Privacy Policy

We collect information you provide and information generated as you use the service:

• Account & organization data — name, email, password, organization name, EIN, mailing address, and role.
• Knowledge Base content — mission statements, program descriptions, budgets, narratives, and documents you upload to generate applications.
• Usage & device data — log data, IP address, browser type, pages viewed, and feature usage.
• Payment data — billing details processed by our payment provider (see Third-Party Services). We do not store full card numbers.

Benavora uses Anthropic’s Claude API to power grant research, eligibility scoring, narrative drafting, and form analysis. When you generate or analyze content, the relevant text from your Knowledge Base and the target opportunity is sent to Anthropic for processing and returned to you.

We instruct the model to use only the organizational data you provide and to flag gaps rather than fabricate facts. AI output is a draft and is not a substitute for professional review. Your inputs are transmitted over encrypted connections and handled under Anthropic’s commercial terms.

Your data is stored in databases and object storage hosted on Supabase (built on PostgreSQL) in the United States. Access is scoped per organization using row-level security so that one organization cannot read another’s records. Data is encrypted in transit and at rest.

We use strictly necessary cookies to keep you signed in and to secure your session, and limited analytics cookies to understand product usage. You can control cookies through your browser settings; disabling necessary cookies may prevent you from logging in.

We rely on the following sub-processors and services:

• Anthropic (Claude API) — AI text generation and analysis.
• Supabase — database, authentication, and file storage.
• Stripe — subscription billing and payment processing. Stripe handles your card data under its own privacy policy.
• Playwright (AutoApply) — an automated browser used, with your authorization, to read funder portals and submit applications on your behalf.

These providers process data only as needed to deliver their service. We do not sell your personal information.

We retain your data for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request export or deletion of your data at any time by emailing support@benavora.com. We will delete or de-identify your data within a reasonable period after account closure, except where retention is required by law.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to opt out of certain processing, and to be free from discrimination for exercising these rights.

• California (CCPA/CPRA) — you may request the categories and specific pieces of personal information we have collected and request deletion. We do not sell personal information.
• EEA/UK (GDPR) — you may exercise access, rectification, erasure, restriction, portability, and objection rights. Our legal bases are contract performance, legitimate interests, and consent where applicable.

To exercise any right, contact support@benavora.com. We will verify your request and respond within the timeframe required by law.

Benavora is a business tool not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date. Continued use of Benavora after changes take effect constitutes acceptance.

Questions about this policy or your data? Email support@benavora.com.