We built GFR because grant writers and nonprofit leaders deserve tools that respect their work, their time, and their data. That includes being honest about what we collect, what we do with it, and what rights you have. This policy explains all of that in plain English.
If anything here is unclear, email us at info@dwrgrantmgmt.site. We would rather answer a question than have you guess.
Who we are
GFR (Grant Fulfillment and Research) is a product of DocWriteReview, LLC, a Washington, DC limited liability company. When this policy says we, us, or our, we mean DocWriteReview, LLC. When it says you, we mean the person or organization using GFR, whether as a signed-in user, a paying customer, or a visitor to our marketing website at dwrgrantwriterpro.live.
What we collect
We collect only what we need to run GFR well.
Account information
When you create an account, we ask for your name, email address, organization name, and password. If you sign up on behalf of an organization, we also collect a subdomain identifier so your workspace stays isolated from other organizations. Your password is stored using industry-standard hashing (bcrypt), which means we cannot see it, and neither can anyone who might access our database.
Your grant work
GFR is a workspace for grants, funders, proposals, budgets, compliance records, and related documents. Everything you enter or upload belongs to you and stays inside your organization's isolated workspace. We do not read your grant content, mine it for insights, or share it with anyone. Full stop.
Payment information
When you pay for GFR, our payment processor (Stripe) collects your billing details directly. We never see or store your full card number. We do keep basic records of what you paid and when, because we have to for our books.
Technical information
When you use GFR or visit our website, we automatically collect standard technical information such as IP address, browser type, pages viewed, and referring URLs. We use this to keep the platform running, spot problems, and understand how visitors find us.
Cookies and analytics
Our website uses Google Analytics and Google Tag Manager to understand which pages get visited. These tools use cookies. When you first visit, we ask for your consent. If you decline, no analytics cookies are set and no data goes to Google. See the Cookies section below for more.
How we use your data
We use what we collect to do these things and nothing else:
- Provide the GFR platform to you and your team
- Send you transactional emails (welcome, password reset, billing receipts, service notices)
- Process payments and manage your subscription
- Improve GFR based on how it gets used in aggregate, never individual usage tied to you
- Meet legal, accounting, and tax obligations
- Respond to your questions and support requests
We do not sell your data. We do not rent it. We do not use it to train AI models on your behalf or anyone else's.
Where your data lives
Your data is stored in the United States. Our database is hosted by Neon in the AWS US-East region. Our application servers run on DigitalOcean, also in the United States. Both providers meet industry security standards.
Sub-processors
To run GFR, we rely on a small number of trusted third-party services. These are our current sub-processors:
- Stripe, payment processing
- Anthropic, AI features (Claude)
- Resend, transactional email delivery
- Neon, database hosting
- DigitalOcean, application server hosting
- Google Analytics and Google Tag Manager, website analytics (only if you consent)
Each of these processes limited data on our behalf under confidentiality obligations. We may add or change sub-processors over time as we improve the platform. If we do, we will update this list. Material changes will be announced in advance where possible.
AI features
GFR includes AI-powered writing and research assistance, provided by Anthropic's Claude models. When you use these features, the text you send is transmitted to Anthropic for processing, and Anthropic's own privacy commitments apply to that transmission. Anthropic does not use your data to train their models when accessed through their API. We do not review the content of your AI conversations.
Your data belongs to you
You own the data you put into GFR, always. You can access it, correct it, export it, or delete it at any time. If you are a paying customer, you can request a full export of your workspace data by emailing info@dwrgrantmgmt.site. We will respond within seven business days.
If you cancel your account or your build-to-own instance, we will delete your data 30 days after cancellation. If you need us to delete it sooner, tell us. If you need us to hold it longer while you migrate, tell us that too. We will work with you.
Your rights
Depending on where you live, you may have specific legal rights over your personal data. These typically include:
- The right to know what data we have about you
- The right to correct data that is wrong
- The right to delete your data
- The right to a copy of your data in a portable format
- The right to withdraw consent for uses that depend on it
To exercise any of these rights, email info@dwrgrantmgmt.site with your request. We will respond within 30 days.
Security
We take security seriously. Passwords are hashed. Data is transmitted over encrypted connections (HTTPS). Access to production systems is limited. Backups are taken regularly. Rate limiting protects our APIs from abuse.
No system is perfect. If we ever discover a security incident that affects your data, we will notify you promptly with what we know and what we are doing about it.
Children
GFR is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Cookies
Our website uses two kinds of cookies.
Essential cookies keep you signed in and remember your preferences. These are always on because the site cannot function without them.
Analytics cookies help us understand how visitors use the site. These are only set if you accept them on the cookie banner. If you decline, none are set.
You can clear cookies at any time through your browser settings. On our site, you can change your consent choice by clearing your browser data for our domain, which will re-trigger the banner.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the website before the changes take effect. The date at the top will always tell you when it was last updated.
Contact us
Questions about privacy? Email us at info@dwrgrantmgmt.site or write to:
DocWriteReview, LLC
Washington, DC