eGrantet
Last updated: October 2026
eGrantet is a municipal grants and subsidies platform. This policy describes what personal data the platform actually collects, why it is collected, and how you can exercise your privacy rights. It is based on the real implementation of eGrantet — not on generic template text.
The data controller is the organization operating this eGrantet deployment — typically the municipality or public body publishing the grants. That operator decides which grant programmes exist and which staff may review applications.
eGrantet itself does not sell personal data and does not use your data for advertising.
Account data: your full name, email address, and sign-in credentials (managed securely by Supabase Auth). Business accounts additionally store the business NUI and the business details fetched from the ARBK registry for that number.
Application data: the answers, budget figures, project descriptions, and other information you type into grant applications, together with application statuses and decision outcomes.
Documents: the files you upload (PDF, PNG, or JPEG, up to 10 MB each), stored privately and linked to your application or business profile.
Operational data: notification preferences, notification language, audit events (who did what and when), and your cookie-consent choice.
Your data is used only to operate the grant lifecycle: creating accounts, publishing and discovering grants, submitting and reviewing applications, verifying eligibility with deterministic rules, assisting reviewers with AI, notifying you about status changes and decisions, and keeping a server-side audit trail of important actions.
AI assistance (application summaries, document analysis) processes the application data you submitted. AI output is advisory only — funding decisions are always made by authorized humans.
Data is stored in Supabase (PostgreSQL database, authentication, and private file storage). Transactional emails are sent through Resend to your account email address. Fonts are delivered by Google Fonts when pages load.
Access is strictly scoped: applicants see only their own applications and documents; municipal employees see only applications for grants of municipalities they belong to; evaluators see only applications explicitly assigned to them; platform administrators see platform-wide data needed to operate the service.
Documents are kept in a private storage bucket and are never served through public URLs — access uses short-lived signed links after an authorization check.
Account, application, document, and audit records are kept while your account is active and for as long as the operating municipality must preserve grant records under applicable archiving rules. No fixed platform-wide retention period is currently defined in the software.
You may update your profile name and notification preferences in account settings at any time. To request correction or deletion of your data, contact the operator that published the grant you applied to.
Essential cookies keep you signed in and the platform secure — the site cannot work without them. Preference storage remembers your language and light/dark theme on your device. eGrantet loads no analytics, advertising, or tracking scripts.
Your consent choice is stored on your device. You can change it at any time with the “Cookie preferences” link in the footer.
You have the right to access the personal data held about you, to have inaccurate data corrected, and to request deletion where no legal archiving duty requires continued storage. To make a request, use your account settings or contact the operator of the grants you applied to, identifying your account email.
eGrantet enforces authentication and authorization on the server for every sensitive operation, scopes database access with row-level security, validates uploads by type and size, and returns only safe error messages to users. Even so, no internet service can promise absolute security — protect your password and sign out on shared devices.