Last updated: July 21, 2026
This Privacy Policy explains how CharityIQ collects, uses, shares, and protects personal information when you use our website and services at charityiq.us. CharityIQ is a product of CIQ Technologies Ltd (“CharityIQ,” “we,” “us”). By using CharityIQ you agree to this policy.
Who this applies to
This policy covers visitors to our website and users of CharityIQ (typically staff, board members, and volunteers at US nonprofits). Where we process personal data on behalf of a customer organization (for example, beneficiary details you upload), that organization is the controller and we act as its service provider/processor under our Data Processing Agreement.
Information we collect
- Account information — name, work email, organization, role, and password.
- Organization & program data you provide — information about your nonprofit, programs, beneficiaries, outcomes, and past applications that you choose to add so our AI can ground its output.
- Payment information — handled by our third-party payment processor; we do not store full card numbers.
- Usage data — how you interact with the service, device and log data, and diagnostics.
- Communications — messages you send us and support requests.
- Cookies — see our Cookie Policy.
How we use information
- To provide and operate CharityIQ, including grant matching, AI grant drafting, compliance, and impact tools.
- To ground and cite AI output in verified sources (see Data sources).
- To process payments and manage your subscription.
- To provide support, send service messages, and — where permitted — relevant updates.
- To secure, maintain, and improve the service.
- To comply with law and enforce our Terms of Service.
AI and your data
CharityIQ’s AI is grounded and cited, with a human in the loop. We do not sell your data, and we do not use your organization’s private data to train public AI models. Our AI model providers are contractually bound not to train their public models on data we route through them.
How we share information
We share personal information only as needed: with sub-processors that operate the service (hosting, AI processing, payments, email, analytics) under data-protection terms; when required by law or to protect rights and safety; and in a business transfer (merger, acquisition, or financing), subject to this policy. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Your privacy rights (US)
Depending on your state (for example, California under the CCPA/CPRA, and Virginia, Colorado, Connecticut, Utah, and others), you may have the right to: know and access the personal information we hold; request deletion; request correction; obtain a portable copy; and opt out of “sale” or “sharing” and certain profiling — though we do not sell or share personal information for advertising. We will not discriminate against you for exercising these rights. To make a request, email privacy@charityiq.us. We will verify your request and respond within the timeframe required by law. You may use an authorized agent, and you may appeal a decision by replying to our response. Where CharityIQ processes data on behalf of your organization, we will direct your request to that organization.
EU/UK users
Because we process data in the United States and the European Union, EU/UK data protection law may apply to some processing. Where it does, our legal bases are contract performance, legitimate interests, consent, and legal obligation, and you have the rights afforded under the GDPR (access, rectification, erasure, restriction, portability, and objection). International transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
Data retention
We keep personal information for as long as your account is active and as needed to provide the service, then for a limited period to meet legal, accounting, and security obligations. You can ask us to delete your data as described above; some records may be retained where the law requires.
Security
We protect personal information with encryption, access controls, and other safeguards described on our Security page. No system is perfectly secure, but we work hard to keep your data safe.
Children’s privacy
CharityIQ is a business tool intended for adults working at nonprofits and is not directed to children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal information, contact us and we will delete it.
Third-party links
Our site and content may link to third-party sites (for example, funders or government pages). We are not responsible for their privacy practices; review their policies before providing information.
Changes to this policy
We may update this policy from time to time. We will post the new version here and update the “Last updated” date; material changes will be communicated where appropriate.
Contact us
Privacy questions or requests: privacy@charityiq.us. CharityIQ is a product of CIQ Technologies Ltd, a company registered in England and Wales (company no. 17338776), registered office 82a James Carter Road, Mildenhall, Bury St Edmunds, England, IP28 7DE.