Privacy and terms

This policy explains what 3nity Corporation, which runs NonprofitAdGrant.com, collects when your organization uses the service, how we use it, and the choices you have.

What we collect

• Your account: your name, work email, organization, and the people you invite to it.
• Your Google Ads data, once you connect an account: performance, settings and change history, read through Read only access or our manager-account link.
• Your reading: where you left off in the handbook, bookmarks, highlights and notes. These are private to you; our team sees only "started" or "finished", and only if you allow it.
• Billing: what you bought and when. Card details are collected by Stripe; we never see or store full card numbers.
• Technical data: the cookies that keep you signed in, and server logs of requests and errors.
• Analytics and advertising: our website and the client area (never our team console) use analytics and advertising tools from Google, Microsoft (Bing), Meta and OpenAI (ads in ChatGPT), which may set cookies to measure visits and how our own ads perform. When you sign up or buy a service, our server also tells Meta and OpenAI about it, so they can match it to an ad you saw: what you signed up for or bought and its price, your email address and our ID for your account (both hashed, a scrambled one-way form), your IP address and browser type, and the ad click and cookie IDs their own tags set. They don't receive your Google Ads account data. You can block or delete these cookies in your browser, and manage ad preferences in your Google, Microsoft, Meta and OpenAI accounts.

What we never collect

• Your Google password.
• Anything from Google Ads accounts you haven't connected.

How we use it

• To run checks, audits, plans and reports for your organization. Our software works out checks, audits and report figures from your account data.
• Our team may use an AI assistant (Anthropic's Claude), through our own connection, to read that data and draft plans and reports. A person on our team reviews the results before you see them, and nothing changes in your account without the approval our terms describe.
• To send the emails you need, such as sign-in links, receipts and reports. Follow-up and marketing emails only if you agreed to them; every one has an unsubscribe link.
• To keep the service secure and to fix problems.
• We don't sell your data, and we don't use your Google Ads data to advertise to you or anyone else.

Who can see it

• People you add to your organization, according to the role you give them.
• Our team members assigned to your account. Every view, approval and change is recorded in an audit log.
• Service providers, only to provide the service: Stripe (payments), Google (reading and, with approval, changing your Google Ads account), Anthropic (the AI assistant), Cloudflare (delivering and protecting our website), Calendly (booking a walkthrough, if you choose to), and Google, Microsoft, Meta and OpenAI (website analytics and advertising). Our servers and email are run by 3nity Corporation itself.
• We may also share information when the law requires it, or to protect the safety and rights of our users and of others.

How long we keep it

• Your organization's records (checks, audits, plans, reports and the change log) while your account exists, including after management ends, so your history stays with you.
• Detailed weekly account snapshots and analyses for about six months.
• Daily check details and our email log for 13 months.

Your choices

• Export your records any time from your account settings.
• Ask us to delete your organization's account and data. We delete it within 30 days, except billing records we must keep for tax and accounting, and our security log of who did what in your account.
• Remove our access in Google Ads at any time. Our checks stop when you do, and daily checks stop when management ends.
• Unsubscribe from follow-up emails with the link in any of them.
• Turn on Global Privacy Control in your browser and we load analytics only, with Google's advertising features off: no advertising tags, and our server doesn't report your sign-up or purchase to any advertising service.

Security

Access to your Google Ads account is stored encrypted, and only our background service can read it. Card payments use Stripe's hosted checkout. Team members sign in with a password and 2-step verification.

Children

The service is for organizations and isn't directed at children. We don't knowingly collect information from anyone under 18.

Where data is processed

Our servers are in the United States.

Changes to this policy

We'll post any change here with its date and, for a material change, email account owners before it takes effect.