Who this covers
This policy covers SearchGrants.eu — the site you are reading, and any chatbot you use on it. Questions, and any request to see, correct or delete what is held about you, go through the contact form.
What is collected
Your conversations. What you ask a bot, and what it answers, is stored so the conversation can be continued, exported or deleted. A conversation belongs to the account that holds it.
Your account, if you have one. An email address, a name if you give one, and the team you belong to. You can use a public bot without an account.
Usage counts. How many requests and tokens a team has spent, for billing and limits. These are kept for 90 days and then deleted.
Errors. When something breaks, a stack trace is sent to an error monitoring service. IP addresses and request contents are deliberately excluded from those reports.
Who it is shared with
To answer a question, the text of the conversation is sent to the model provider configured for that bot — OpenAI, Anthropic, Mistral or Google — and, where the bot searches, to the search sources its operator chose. Nothing is sold, and nothing is shared for advertising.
Two services sit in front of the site itself: a hosting provider in the EU, and Cloudflare, which terminates TLS and runs the “are you human” check on forms. Both see the request in the ordinary course of delivering it.
Every third party involved, what it does and where it sits, is listed at /pages/subprocessors.
Fonts, and why they are here
Typefaces are served from this domain rather than from a font service. A hotlinked webfont would transmit your IP address to a third party on every page load, which is exactly the kind of transfer this section exists to avoid.
How long it is kept
Conversations stay until they are deleted — by you, or by the team that holds them. Usage counts are pruned after 90 days. Accounts are removed on request.
Your rights
Under the GDPR you can ask for a copy of your data, ask for it to be corrected or erased, object to how it is used, and complain to your national data protection authority. Send the request through the contact form and it is handled from there.
What is stored on your device, and what you can refuse, is set out in the cookie policy.
