Policy

Privacy Notice

How we collect, use, share, retain, and protect information when you use our website, forms, programs, and client portal.

Effective date: August 3, 2026
Last updated: September 1, 2026

Community Funding & Grant Solutions, Inc. ("CFGS," "we," "us," or "our") is a Tennessee nonprofit corporation. This Privacy Notice explains how we handle personal information in connection with cfgsolutions.org, our public forms, events and educational resources, grant-readiness services, and the CFGS client portal (collectively, the "Services").

Information we collect

Information you submit directly. Depending on how you use the Services, we may collect your name, email address, telephone number, organization name, role, mailing address, website, focus area, event selection, messages, and descriptions of your organization's funding or capacity needs.

Application and client-portal information. If you apply or become a client, we may collect account and profile information; organization, governance, tax, and eligibility information; readiness-assessment responses; project plans; budgets and financial-status information; messages and approvals; and documents you choose to upload. Uploaded documents may contain additional information about your organization, personnel, clients, or programs. Please provide only information that is relevant and that you are authorized to share.

Transaction information. When a payment or program-service contribution is involved, we may receive a reference number, amount, status, and related accounting information. Payment credentials are handled by the applicable payment provider and are not entered on our public website.

Technical information. Our website, hosting provider, and security systems may process IP address, browser and device information, request timestamps, requested pages or endpoints, referring page, request identifiers, and security or error metadata. Our application logs are designed not to record submitted form bodies, passwords, tokens, or document contents.

Consented business-profile information. When you submit a form and separately authorize business-profile enrichment, we may supplement the submission with organization-level information from official organization websites, licensed data providers, or platform-authorized APIs. This may include the organization’s public website, official social-media pages, public business telephone number, service area, mission, programs, industry, and the submitted contact’s publicly stated organizational role. We do not use this permission to identify anonymous visitors, fingerprint devices, scrape private or personal social profiles, or infer sensitive personal characteristics.

How we collect information

We collect information from you, from an authorized representative of your organization, through your use of the Services, and from service providers that support our program operations. We may also receive updated workflow, accounting, storage, or delivery status from systems connected to the client portal.

How we use information

We use information to:

  • respond to inquiries and provide requested resources;
  • review applications, assess eligibility and readiness, and administer programs;
  • create and secure portal accounts and authenticate users;
  • deliver workshops, technical assistance, project materials, and client communications;
  • conduct consented, organization-level lead research and human-reviewed outreach;
  • process and reconcile authorized transactions and maintain organizational records;
  • operate, troubleshoot, secure, and improve the Services;
  • prevent spam, fraud, misuse, and security incidents; and
  • comply with legal, accounting, audit, and reporting obligations.

Cookies and local storage

The website uses browser local storage to remember your privacy choice. The key cookies_status records whether optional storage was accepted, partially accepted, or denied, and cookies_preferences records the selected categories. This consent storage is necessary to remember and honor your choice.

If you enable Analytics, CFGS records first-party events such as page views, selected calls to action, form milestones, same-site referrer paths, campaign parameters, and a random browser-session identifier. The analytics record does not include the name, email address, form contents, IP address, or browser user-agent string. Analytics attribution and the session identifier use session storage and expire when the browser session ends. CFGS does not deploy third-party advertising trackers.

You may review or change your choice at any time by selecting Cookie preferences in the website footer. Disabling Analytics stops new analytics events. Blocking browser storage may cause the preference panel to appear again on a later visit.

How we share information

We may disclose information to service providers and professional advisers that need it to perform services for CFGS, subject to appropriate access and confidentiality controls. Depending on the Services in use, these providers may support:

  • website and API hosting, content delivery, and font delivery;
  • customer-relationship and application workflow management;
  • consented organization-level business-data enrichment through licensed providers or platform-authorized APIs;
  • transactional email and program communications;
  • private document storage and security or malware scanning;
  • AI-assisted drafting, document analysis, and portal assistance when you request those features, which may involve transmitting relevant organization records, project information, prompts, and extracted document text to the configured AI service provider;
  • payment processing and accounting;
  • information security, technical support, auditing, legal, and compliance services.

We may also disclose information when required by law; to protect the rights, safety, or security of CFGS, our users, or others; in connection with a reorganization or transfer of program operations; or with your direction or consent.

No sale or targeted advertising

CFGS does not sell personal information for money and does not use personal information for cross-context behavioral or targeted advertising. With your separate permission, CFGS may use information you submitted and approved organization-level enrichment for its own email, telephone, or social-media outreach. Each outreach channel is governed by the consent and suppression status recorded for that contact.

Business-profile enrichment and campaign review

Business-profile enrichment begins only after a person submits a CFGS form and affirmatively selects the separate enrichment permission. Enrichment requests are routed to the restricted AI Lead Generator workspace with the source, retrieval date, confidence, consent version, and review status. Information is not campaign eligible until a person authorized by CFGS reviews the record. CFGS agents may draft or prioritize outreach but may not override consent, suppression, channel, frequency, or human-review controls.

CFGS does not authorize automated collection from a platform that prohibits it. We do not store complete social profiles. We retain approved organization facts and their source links, and we provide a privacy-request process for access, correction, deletion, objection, or withdrawal of consent.

Data retention

We retain information only as long as reasonably necessary for the purposes described in this Notice, including program administration, client service, security, dispute resolution, and legal, grant, audit, tax, and accounting obligations. First-party analytics events are automatically deleted after 400 days. Unapproved or unconverted business-enrichment records are reviewed for deletion after 90 days unless there is documented consent, an active relationship, or another approved retention reason. Other retention periods vary by record type and relationship. When information is no longer needed, we take reasonable steps to delete, de-identify, or securely dispose of it, subject to backup cycles and legal holds.

Security

We use administrative, technical, and organizational safeguards designed to protect information. These include encrypted connections, access controls, password hashing, short-lived authenticated sessions, request and file-size limits, rate limiting, private document storage, security headers, and restricted logging. No system can guarantee absolute security. Please do not send confidential documents, financial records, passwords, or account credentials through public forms or ordinary email; use the secure client portal when instructed.

Your privacy choices and rights

Depending on where you live and applicable law, you may have the right to request access to, correction of, or deletion of personal information; receive a portable copy; restrict or object to certain processing; withdraw consent; or appeal a decision on a request. You may change optional cookie preferences at any time through the footer link.

To submit a privacy request, email info@cfgsolutions.org with the subject "Privacy Request" or write to the address below. Describe the request and your relationship with CFGS. We may need to verify your identity or authority before acting. We will respond as required by applicable law. Authorized agents may submit requests where permitted by law.

Children's privacy

The Services are intended for organizations and adults acting on their behalf, not for children under 13. We do not knowingly collect personal information directly from children under 13 through the Services. If you believe a child has provided information to us, please contact us so we can review and address it.

Processing in the United States

CFGS is based in the United States, and information may be processed and stored in the United States. If you access the Services from another jurisdiction, its data-protection laws may differ from those where you live.

Changes to this Notice

We may update this Notice to reflect changes in our practices, technology, Services, or legal obligations. We will post the revised Notice here and update the date above. If a change materially affects how we use previously collected information, we will provide additional notice or seek consent when required.

Contact us

Community Funding & Grant Solutions, Inc.
501 Union St Ste 545
Nashville, Tennessee 37219
info@cfgsolutions.org