AwardDesk Privacy Policy
AwardDesk is in beta, and so is this policy. We welcome feedback on it, it will change as the Service does, and during the beta we may test or explore features and processing it does not yet describe. Questions and feedback go to help@awarddesk.com.
This policy describes how Nanodesk, LLC ("Nanodesk," "we") handles personal data in AwardDesk, the grant-lifecycle software service at awarddesk.com (the "Service"), and on our public pages. Our Terms of Service govern the Service itself; where the two overlap on customer documents, the Terms control.
What we collect
Account information. When you create an account we collect your name, email address, and, if you provide them, your institution and role. If you sign in with Google, we receive your name, email address, and profile picture from your Google account — see "Signing in with Google" below.
Your documents and workspace content. The Service exists to hold grant applications and award documents you choose to upload or create. We process this content only to provide the Service, as the Terms of Service describe; we do not use it to train AI models, and we do not permit our AI providers to do so.
Billing information. Payments are processed by Stripe. We receive transaction records (what was purchased, when, by which account) but never see or store full card numbers.
Operational data. Like most services, we keep logs of how the Service runs and is used — requests, timings, feature usage, errors, and the IP addresses and browser types that made them. We use this to operate, secure, and improve the Service. We run no third-party analytics and no advertising trackers.
Cookies. We use cookies only to keep you signed in and to remember preferences like your color scheme. There are no advertising or cross-site tracking cookies.
Support. If you email us, we keep the correspondence.
Signing in with Google
If you choose Google sign-in, Google shares your basic profile with us: name, email address, and profile picture. We use it only to create and authenticate your account. We do not request access to your Gmail, Drive, Calendar, or any other Google data. Google user data is never sold, never shared with third parties except the service providers below acting on our behalf, and never used for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
How we use information
We use personal data to provide and secure the Service, to run the features you invoke (including sending document text to our AI providers when you run a check — see below), to bill for subscriptions you purchase, to send transactional email such as invitations, receipts, and renewal reminders, to respond to support requests, and to meet legal obligations. We do not sell personal data, we do not share it for advertising, and we send no marketing email without your consent.
AI processing
Parts of the Service are powered by large language models. When you run a check or another AI-backed feature, the relevant document text is processed by models running inside our cloud provider's environment. The companies that build those models do not receive your content, and our agreements prohibit training on it.
Service providers
We share personal data only with the providers that run the Service, each bound by contract to use it solely to provide their service to us: Clerk (sign-in and account management), Stripe (payments), Amazon Web Services (hosting, storage, backups, and AI processing), Resend (transactional email), and Google (sign-in, if you use it). We also disclose information where law requires it — giving you notice where legally permitted — and, if Nanodesk is ever part of a merger or acquisition, to the successor under this policy's protections.
Retention and deletion
Documents and workspace content follow the data lifecycle in the Terms of Service: when a subscription or trial ends, content is exportable during a read-only window and then deleted from active systems, with backup copies aging out within 90 days. You can export your content and delete your personal account at any time; account deletion follows the same schedule. Operational logs are kept only as long as operating and securing the Service requires. Billing records are kept as long as tax and accounting law requires.
Security
We protect personal data with commercially reasonable technical and organizational measures. If we become aware of a security incident affecting your data, we will notify you without undue delay, as the Terms of Service describe.
Your rights
You can access and export your data through the Service, correct your account information in settings, and delete your account. California residents have the rights the CCPA provides — to know, to delete, to correct, and to not be discriminated against for exercising them; we do not sell or share personal information as the CCPA defines those terms. To exercise any right, or if you have any question about this policy, email help@awarddesk.com; we respond within the time the law requires.
Where we operate, and who the Service is for
The Service is operated from the United States, and data is stored in the United States. The Service is for professional use and requires users to be at least 18; it is not directed at children, and we do not knowingly collect data from them.
Changes
We may update this policy. Each version is dated, prior versions are available from us on request, and we will email account owners before a material change takes effect.
Contact
Nanodesk, LLC · help@awarddesk.com