Privacy policy

Last reviewed: May 2026

Who we are

togrant.com is operated by Radical Fanatics (Updoo Apps B.V.), registered in the Netherlands. Contact: team@fanatics.nl.

What data we collect

On the marketing site (www.togrant.com): only what you submit on the contact form (name, organisation, email, optional Odoo version, your message). We also collect anonymised, cookieless analytics via Cloudflare Web Analytics — page views and country, no personal identifiers.

In the application (my.togrant.com): account-level data your organisation entered (users, donors, applications, grants, projects, budgets). We process it on behalf of your organisation as a data processor under GDPR.

Where data lives

All customer data is stored in Cloudflare's EU region — D1 databases and R2 object storage. Email is sent via SMTP2GO. No data leaves the EU except as needed to deliver email to recipients outside the EU.

What we don't do

• We don't sell your data. Ever.
• We don't share data with advertisers, brokers or analytics services beyond Cloudflare's cookieless web analytics.
• We don't track you across sites. No third-party cookies. No fingerprinting.
• We don't email you marketing material unless you explicitly opt in.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing team@fanatics.nl. We respond within 30 days. If you're unhappy with how we handle your request, you can complain to the Dutch DPA (Autoriteit Persoonsgegevens).

Retention

• Contact-form submissions: 24 months, then deleted.
• Customer data in the app: as long as you're a customer + 90 days after termination, then deleted (full export available on request).
• Sync logs: 90 days rolling.
• Server access logs: 30 days.

Cookies

On the marketing site (www.togrant.com): no cookies. On the application (my.togrant.com): a single first-party session cookie to keep you signed in. Both HttpOnly and Secure; SameSite=Lax. No third-party cookies anywhere.

Changes

We update this page when something material changes and note the last-reviewed date at the top. Material changes to processing of customer data trigger an email notification.