Privacy policy

Last updated October 28, 2026.

What we collect

• Account details: your name, email address and organization name. Your password is stored only as a salted hash, never in readable form.
• What you add: your organization profile, the opportunities you save, your alerts, notes, and any documents or drafts you create or upload.
• Payments: subscriptions and purchases are processed by Stripe. We never see or store your card number. We keep a record of what you bought, the amount and the status.
• Security data: your IP address and basic request details are used briefly to stop bots and abuse (rate limits, blocked sign-up and login attempts).
• Usage: simple counts of page views and sign-ups so we can see what works. We do not put personal details in analytics.
• Referrals: if you arrive through a partner link, a cookie remembers that link for 60 days so the partner can be credited.
• Messages you send us: inquiries, support requests and files you attach to them.

Searching for grants without an account collects no personal profile.

How we use it

To run your account, show results ranked for your organization, send the alerts and emails you ask for (including sign-up confirmation codes), process payments, answer your requests, keep the service secure, and improve it. We do not sell your information and we do not use it for advertising.

Who processes it for us

We use a small number of service providers, only for the purposes above: Stripe (payments), our hosting and database provider (Railway), our email provider (to send you messages), Cloudflare (bot checks, where enabled) and Anthropic (AI features, below). They process your information on our behalf and are not allowed to use it for their own marketing.

AI features

When you use Luma, Document Studio or web search, your messages and the profile details needed to answer are sent to our AI provider, Anthropic, to generate the response. Do not enter passwords, bank or card numbers, or government ID numbers into these tools. Documents in your Vault are only used for drafting or answering questions if you mark them as approved for reuse, and you can change that at any time. AI output can be wrong; always confirm details with the funder.

Vault files

Files you upload are encrypted by FundLuma before they are stored and are visible only to members of your organization. Files are not scanned for viruses yet.

Cookies

We use a sign-in cookie to keep you logged in, a short-lived security cookie during sign-up and login, and the referral cookie described above. We do not use advertising cookies.

How long we keep it

We keep your information while your account is open. If you delete your account, your profile, organization data and vault files are permanently deleted. We may keep payment and tax records, and security logs, for as long as the law or fraud prevention requires.

Your choices

You can edit your profile at any time. You can export your data or permanently delete your account and organization (including vault files) from Account settings. You can turn off alert emails at any time. To ask about your information, contact us.

Children

FundLuma is for organizations and the adults who run them. It is not directed at children under 13.

Changes

If we make a meaningful change to this policy we will update the date above and, where it matters, tell you by email.