AwardDeskBeta
Sign in

AwardDesk Privacy Policy

No AI company receives your documents

The checks and every other AI feature run on models hosted inside our own cloud environment at Amazon Web Services. The companies that build those models never receive your content, and our agreements prohibit training on it. Nothing you upload is used to train a model, ours or anyone else's.

Zero data retention by the AI service

The AI service keeps nothing. Document text is processed and discarded, with data retention set to none at the account level and locked there by policy, so it cannot be switched on by mistake. The record of each check, including what was sent and what came back, is kept in your workspace with the document it was run on, and is exported and deleted with that document. Your documents themselves stay in your workspace for as long as you keep them; you can export or delete them at any time, and the schedule after an account ends is under Retention and deletion below.

What we collect

Account information. When you create an account we collect your name, email address, and, if you provide them, your institution and role. If you sign in with Google, we receive your name, email address, and profile picture from your Google account — see "Signing in with Google" below.

Your documents and workspace content. The Service exists to hold grant applications and award documents you choose to upload or create. We process this content only to provide the Service, as the Terms of Service describe; we do not use it to train AI models, and we do not permit our AI providers to do so.

Billing information. Payments are processed by Stripe. We receive transaction records (what was purchased, when, by which account) but never see or store full card numbers.

Operational data. Like most services, we keep logs of how the Service runs and is used — requests, timings, feature usage, errors, and the IP addresses and browser types that made them. We use this to operate, secure, and improve the Service. We run no third-party analytics and no advertising trackers.

Cookies. We use cookies only to keep you signed in and to remember preferences like your color scheme. There are no advertising or cross-site tracking cookies.

Support. If you email us, we keep the correspondence.

Signing in with Google

If you choose Google sign-in, Google shares your basic profile with us: name, email address, and profile picture. We use it only to create and authenticate your account. We do not request access to your Gmail, Drive, Calendar, or any other Google data. Google user data is never sold, never shared with third parties except the service providers below acting on our behalf, and never used for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How we use information

We use personal data to provide and secure the Service, to run the features you invoke (including processing document text with the AI models described above when you run a check), to bill for subscriptions you purchase, to send transactional email such as invitations, receipts, and renewal reminders, to respond to support requests, and to meet legal obligations. We do not sell personal data, we do not share it for advertising, and we send no marketing email without your consent.

Service providers

We share personal data only with the providers that run the Service, each bound by contract to use it solely to provide their service to us: Clerk (sign-in and account management), Stripe (payments), Amazon Web Services (hosting, storage, backups, and AI processing), Resend (transactional email), and Google (sign-in, if you use it). We also disclose information where law requires it — giving you notice where legally permitted — and, if Nanodesk is ever part of a merger or acquisition, to the successor under this policy's protections.

Retention and deletion

Documents and workspace content follow the data lifecycle in the Terms of Service: when a subscription or trial ends, content is exportable during a read-only window and then deleted from active systems, with backup copies aging out within 90 days. You can export your content and delete your personal account at any time; account deletion follows the same schedule. Operational logs are kept only as long as operating and securing the Service requires. Billing records are kept as long as tax and accounting law requires.

Security

We protect personal data with commercially reasonable technical and organizational measures. If we become aware of a security incident affecting your data, we will notify you without undue delay, as the Terms of Service describe.

Your rights

You can access and export your data through the Service, correct your account information in settings, and delete your account. California residents have the rights the CCPA provides — to know, to delete, to correct, and to not be discriminated against for exercising them; we do not sell or share personal information as the CCPA defines those terms. To exercise any right, or if you have any question about this policy, email help@awarddesk.com; we respond within the time the law requires.

Where we operate, and who the Service is for

The Service is operated from the United States, and data is stored in the United States. The Service is for professional use and requires users to be at least 18; it is not directed at children, and we do not knowingly collect data from them.

Changes

We may update this policy. Each version is dated, prior versions are available from us on request, and we will email account owners before a material change takes effect.

Contact

Nanodesk, LLC · help@awarddesk.com