Privacy Policy

The data controller for personal data processed through the Service is Zhan Nikoghosyan, Individual Entrepreneur (IE) (“LoomaGrante”, “we”, “us”).

Registered address: 5th Avenue 20/1, Geghanist, Republic of Armenia. IE / TIN (ՀՎՀՀ): 57526213.

Product and billing support: support@loomagrante.com. Privacy and legal notices: legal@loomagrante.com. Website: https://loomagrante.com.

This Policy covers personal data collected when you visit our website, create an account, build company profiles, use matching features, or contact us. It does not cover third-party websites or funding portals we may link to.

Depending on how you use the Service, we may process:

• Account data: email address, password hash, plan type, and account timestamps.
• Billing data (paid plans only): if you subscribe to a paid plan, our payment processor and Merchant of Record, Lemon Squeezy, collects and processes billing details on our behalf — such as your billing name and email, country, VAT/tax ID (if provided), order and subscription identifiers, subscription status, and renewal/cancellation dates. Lemon Squeezy shares a subset of this data back with us (via webhook) so we can activate your plan. We do not receive, process, or store your full card number or other sensitive payment-card data — Lemon Squeezy handles that directly.
• Company profile data: company name, country of registration, sector, stage, employee count, founded year, description, keywords, funding amount preferences, and related matching settings.
• Match and usage data: match scores, AI verification flags, explanations shown to you, status of recommendations, and technical logs needed to operate the Service (including AI usage metrics such as token counts for billing and quality control).
• Technical data: IP address, device/browser information, and similar diagnostics that our hosting or security providers may process when you access the Service.
• Communications: messages you send us (for example support or legal requests).

We do not intentionally collect special-category data (e.g. health, political opinions). Please do not include such data in free-text profile fields unless strictly necessary and lawful.

We process personal data for the following purposes:

• Provide the Service (account creation, login, profiles, matching, dashboards) — performance of a contract (GDPR Art. 6(1)(b)).
• AI-assisted matching and explanations — performance of a contract; where needed, our legitimate interests in operating an accurate matching engine (Art. 6(1)(f)), balanced against your rights.
• Security, fraud prevention, and abuse detection — legitimate interests (Art. 6(1)(f)).
• Billing and plan administration (for paid plans) — performance of a contract and legal obligations (Art. 6(1)(b) and (c)), carried out jointly with our Merchant of Record, Lemon Squeezy, who issues invoices/receipts and handles applicable sales tax/VAT.
• Improve and debug the Service using product analytics (including PostHog) and aggregated or de-identified metrics where possible — legitimate interests (Art. 6(1)(f)). Where analytics relies on non-essential cookies or similar browser storage, we ask for your consent first (Art. 6(1)(a)); see Cookies and similar technologies.
• Respond to legal requests and enforce Terms — legal obligation and/or legitimate interests (Art. 6(1)(c) and (f)).
• Marketing emails (if we send any beyond service-related notices) — only with consent where required (Art. 6(1)(a)), which you may withdraw at any time.

To generate embeddings, similarity search, eligibility-oriented checks, and explanations, we may send relevant profile and grant text to AI infrastructure providers (for example OpenAI and/or Anthropic) acting as processors or sub-processors under appropriate terms.

We also use infrastructure providers for hosting, databases, and authentication (for example cloud Postgres hosting), and PostHog for product analytics (page views and selected product events). These providers process data only as needed to deliver their services to us.

We do not sell your personal data. We do not share your company profile with unrelated third parties for their own marketing.

If you subscribe to a paid plan, billing is handled by Lemon Squeezy (https://www.lemonsqueezy.com), acting as our Merchant of Record and, for the billing and payment data it processes, an independent controller under its own privacy policy and terms — not merely our processor. We share the minimum information needed to attribute a purchase to your account (such as your user ID and email) when you start checkout, and Lemon Squeezy sends us subscription status and renewal information via webhook so we can grant or remove access to paid features.

We recommend reviewing Lemon Squeezy’s privacy policy for details on how it processes payment-card data and other billing information it collects directly from you at checkout and through its customer portal.

We may disclose personal data only:

• to service providers who help us run the Service under contract;
• if required by law, regulation, court order, or competent authority;
• to protect the rights, safety, or property of LoomaGrante, users, or the public;
• in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards;
• with your direction or consent.

Some providers may process data outside the European Economic Area (for example in the United States). Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses and provider commitments, unless an adequacy decision applies.

We retain account and profile data for as long as your account remains active and as needed to provide the Service. After deletion requests or account closure, we delete or anonymize personal data within a reasonable period, unless longer retention is required for legal, tax, dispute, or security reasons (in which case access is restricted).

Technical and AI usage logs may be retained for a limited period for security, cost control, and service integrity, then deleted or aggregated.

Billing and subscription records (such as invoices, order and subscription identifiers, and payment status) are kept by us and by Lemon Squeezy for as long as required by applicable accounting, tax, and consumer-protection law, which may extend beyond account closure.

We use reasonable technical and organizational measures appropriate to the risk, including encrypted transport (HTTPS), hashed passwords, and access controls. No method of transmission or storage is fully secure; we cannot guarantee absolute security.

Where GDPR (or equivalent law) applies, you may have the right to access, rectify, erase, restrict, or object to certain processing, and to data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

To exercise rights, email legal@loomagrante.com. We may need to verify your identity. You may also lodge a complaint with your local supervisory authority.

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will take appropriate steps.

Matching involves automated processing (including scoring and AI assistance) to suggest potentially relevant programs. These outputs are informational. They do not produce legal effects solely by automated means in the sense of binding funding decisions— funding bodies make their own decisions, and you decide whether and how to apply.

We do not guarantee that suitable grants will be found for your company, including within any specific period.

We use cookies or similar technologies that are strictly necessary for authentication and security (for example session cookies). These are required to operate the Service and do not require consent.

With your consent, we also use PostHog for product analytics. PostHog may set cookies or use local/session storage in your browser to measure page views, feature usage, and similar events so we can improve LoomaGrante. You can accept or decline analytics via the cookie banner on first visit. Declining does not affect essential cookies or your ability to use the Service. You may change your choice later by clearing site data for this domain (the banner will appear again) or contacting us.

Separately, when you are signed in we may record limited product events (for example signup or checkout steps) via PostHog on our servers, without placing analytics cookies in your browser. Those events use your account identifier and are described under purposes above.

We do not use marketing or advertising cookies. If we introduce additional non-essential cookies in the future, we will update this Policy and obtain consent where required.

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes will be indicated on this page or via the Service where appropriate. Continued use after the effective date constitutes acknowledgment of the updated Policy, except where mandatory law requires additional consent.

Privacy questions and data-subject requests: legal@loomagrante.com. Product and billing support: support@loomagrante.com.