Grantigo · Privacy policy
Privacy policy

How we handle your personal data.

Last updated: 6 May 2026. This policy explains how Grantigo collects and uses your personal data, your rights under GDPR, and how to exercise them.

Introduction

Grantigo ("we", "us") is committed to protecting your personal privacy. This Privacy Policy explains how we collect and use your personal data. It also describes your rights in relation to us and how you can exercise those rights. The policy applies to you when you create an account with us, visit our website, or otherwise come into contact with us.

Data Controller

Grantigo AB
Corporate Identity Number: 559539-2753
Address: Teknikringen 7, Linköping
Email: contact@grantigo.se

Grantigo is the data controller for the processing of your personal data in accordance with this policy.

What is personal data?

Personal data is any information that can be directly or indirectly linked to a living natural person. This includes, for example, names, personal identity numbers, email addresses, and researcher IDs, but also information about your education or professional role if it can be linked to you.

Where do we obtain your data?

We collect personal data about you in the following ways:

Data you provide to us: When you create an account, fill in your profile, upload a business plan, or contact our support.

Data from other sources: In order to match you with relevant grants, we may in some cases retrieve and supplement information from public registers, authorities, and other open sources ("web scraping") to keep our database of grants and applicants updated.

What personal data do we process and why?

Below we describe the purposes for which we process your personal data, the type of data involved, and the legal basis we rely on.

1. To manage your user account and deliver the service

We process your data so that you can create an account, log in, and use our services in accordance with our Terms of Use.

Personal Data: Name, email address, phone number, address, age.
Legal Basis: Performance of a contract. The processing is necessary for us to deliver the service to you.

2. To match you with grants

For our service to function, we analyze your profile to find relevant grants that fit your specific situation (e.g., based on education or geography).

Personal Data: Job title, level of education, graduation year, work experience, institution/company, and information in any business plans.
Legal Basis: Performance of a contract. The matching process is the core of our service.

3. For secure identification (Applies to Researchers and Farmers)

For certain user categories, specifically researchers and farmers (sole proprietorships), secure identification is required to match against specific requirements of grant providers and to prevent misuse.

Personal Data: Personal identity number and/or Researcher ID (e.g., ORCID).
Legal Basis: Performance of a contract and a clearly motivated purpose for secure identification.

4. For support and communication

To help you with technical problems and send important information about your account or the service.

Personal Data: Name, email, phone number, and case history.
Legal Basis: Performance of a contract (for account information) and Legitimate interest (to provide good service).

Note on company data: Information relating to legal entities (e.g., limited liability company registration numbers and general corporate plans) is normally not covered by GDPR, but is handled with confidentiality and high security in our systems.

5. To improve and develop the service (Feedback)

We value your opinions. If you choose to submit feedback or suggestions to us, we process this to analyze how the service is used and to develop new features.

Personal Data: Any information you write in the free text field, as well as your User ID if you are logged in.
Legal Basis: Legitimate interest. Our interest in improving our services is deemed to outweigh the privacy intrusion, as the data primarily relates to your experience of the service and is purged regularly.

6. AI Chatbot and Virtual Advice

When you use our AI-based chatbot, we process the information you enter into the chat interface (free text) as well as technical logs (timestamp, IP address). The purpose is to provide quick guidance and answer questions about grants.

Important: Please avoid entering sensitive personal data (e.g., regarding health, ethnicity, or political views) in the chat. The data is processed by our AI provider (OpenAI in the USA) but is not retained to train their models (Zero Data Retention).

Who do we share the information with?

Service Providers (Data Processors): We share information with selected companies that help us deliver the service, such as providers of IT operations, server hosting, support systems, AI services for matching and Web Analytics Providers. These companies may only process your data in accordance with our instructions and may not use it for their own purposes.

Where do we process your data?

We strive to process all your personal data within the EU/EEA (our primary servers are in Sweden). However, for specific features, data may be processed by providers in the USA. This includes our AI-based matching and chat (e.g., OpenAI) and website analytics (e.g., Google LLC).

In these cases, we ensure the protection of your data by verifying that the provider is certified under the EU-US Data Privacy Framework.

How long do we keep the data?

We retain your personal data for as long as it is necessary for the purposes for which it was collected.

Active account: Data is stored as long as you have an account with us.
Closed account: If you choose to close your account, your data will be deleted or anonymized within 30 days.
Bookkeeping: Data required by the Bookkeeping Act (e.g., payment history) is stored for 7 years, even if you have closed your account.

Your Rights

According to the General Data Protection Regulation (GDPR), you have several rights regarding your personal data:

  • Right of access (Subject Access Request): You have the right to request an extract free of charge showing what personal data we have registered about you.
  • Right to rectification: You have the right to have incorrect data corrected or incomplete data supplemented.
  • Right to erasure ("The right to be forgotten"): You can request that we delete your personal data if it is no longer needed for the purpose, or if you withdraw your consent. (Note that we may have the right to deny your request if there are legal obligations, e.g., the Bookkeeping Act, preventing us.)
  • Right to restriction: You have the right to demand that the processing of your data be restricted for a certain period (e.g., if you believe a piece of data is incorrect).
  • Right to data portability: You have the right to receive the data you have provided to us in a structured format in order to transfer it to another service.
  • Right to object: You have the right to object to processing based on a balancing of interests or direct marketing.

Want to exercise any of these rights? Contact us at contact@grantigo.se. If you believe that we are handling your personal data incorrectly, you also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Cookies

We use cookies to ensure the secure functionality of Grantigo and to analyze how our website is used so we can improve our service. A cookie is a small text file saved on your device.

Necessary Cookies (Authentication): We use cookies required to log you in and keep your session secure. Because the service cannot function without them, these do not require prior consent. The login cookie is valid for up to 14 days, is renewed automatically while you remain active, and is cleared when you log out.

Analytics Cookies (Google Analytics): With your explicit consent, we use Google Analytics cookies to understand how visitors interact with our website. These cookies collect information such as the number of visitors, which pages are most popular, and how users navigate the site. This data is aggregated to help us improve the user experience. These cookies are only activated if you accept them via our cookie banner.

Managing Your Cookies: You can manage or withdraw your consent for Analytics cookies at any time via the Cookie settings link in our footer. You can also manage cookies generally in your browser settings. Please note that if you block our necessary cookies via your browser, you will not be able to log in.

Specific Addendum for the Grantigo Chrome Extension

In addition to the general terms and data processing rules outlined in this Privacy Policy, the following specific terms apply when you install and use the Grantigo extension for Google Chrome. These rules are strictly designed to comply with the Chrome Web Store User Data Policy.

1. Single Purpose

Our Chrome extension has one single stated purpose: to assist users in filling out grant applications by providing AI-generated text suggestions and feedback tailored to each grant provider's assessment criteria.

2. Requested Permissions and Justifications

To deliver this core functionality, the extension requires the following browser permissions:

Website Content and Site Access (activeTab, tabs, scripting, host_permissions): To detect when you navigate to a supported grant provider portal (e.g., Vinnova, Formas), read the text in the form fields, and inject the AI assistant widget onto the page. Please note: We never read, save, or interact with data from websites that are unrelated to your grant application work via Grantigo.

Authentication Data (cookies): To read your login session cookies in order to securely authorize API requests to Grantigo on your behalf.

Local Storage (storage): To store your local user preferences and extension session state (e.g., whether the assistant widget is currently open or closed) directly in your browser.

3. User Data Guarantees

In accordance with Google's Chrome Web Store guidelines, we explicitly certify the following regarding any data handled by our Chrome extension:

  • We do not sell or transfer your user data to third parties.
  • We do not use or transfer your user data for purposes that are unrelated to the item's single purpose (assisting with grant applications).
  • We do not use or transfer your user data to determine creditworthiness or for lending purposes.
  • The extension uses no remote code; all executed code is bundled directly within the extension itself, ensuring maximum security and transparency.

Contact

If you have questions about this privacy policy or our processing of your personal data, you are welcome to contact us.

Grantigo AB
Email: contact@grantigo.se

This privacy policy was last updated: 2026-05-06