Privacy Policy
Effective and last updated November 15, 2026.
Who we are
GrantFern is run by Quietlathe LLC, a Wisconsin limited liability company. 2800 E. Enterprise Ave Ste 333, Appleton, WI 54913. Contact: ops@quietlathe.com. In this policy, "we" means Quietlathe LLC.
GrantFern is in early access. This page describes what the site does today and, where marked "when", what we plan to do once those features are live.
What we collect
- Site visits. The site is hosted on Cloudflare. To serve and protect the site, Cloudflare processes request data such as your IP address, browser (user agent) and the pages you request. We do not run analytics tools on the site.
- Early-access sign-ups. If you join the early-access list, we store the product (GrantFern), your email address, the plan you signed up for (free list or Pro, if any), the page you signed up on, a timestamp, and a one-way hash of your IP address. We use the hash only for spam rate limits. We cannot turn it back into your IP address.
- What you do not give us. We do not ask for your name, organization, or payment details at this stage. The site has no accounts, and no tool on it sends what you type to a server or an AI provider.
- Accounts and payments, when checkout opens. When Pro checkout opens, payments will be processed by Stripe. We never see or store full card numbers. We expect to keep a Stripe customer ID, your plan and its status, and your billing email.
- Email you send us. If you write to ops@quietlathe.com, we keep the message and our reply.
Why we use it
- To keep a list of people who want to hear when GrantFern launches.
- To send one email per product when checkout opens, and, once the weekly briefing launches, the briefing you signed up for. No emails are sent now.
- To limit spam and abuse of the sign-up form.
- To serve and secure the site, and to answer your messages.
- To take payment and manage a Pro plan, when checkout opens.
We never sell or share the list. We do not use your information for advertising.
Who else handles data
- Cloudflare hosts the site and runs the functions and the database (D1) that store the early-access list.
- Stripe, when checkout opens, processes payments. Its handling of your data is described in its privacy policy.
- An email service (we plan to use Resend) will deliver the briefing and launch emails once we start sending. It will receive your email address and the message.
- Grants.gov and the California Grants Portal are the public sources of the listings. When you click a listing you leave this site and their policies apply. We do not send them any of your information.
We do not use an AI provider on this site. The listing summaries are built from the source records without a language model.
Cookies and local storage
The site sets no cookies of its own and uses no advertising or analytics cookies. We do not store anything in your browser's localStorage. Cloudflare may use security-related technologies to protect the site; if that changes what is stored on your device, it is done by Cloudflare to keep the site working and secure.
How long we keep it
We keep the early-access list until the product is retired or you ask us to remove your address. If you ask to be removed, we delete your row from the list. Payment and tax records, when they exist, are kept as long as the law requires. Cloudflare keeps its own request logs under its own policy.
Security
The site is served over HTTPS, and the list is stored in a Cloudflare database that only we can reach. We use reasonable measures to protect it, but no system is perfectly secure and we cannot guarantee it.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you can ask us to tell you what personal information we hold about you and how we use it (right to know), to delete it, and to correct it. You can also opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We will not treat you differently for using these rights.
To make a request, email ops@quietlathe.com from the address you signed up with. We verify a request by matching it to that address, and may email you a confirmation before we act. An authorized agent can make a request for you; we may ask for written proof that you gave permission. We aim to respond within 45 days.
Visitors from the EEA and UK
For visitors in the European Economic Area and the United Kingdom, Quietlathe LLC is the controller of your personal data (contact above). Our lawful bases are your consent for the early-access list (you can withdraw it at any time by emailing us), our legitimate interest in running and securing the site and preventing abuse, and, when checkout opens, performance of a contract and legal obligations for payments.
You can ask to access, correct, delete, restrict or export your data, and object to processing, by emailing ops@quietlathe.com. You can complain to your local data protection authority.
We are in the United States, so your data is processed there, and Cloudflare and Stripe may process it in other countries. Where required, those transfers rely on the safeguards those providers offer, such as standard contractual clauses.
Children
GrantFern is for people who work at or with nonprofits. It is not directed to children under 13, and we do not knowingly collect their information. In the EEA and UK it is not meant for anyone under 16. If you think a child gave us an email address, write to us and we will delete it.
Changes
If we change this policy in a way that matters, we will update the date above. If we start using a new kind of data or a new service, we will update this page first.
Contact
Quietlathe LLC, 2800 E. Enterprise Ave Ste 333, Appleton, WI 54913. ops@quietlathe.com. Governing law and venue are in the Terms.