Privacy Policy

What we collect

• Account information: your name, work email, and password (stored securely by our authentication provider, never in plain text).
• Organization information: your org's name, mission, focus areas, location, EIN, and anything you tell us during onboarding.
• Documents you upload: budgets, financials, annual reports, prior proposals, and any other files you add to your evidence base, plus the funder RFP/LOI text you paste or upload.
• Grant application content: drafts, edits, and section content you create using Catharsis.
• Billing information: handled directly by Stripe, our payment processor — Catharsis never sees or stores your full card number.
• Usage data: pages visited, features used, and basic device/browser information, used only to keep the product working and improve it.

How we use it

• To generate grant drafts grounded in your own evidence base, using Anthropic's Claude models.
• To match your organization with relevant federal, state, and foundation grant opportunities.
• To process payments and manage your subscription, via Stripe.
• To verify 501(c)(3) status when requested, via the free public ProPublica Nonprofit Explorer API.
• To communicate with you about your account, billing, and material changes to the service.
• To improve Catharsis — we look at aggregate, de-identified usage patterns, never the specific content of your drafts, for this purpose.

Catharsis is built as a closed-loop system: when drafting, the AI is restricted to your own uploaded documents and a curated knowledge base, and every factual claim it writes is tied to a citeable source. Your documents and drafts are never used to train Anthropic's, or anyone else's, underlying AI models.

Who we share it with

We don't sell your data. We share information only with the service providers that make Catharsis work, each bound by their own data-processing terms:

• Supabase — hosts our database, authentication, and file storage.
• Anthropic — processes evidence and drafts grant text through the Claude API.
• Voyage AI — generates embeddings used to retrieve the right evidence for a draft.
• Stripe — processes payments and manages subscriptions.
• ProPublica and Grants.gov — free, public data sources we query for nonprofit verification and federal grant listings; we don't send them your organization's private data, only what's needed to run the lookup (e.g. an EIN you submit for verification).

We may also disclose information if required by law, or to protect the rights, property, or safety of Catharsis, our users, or the public.

How long we keep it

We retain your account and organization data for as long as your account is active. If you close your account, we delete your organization's documents, drafts, and personal information within 30 days, except where we're required to keep billing records longer for tax or accounting purposes.

Your rights

You can access, correct, or export your organization's profile at any time from your account settings. You can delete individual documents from your evidence base at any time. To request a full export or deletion of your account and data, email us at hello@trycatharsis.com — we'll respond within 30 days.

Cookies

We use only the essential, functional cookies required to keep you signed in and to remember your session. We don't use third-party advertising or tracking cookies.

Children's privacy

Catharsis is intended for nonprofit staff, board members, and volunteers, and isn't directed at children. We don't knowingly collect information from anyone under 16.

Changes to this policy

If we make material changes, we'll email the address on your account and update the effective date above before the changes take effect.

Contact

Questions about this policy or your data? Email hello@trycatharsis.com.