Privacy Policy

    Effective Date: September 22, 2026

    SciRise, Inc. ("SciRise," "we," "us," or "our") provides a capital intelligence platform for mission-driven organizations at scirise.ai (the "Service"). This Privacy Policy explains what information we collect when you visit our website or use the Service, how we use and share it, how long we keep it, and the choices you have.

    1. Information We Collect

    1.1 Account Information

    When you create an account, we collect:

    • Your first and last name and email address (your email is your login)
    • The organization you select from our directory
    • Your password, which is stored by our authentication provider in hashed form. We cannot see it.
    • If you sign in with Google: the name, email address, and profile photo link that Google shares with us
    • Your subscription or trial status, and any invitation or trial code you used

    1.2 Information You Send Us Through Forms

    You can send us information without creating an account:

    • Demo, contact, sales, and support requests: name, email address, organization, role, and your message.
    • SciRise Reports downloads: name, email address, and organization. We email the report to you and remember in your browser for 12 hours that you have already filled in the form.
    • Report commissions and press inquiries: name, email address, organization, and the details you provide.
    • Newsletter sign-up: name and email address.

    We keep these submissions in our contact records so we can respond, send what you asked for, and follow up about SciRise.

    1.3 Live Chat

    Our website includes a chat window provided by Tawk.to. If you use it, Tawk.to collects the messages you send and any name or email address you enter. Tawk.to also collects technical information about your visit, such as your IP address, browser, and the page you are on, even if you do not start a chat.

    1.4 Content You Create

    When you use the Service, we store what you create, including:

    • Workspaces, including their names, intended use, and any thesis or description you write
    • Questions you type into the Service to request an analysis
    • Funders you save, and organizations you add to or exclude from an analysis
    • Analyses and reports the Service produces for you, and the files you export

    1.5 Usage Information

    We collect information about how the website and Service are used:

    • Activity in your account: the features and pages you use, the organizations you view, the text of searches you run, analyses you run or export, the times you sign in, and requests made through a connected AI assistant (see Section 5).
    • Searches by visitors who are not signed in: the search text and a temporary session identifier, not linked to a name or email address.
    • Server logs: the pages and data requested, the time, and the result. For requests that look like abuse or unauthorized access attempts, we also log the IP address and browser.
    • Google Analytics 4: page views, clicks on certain buttons and links, and general information about your browser and device. Google Analytics does not receive your name or email address from us. You can opt out with the Google Analytics Opt-out Browser Add-on.

    1.6 Emails

    We keep a copy of each email the Service sends you, including its content and the date it was sent, so we can confirm what was sent and resolve delivery problems.

    1.7 Cookies and Browser Storage

    • Sign-in cookie (scirise.sid): keeps you signed in for up to 7 days. Required.
    • Security cookie (XSRF-TOKEN): protects forms against cross-site request forgery. Expires after 12 hours. Required.
    • Google Analytics cookies (_ga and related): measure how the website is used.
    • Tawk.to cookies and storage: run the chat window and remember your chat.
    • Browser storage: remembers interface settings, recent results to speed up pages, and your SciRise Reports download pass. We do not keep sign-in credentials in browser storage.

    The Service does not currently respond to "Do Not Track" or Global Privacy Control browser signals. We do not sell personal information or use it for targeted advertising, which are the activities those signals are designed to opt out of.

    1.8 Information We Do Not Collect

    We do not collect or store payment card numbers (our payment processor handles them), protected health information, student education records, or personal government identification numbers such as Social Security numbers. We do use organizations' Employer Identification Numbers (EINs), which are public identifiers for organizations.

    2. How We Use Information

    • To create and manage your account and confirm your identity
    • To provide the Service, including funder mapping, peer benchmarking, due diligence and prospect analyses, network views, and exports
    • To run the AI-assisted features described in Section 3
    • To send service emails, such as email verification, password resets, report deliveries, and responses to your requests
    • To send marketing emails, such as our newsletter and follow-up after a demo, trial, or report request. Every marketing email includes an unsubscribe link.
    • To respond to support requests and chats
    • To manage subscriptions and trials, enforce usage limits, prevent abuse, and keep the Service secure
    • To understand which features are used so we can improve the Service
    • To comply with the law

    We do not sell personal information, and we do not use it for targeted advertising.

    3. AI-Assisted Features

    Funder rankings, benchmarks, and figures in the Service are calculated from public records without AI. We use OpenAI's models for these features:

    • Understanding your requests: when you type a question, it is sent to OpenAI to choose which analysis to run.
    • Finding related organizations: when you write a workspace thesis, its text is sent to OpenAI to find organizations with similar descriptions.
    • Written summaries: your organization's name, the options you chose, and the calculated results are sent to OpenAI to write the summaries and memos that accompany analyses.

    OpenAI does not use data sent through its API to train its models. OpenAI may keep this data for a limited period under its API data policies, including for abuse monitoring. We save AI-generated results with your analyses.

    4. Service Providers and Other Disclosures

    We share information with these providers only as needed to run the Service:

    • Supabase: hosts our database (accounts, content, sign-in sessions, activity records, and contact records) and runs sign-in, including Google sign-in.
    • Railway: runs our application servers and background job queue, and receives server logs.
    • OpenAI: AI-assisted features, as described in Section 3.
    • SendGrid (Twilio): delivers our emails. We turn off SendGrid's open and click tracking.
    • Stripe: processes subscription payments. Stripe receives your email address and billing details. We never receive your full card number.
    • Google: Google Analytics (Section 1.5), and Google sign-in if you choose it.
    • Tawk.to: the website chat window (Section 1.3).
    • d3js.org: serves charting code used on network pages. Like any website you load content from, it receives your IP address and browser information.
    • AI assistants you connect: see Section 5.

    We may also disclose information when required by law or legal process, to protect the rights, property, or safety of SciRise, our users, or others, or as part of a merger, acquisition, financing, or sale of assets, in which case this Policy will continue to apply to the information transferred.

    5. Connecting an AI Assistant

    For accounts where we have enabled it, you can connect an AI assistant, such as Anthropic's Claude, to your SciRise account. When you connect, a consent screen shows what the assistant will receive: your name and email address. Once connected, the assistant can look up organizations and run and read analyses in your account on your behalf. We record which of these actions the assistant performs and the organizations or analyses involved. We do not receive or store what you type into the assistant. The assistant's provider handles your data under its own terms and privacy policy. To disconnect, remove SciRise from the assistant's connector settings, or contact us and we will revoke access.

    6. Public Records on the Platform

    The Service displays information about funders, grant recipients, grants, federal awards, and organizational leadership. This information comes from public records, including IRS Forms 990 and 990-PF, federal award and contract records, international development funding records, and related audit disclosures. It is not collected from users of the Service.

    These records name individuals, such as officers, directors, key employees, and foundation contacts, and can include their titles, pay, and the contact details a foundation lists for grant applications. These individuals are generally not users of the Service.

    If you are named in these records and want to ask us to hide or correct information displayed about you, email support@scirise.ai. We will review your request and respond within 30 days.

    7. Data Security

    • All traffic to the Service is encrypted with HTTPS
    • Passwords are stored in hashed form
    • Sign-in cookies cannot be read by page scripts, and forms are protected against cross-site request forgery
    • Sign-in and other sensitive endpoints are rate-limited
    • Your content is available only to your account and to SciRise staff who need it to run the Service

    No system is completely secure. If a security incident affects your personal information, we will notify you as required by law.

    8. How Long We Keep Information

    • Account information, your content, activity records, sign-in records, and copies of emails sent to you: kept while your account is open, and deleted when your account is deleted.
    • Form submissions and contact records: kept until you ask us to delete them. If you unsubscribe, we keep your email address on a do-not-email list so we can honor that choice.
    • Sign-in sessions: expire after 7 days.
    • Searches by visitors who are not signed in: kept in a form not linked to a name or email address.
    • Google Analytics and Tawk.to data: kept under those providers' retention settings.

    When we delete an account, we remove it from our active systems within 30 days of confirming the request. We may keep limited records where the law requires it, such as billing records, or to resolve disputes and prevent abuse.

    9. Your Choices and Rights

    • Access and copy: ask for a copy of the personal information we hold about you. You can also export your analyses from the Service.
    • Correction: update your name on your profile page, or ask us to correct other information.
    • Deletion: ask us to delete your account or your contact records by emailing support@scirise.ai.
    • Marketing emails: use the unsubscribe link in any marketing email, or email us. You will still receive service emails, such as password resets.
    • Analytics: use the Google Analytics opt-out add-on linked in Section 1.5.
    • AI assistants: disconnect at any time, as described in Section 5.

    Some U.S. states give residents specific privacy rights, such as rights to access, correct, delete, and obtain a copy of personal information. We honor these requests from all users, wherever they live. To make a request, email support@scirise.ai from the email address on your account or submission. We may need to confirm your identity first. We will respond within 30 days. If we decline a request, you can appeal by replying to our response. We will not treat you differently for exercising your rights.

    10. Information the Service Is Not Designed For

    The Service is not designed to hold information regulated by FERPA, HIPAA, GLBA, or similar laws. Please do not enter student records, health information, or personal financial account information into the Service.

    11. International Users

    SciRise is based in the United States, and your information is stored and processed in the United States. If you use the Service from another country, your information will be transferred to the United States. Our service providers may also process information in other countries.

    12. Children

    The Service is for professionals and is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

    13. Changes to This Policy

    We may update this Privacy Policy. We will post the new version on this page with a new effective date. If we make a material change, we will notify account holders by email or through a notice in the Service before the change takes effect.

    14. Contact Us

    For privacy questions or requests, email support@scirise.ai or write to SciRise, Inc., 3600 North Duke St, STE 1 #1009, Durham, NC 27704.

    Questions?