LEGAL
Last updated: September 2026
FoundationMatch is a free grant-matching tool for small nonprofits. This policy describes what information we collect, how we use it, and your rights regarding your data.
When you sign in, we store your account identifier provided by the authentication provider (currently Google Sign-In). We do not collect your name, email address, or any personal profile data beyond what is needed to identify your account within the tool.
When you describe your nonprofit work and generate a shortlist, the description, optional focus areas, location, and population you serve are stored in your account. The resulting match data (funder names, match scores, match reasons) is also stored. This data is visible only to you when you are signed in.
We collect standard technical information: browser type, device type, and page interactions. This is limited to what is necessary for the tool to function and for basic analytics. We do not track your activity outside this website.
We use a session cookie to keep you signed in. A theme preference is stored in your browser’s localStorage. No third-party cookies are used. You can clear both at any time through your browser settings.
Your data is used only to:
We do not sell, share, or transfer your data to third parties. We do not use your data for training external models or services. The only exception is if required by applicable law.
Your account data and shortlists are retained for as long as your account exists. You can delete individual shortlists at any time within the tool. If you would like your account and all associated data deleted, contact the tool operator (see below).
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact the tool operator.
The legal entity that operates this tool has not yet been registered. Your data is held by the tool operator — the person who will complete that registration. Until registration is complete, data protection obligations are managed directly by the operator. Once the entity is registered, this policy will be updated with the registered name and contact details.
If this policy changes materially, we will update the "Last updated" date at the top. Continued use of the tool after changes take effect constitutes acceptance of the updated policy.
For questions about this policy, or to exercise your data rights, please raise an issue through the project repository or contact the tool operator. A direct contact route will be added once the legal entity is registered.