Privacy Policy
Last updated: 23 July 2026
The short version
We only collect what you type into our forms — your email, optionally your organisation's name, and the website address you ask us to scan. We use it to send you your report and follow up as you requested. No ad trackers, no selling or renting your data. Ever. Want your data gone? One email and it's deleted.
1. Who we are
GrantLift is an independent Google Ad Grant service ("we", "us"). We are the data controller for the personal data described in this policy. GrantLift is not affiliated with or endorsed by Google.
Contact for anything privacy-related: hello@grantlift.agency.
2. What we collect, and why
| Data | When | Why (legal basis) |
|---|---|---|
| Website address you submit | When you run the free readiness scan | To analyse the site and show you the report (performing the service you requested) |
| Email address, organisation name (optional), your scan score | When you unlock the full report | To email you the report and — only if you ticked the box — send you a quote (consent) |
| IP address | Automatically, on every request | Rate-limiting to prevent abuse of the free scanner, and standard hosting logs (legitimate interest). Held briefly, never used for profiling. |
That's the whole list. The scan itself analyses the website you point us at — public technical facts about a web page, not personal data about you.
3. What we don't do
- No advertising or cross-site tracking. This site loads no advertising or social-media trackers. Our analytics tool is cookieless and only counts anonymous, aggregate page views — it can't identify you or follow you across other sites. The one thing that does set a cookie is our chat widget (see below), which uses it to remember your conversation if you return.
- No selling or sharing. We never sell, rent, or trade your personal data. No "partners", no "affiliates".
- No spam. Unlocking a report gets you that report and at most one follow-up. Nothing recurring unless you explicitly opt in.
4. Who processes data on our behalf
Like nearly every website, we rely on a few carefully-chosen service providers ("processors") that handle data only on our instructions:
- Vercel (hosting) — serves the website and runs the scanner; keeps short-lived technical request logs.
- Vercel Web Analytics — counts anonymous, aggregate visits and page views to help us understand what's useful. Cookieless, no personal profiles, no cross-site tracking.
- Brevo Conversations (live chat) — powers the chat bubble in the corner. If you open it, whatever you type and your email address (if you give one) are stored by Brevo so we can reply. It sets a cookie on your device to recognise your conversation when you come back.
- FormSubmit (form delivery) — relays your unlock-form submission to our inbox.
- Google Fonts — delivers the two typefaces on this site; your browser requests the font files from Google's servers.
Some of these providers are based in the United States. Where data leaves the EEA, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.
5. How long we keep it
- Scan data: processed on the fly; not stored in a database.
- Leads (email/organisation): kept in our inbox while relevant to your enquiry, deleted on request at any time.
- Technical logs: retained briefly by our hosting provider, then automatically discarded.
6. Your rights
If you're in the EU/EEA (and in most other places too), you have the right to access, correct, export, restrict, object to the processing of, or delete your personal data — and to withdraw consent at any time. To exercise any of these, email hello@grantlift.agency; we'll act on it within 30 days. You also have the right to complain to your local data-protection authority.
7. Changes to this policy
If we add features that change what we collect (for example an email newsletter — it would be strictly opt-in), we'll update this page and the date at the top before they go live.