Privacy Policy

Last updated October 25, 2026

This page explains what Grant Core collects through this website and through our client workspace (the "portal"), where it is kept, who can see it, and how long we keep it. It describes what our systems actually do today. If that changes, we change this page and the date above.

Who we are

This website and the client workspace are run by GC Strategy Group LLC, doing business as Grant Core, in Lakewood, New Jersey. We prepare and file grant applications for nonprofit organizations and help manage grants after they are awarded.

For anything about this policy or your information, email info@grantcoregroup.com.

This website

If you use the "Ask us" form (on its own page, or at the end of the eligibility check), we receive what you type: your name, your organization's name and kind, your email address, your phone number, your state, the grant you ask about, anything you write in the message box and, from the eligibility check, your answers to its questions. It goes to our own systems, which run on Google: they email it to our mailbox and add you to our contact list in HubSpot (the system we use to keep track of inquiries), for a person to review. It is also kept in a Google Sheet only our team can open, so it shows on our team's desk.

If you use a grant page's "Get notified when it opens" form, we receive your name, your organization, your phone number or email address and the best time to reach you. It is kept in a Google Sheet only our team can open, so a person can contact you about that grant. Nothing is emailed to you automatically, and it is not added to any mailing list.

This website sets no cookies of its own and runs no advertising tools. To count visits, it uses Cloudflare Web Analytics, the visitor count of Cloudflare, the company that hosts this website: when a page opens, a small script tells Cloudflare which page it was, the website that sent you (if any), your country, your type of device, browser and operating system, and how fast the page loaded. That script uses no cookies, keeps nothing in your browser and is not used to identify you. We see only totals, such as how many visits a page had, never who you are.

The website keeps nothing in your browser, with one exception: if your internet connection is down when you send "Ask us" or the eligibility check, your browser keeps what you sent, sends it the next time you open that page, and then deletes it.

If you tap a WhatsApp, phone or email link, you leave this website and that service handles your message under its own terms.

The client workspace (portal)

When your organization signs up with us, you use a private workspace to sign our agreement, answer questions, upload papers and photographs, and see invoices and, after an award, your award page. In it we collect:

• Contact details: your organization's name and state, and the name, email address and mobile number of each person who signs up or is added.
• Your answers to the application questions, including details about your building and its security.
• Papers and photographs you upload.
• Your signature: the name and title you type, the date and time, which version of the agreement you signed and its prices, and, if you draw one, the drawn signature as an image.
• Invoices and payments: what is owed and what has been paid.
• A record of activity in the workspace (for example, "answers sent" or "file uploaded", with the date), so our team can see where things stand.

Signing in. You sign in with a personal link or a one-time code sent to your email. We do not use passwords for the workspace. Your browser keeps a sign-in token for that device so you do not need a new code every visit; "Sign out on this device" removes it. The workspace also keeps a copy of its own page text, question list and program list in your browser so it opens quickly, and remembers if you chose larger text. It keeps none of your answers or files in your browser, and it uses no cookies, analytics or advertising tools.

Passwords for government systems. We never ask for passwords in the workspace. If you give us a password for a government portal, you give it by phone, and we keep it in a password manager (1Password), not in the workspace.

Papers you remove. When you remove a file in the workspace, it moves to a folder only our team can see; it is not deleted. Ask us if you want it deleted.

Where it is kept

Your answers, papers, photographs, signatures and records are stored in Grant Core's Google Workspace account (Google Drive and Google Sheets), in folders for your organization. The workspace's pages are served by Cloudflare. Contact details are also kept in HubSpot, our contact list. We do not keep your information anywhere else.

Some clients who started with us before the workspace existed share papers with us through a shared folder link. We are closing those links as clients move to the workspace.

Who sees it

• Our team. People who work for Grant Core, each with their own sign-in and a role that decides what they can see and change.
• People you invite. If you add a helper to your workspace, they see only the part you gave them.
• The government agency running the grant, when we file your application or award paperwork for you. That is the purpose of the work.
• Companies that run our systems: Google (email, Drive, Sheets and the workspace's server), Cloudflare (hosting this website and the workspace pages, and counting visits to this website), HubSpot (our contact list), 1Password (passwords you give us by phone), our phone provider (calls and texts to our office number), and our payment processor, Sola (Cardknox), whose page you use to pay an invoice by bank transfer. We see that a payment was made and its amount; your bank details stay with Sola.
• Other software providers. We use trusted software providers for hosting, email, payments, e-signatures and writing and proofreading tools. They handle information only to provide their service to us.

We do not sell your information, and we do not share it with advertisers, data brokers or anyone else for their own marketing.

Emails we send

The workspace sends email from our Google Workspace account. Sign-in links and codes, your signed agreement, payment receipts and reminders about unpaid invoices go out automatically. Invoices and most other messages wait for a person at Grant Core to approve them first.

How long we keep it

Grant awards carry record-keeping, audit and reporting duties that last years after the application. We keep client records, including the workspace's answers, files and signatures, for at least seven years after the related grant ends. We keep inquiries from people who did not become clients so we can contact them about later rounds; we delete them when asked. We do not delete records automatically on a schedule.

Your choices

You can ask us at any time what we hold about you, to correct it, or to delete it. Email info@grantcoregroup.com. Where we must keep records connected to a filed application or an award, we will tell you what we cannot delete and why.

Children

This website and the workspace are for adults acting for organizations. We do not knowingly collect information from children.

Changes

If we change how we handle information, for example by adding a new service, we will update this page and the date at the top.