Privacy Policy

1. Who We Are

The Grant Map is operated by StanHattie LLC, a limited liability company based in Des Moines, Iowa. We build free tools that help homeowners find grant programs, rebates, forgivable loans, and other assistance they may qualify for.

Questions about this policy? Email support@thegrantmap.com.

2. What Data We Collect

Information you give us directly

• Email address, when you sign up for grant alerts or submit a contact form
• Home address, when you use our grant lookup tool, so we can match you with programs based on your location and jurisdiction
• Form submissions, any other information you voluntarily enter into our forms (e.g., project type, income range, homeowner status)
• Match requests, when you ask to be matched with a contractor we collect your name, email, address, and project description. See "Contractor matching and leads" below for exactly who that is shared with.
• Testimonials and reviews, if you accept one of our one-time invitation links, we collect the story text you write, the name you want shown, and (for contractor reviews) a star rating, linked to your original request or job. These are collected only through invitations; there is no open submission form.

Information collected automatically

• Google Analytics data, pages visited, time on site, general location (city/region level), device type, browser. GA4 runs in Google Consent Mode: until you click Accept on our cookie banner it sends only cookieless, non-identifying pings, and analytics cookies are set only after you accept.
• Authentication cookies, if you sign in (contractors and staff), a secure login cookie keeps you signed in for up to 30 days or until you log out. Your cookie-consent choice and the optional Journey tracker live in your browser's localStorage and are never sent to us.

3. How We Use Your Data

We use the information we collect to:

• Match your address and situation to grant programs you may qualify for
• Send you email alerts about new or expiring grant programs (only if you opt in)
• Make program recommendations based on your project type, income, and location
• Improve the site (via analytics, what pages are useful, where people get stuck)
• Respond to support requests and data correction submissions

We do not use your data for advertising targeting, profiling, or anything unrelated to helping you find grants.

Contractor matching and leads

If you submit a match request, contractors in your city whose trade fits your project first receive a preview that does NOT include your name, email, or address. Your contact details (name, email, address, and project description) are shared only with the matched, claimed, active contractor(s) who accept your request, up to three for a shared request, so they can contact you about the work. Contractors pay us for accepted leads; that fee never comes from you and does not change what you see. We never share your details with unclaimed public-records listings, and we do not sell your information to anyone else (see "We Do Not Sell Your Data" below; this sharing happens at your request, to do the thing the form is for).

Testimonials and reviews

If you submit a story or review through an invitation link and check the publication consent box, we review it and may publish it on the site showing only your first name, last initial, and city. Your email address is never published. You can withdraw a published story at any time by emailing support@thegrantmap.com. Reviews of specific contractors are collected the same way and are not displayed publicly at this time.

4. Third-Party Services

We use a small number of trusted third-party services to operate the site:

• Google Analytics, website usage analytics. Data is anonymized. See Google's Privacy Policy.
• Resend, email delivery service used to send grant alerts and transactional emails. See Resend's Privacy Policy.
• US Census Geocoder, we use the US Census Bureau's free geocoding API to convert your address to geographic coordinates for grant matching. No personal information is stored by this service beyond what is needed to return results.
• Google Maps Platform, address autocomplete on the homeowner lookup form. As you type, the partial address is sent (proxied through our server) to Google's Places API to suggest matches. It is not used for advertising. See Google's Privacy Policy.

Complete subprocessor list

The following service providers ("subprocessors") may process limited data on our behalf to run the site. Each is bound by its own privacy and security terms:

• Railway, application and database hosting (our servers and PostgreSQL database run here).
• Cloudflare, DNS, CDN, and bot protection (Turnstile) in front of the site.
• Stripe, payment processing for contractor per-lead charges (a contractor's card is saved at signup and charged when they accept a lead), dataset/API license purchases, and ad sponsorships. Stripe receives billing details of paying contractors, licensees, and advertisers, never homeowners.
• Resend, transactional and alert email delivery.
• Migadu, email hosting for our staff mailboxes (where your support messages are received).
• Backblaze B2, file storage for contractor-uploaded documents (such as insurance certificates and work photos).
• Google Analytics and Microsoft Clarity, usage analytics. Clarity (session replay and heatmaps) does not load at all unless you accept analytics cookies. Google Analytics runs in Consent Mode: cookieless, non-identifying pings until you accept, cookies only after.
• Twilio, SMS delivery, used to send one-time verification codes and listing-claim notices to contractors (not to homeowners). Reply STOP to opt out.
• Apollo.io, business-contact and public-records data used to build and verify our contractor directory. Apollo provides information about businesses (contractors), not homeowners. See the "Contractor Directory" section below for how public-records listings work.
• Anthropic, AI provider (Claude API). When you reply to one of our emails, the text of that message may be processed by Anthropic to help a person on our team draft a response and to classify the message for support routing. It is also used to compile and re-verify our public grant-program data, which contains no personal information. Anthropic processes this content under its commercial terms and does not use it to train its models. See Anthropic's Privacy Policy.
• OpenAI, AI failover provider. If our primary AI provider is unavailable, the same email-reply and data-compilation processing described above may fall back to OpenAI under its commercial API terms, which do not use the content to train its models. See OpenAI's Privacy Policy.
• Google Maps Platform, address autocomplete and geocoding. Receives the partial address you type on the lookup form (proxied server-side) to return address suggestions and coordinates for grant matching. Not used for advertising.

5. We Do Not Sell Your Data

We do not sell, rent, trade, or share your personal information with third parties for their own marketing purposes. Period.

6. Cookies

We use two types of cookies:

• Analytics cookies, set only after you click Accept on our cookie banner. Decline and no analytics cookies are set (Google Analytics then runs cookieless in Consent Mode, and Microsoft Clarity does not run at all). You can also opt out of GA entirely with the Google Analytics Opt-out Browser Add-on.
• Authentication cookies, if you sign in, a secure login cookie keeps you signed in for up to 30 days or until you log out.

We do not use advertising cookies or ad-targeting pixels. The only behavioral analytics we use are Google Analytics and Microsoft Clarity (session recordings and heatmaps), and both run only after you accept analytics cookies.

7. Affiliate Links

Some links or quote-request modules on The Grant Map may be affiliate or referral placements. Where they appear they are labeled, and if you click one and purchase or request a quote we may earn a commission or referral fee at no extra cost to you. As of this writing no affiliate modules are active on the site.

Third-party sites have their own privacy policies and data practices. We have no control over what happens on their sites. See our Affiliate Disclosure for full details.

8. Contractor Directory

Our contractor directory lists local contractors who work on grant-eligible projects. Contractors submit their own business information voluntarily when they create a free listing (they pay only for homeowner leads they accept). This information (business name, contact info, service area, license number) is displayed publicly on the site.

Unclaimed listings sourced from public records

To give homeowners useful coverage while the directory grows, some listings are "unclaimed", meaning we created them from publicly available business records rather than from the contractor signing up. Our public-record sources include business directories and contact data provided through Apollo.io, state contractor-licensing records published by government agencies, and business listings contributed to OpenStreetMap (© OpenStreetMap contributors). These listings show only business-level information that is already public: business name, general location, trade, license number where applicable, and a business contact method.

Unclaimed listings are clearly labeled as sourced from public records and not yet verified, and they do not carry our "Grant-Approved" badge. We never share a homeowner's personal information (name, email, address, or project details) with an unclaimed listing. A contractor can claim, correct, or have an unclaimed listing removed at any time by emailing contractors@thegrantmap.com.

If you are a contractor and want to update or remove your listing, email contractors@thegrantmap.com.

9. Embeddable Widget

We offer an embeddable grant lookup widget that other websites can install. The widget does not collect any personal data on its own. If a user submits an address through the widget, that address is processed the same way as if they used our main site, it is used only for grant matching and is not stored beyond what is needed to return results.

10. Data Retention

• Form submissions, stored on our server until you request deletion
• Email addresses, stored until you unsubscribe or request deletion
• Analytics data, retained by Google Analytics according to their standard retention schedule (typically 14 months)
• Authentication cookies, expire after 30 days or on logout
• Testimonials and reviews, kept while published; removed on request to support@thegrantmap.com
• Dataset license buyer records (name, email, organization of API licensees), kept for the life of the license plus standard financial-record retention

11. Your Rights

You can request at any time:

• A copy of the personal data we have about you
• Correction of inaccurate data
• Deletion of your data
• To unsubscribe from emails (use the unsubscribe link in any email, or email us)

To make any of these requests, email support@thegrantmap.com with the subject line "Privacy Request." We will respond within 30 days.

12. Children's Privacy (COPPA)

The Grant Map is not directed at children under the age of 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has submitted information to us, please contact us and we will delete it promptly.

13. California Residents, CCPA Disclosure

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, or sell
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information (note: we do not sell personal information)
• The right not to be discriminated against for exercising these rights

To exercise your CCPA rights, email support@thegrantmap.com with the subject "Privacy Request, California."

14. How We Share Your Information With Contractors

When you ask us to connect you with a contractor (by leaving the "Connect me with contractors" option checked on our intake form), we share the project details you provide, your name, email, address, and project description, with vetted home-improvement contractors in our network so they can contact you about your project. We do this only at your request, to do the thing the form is for. Contractors pay us a per-accepted-lead fee, which never comes from you and does not change what you see. Because this sharing happens at your direction and contractors use your details only to respond to your project (not for their own marketing), we do not treat it as selling your data; see Section 5, We Do Not Sell Your Data.

You can opt out at any time:

• Uncheck "Connect me with contractors" on the intake form before you submit, and we will not share your project with any contractor.
• Reply to any email from us, or use the unsubscribe link, and we will stop sharing your information with contractors.

Opting out does not affect your grant matches; you will still get those.

We do NOT share your household income information with contractors. We currently share your contact details for email outreach only; we do not give contractors your phone number for calls or texts.

15. Iowa Residents, Iowa CDPA Disclosure

If you are an Iowa resident, you have rights under the Iowa Consumer Data Protection Act (Iowa CDPA), including the right to access, correct, delete, and obtain a copy of your personal data. You also have the right to opt out of the processing of your personal data for targeted advertising (we do not do this) or the sale of personal data (we do not do this).

To exercise your Iowa CDPA rights, email support@thegrantmap.com with the subject "Privacy Request, Iowa."

16. Security

We take reasonable technical measures to protect your data, including HTTPS encryption on all pages. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the site after changes are posted means you accept the updated policy.

18. Contact

StanHattie LLC
731 SE Alices Rd PMB 1035
Waukee, IA 50263
Email: support@thegrantmap.com