server logs record IP addresses, browser details and the addresses of pages requested, for security and troubleshooting. Some links in our emails have included your email address, so it can appear in these logs.
We do not ask for, and you should not enter, sensitive personal information such as health information or social insurance numbers.
Cookies
We do not set cookies for visitors, and we do not use analytics or advertising trackers. Stripe’s checkout page, which Stripe runs on its own website, uses its own cookies, for example to prevent fraud.
How we use it
- To create and email your free funding report.
- To build and deliver the application frameworks you buy, and track your credits.
- To send receipts, delivery emails and replies to your requests.
- To process refunds and prevent fraud and abuse.
- To understand how the site is used and improve it.
We do not sell your personal information.
Automated reports and AI
Your free report and your application frameworks are produced automatically.
- The programs in your report are chosen by fixed rules that compare your quiz answers with our program database.
- Your frameworks are written by an AI service, Anthropic (Claude), and usually checked by AI against a quality checklist. No person reviews a framework before it is sent to you. The check can ask for a second draft. If a problem remains, the framework is still sent and we are alerted to follow up. Anthropic may also write short parts of your free report.
- We send Anthropic your quiz answers and our program information. Our report and framework system never sends Anthropic your email address.
- We also use Claude to help us run NorthGrants, for example to monitor new sign-ups and to help answer messages you send us. When we do, it can see your email address and what you wrote.
You can ask us what information was used to produce your report or a framework and the main reasons for the result, ask us to correct that information, and ask a person at NorthGrants to review the result. If you are in Quebec, these are also your rights under Quebec’s private-sector privacy law for decisions made only by automated processing.
Who we share it with
We share personal information only with service providers who help us run NorthGrants, and only what they need:
| Provider | What they do | What they receive | Where |
|---|---|---|---|
| Stripe | Payments and receipts | Your email address, what you are buying, and payment details | Canada and the United States |
| Anthropic (Claude) | Writes and checks frameworks, may write short parts of reports, and helps us run the service | Quiz answers and program information; when it helps us run the service, your email address and messages | United States |
| Our web host | Hosts the website, its database and logs | Everything stored on the site | Canada (Guelph, Ontario) |
| Our email provider (OpenSRS hosted email) | Holds our support inbox | Emails you send us and our replies | Canada |
| Google (Gmail) | Our admin inbox | Notices with your email address when a report or framework is sent, a framework fails or is flagged, or a payment can’t be matched | United States |
| Google Fonts and WordPress.org | Load the site’s fonts and emoji images | Your IP address and browser details, when a page loads | United States |
We may also disclose information if the law requires it.
Information stored outside Canada
Some providers process information in the United States. It is then subject to the laws there and may be accessed by authorities in that country.
How long we keep it
- Free report information (quiz answers and email address): 2 years after your last activity, or sooner if you ask us to delete it.
- Purchase records: as long as tax and accounting law requires.
- Scrambled IP and email address used to stop form abuse: one hour after your last submission.
- Report links and checkout references: up to 30 days.
After that, we delete or anonymize it.
Your choices and rights
You can ask to see the personal information we hold about you, correct it, withdraw your consent, or have it deleted, subject to legal limits. Email support@northgrants.ca. We may ask you to confirm your identity.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, or, in Quebec, the Commission d’accès à l’information.
Security
We use reasonable safeguards to protect personal information, including encrypted connections and limited access. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the regulators as the law requires.
Business users only
NorthGrants is for businesses and people aged 18 or older. We do not knowingly collect information from minors.
Changes
We will post any changes here and update the date above. Significant changes will be highlighted on the site.