Privacy policy
Effective October 13, 2026. Updated October 16, 2026 (added Cloudflare Turnstile).
The Nonprofit Audit (“we”, “us”) is a web app at thenonprofitaudit.com that helps nonprofit grants and finance teams track grants and the accounting behind them. This policy explains what information we collect, how we use it, and the choices you have.
What we collect
- Waitlist details. Your email address, and anything else you choose to add: your name, organization, role, budget range, number of grants and how you track them today.
- Account information. Your name and email address. If you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password or any other Google data.
- Your organization’s data. What you and your teammates upload or enter: grant agreements and amendments, award terms, budgets, deadlines, general ledger and payment exports, auditor request lists and notes.
- Basic usage information. Standard technical information such as browser type and the pages you open, used to keep the app working and secure.
How we use it
- To run the app for your organization: reading agreements, tracking deadlines, comparing spending to budgets and preparing schedules.
- To send the emails you’d expect: sign-in and account emails, invitations, deadline reminders and digests your organization turns on, and waitlist updates.
- To support you, fix problems and improve the product.
We do not sell your information, and we do not use your organization’s financial data for advertising.
Reading agreements with AI
When you upload an agreement, its text is sent to an AI model to pull out the terms (amount, dates, conditions, budget and requirements). The results are shown to you to check before anything is used. Files are processed only to provide this feature.
Who can see your data
- Your organization. Only people your organization invites can see its data, and their role decides which pages they see. Each organization’s data is kept separate.
- Service providers. The app is hosted on Base44, which stores the data and sends email for us, and uses AI providers to read uploaded agreements. Cloudflare Turnstile checks that the waitlist form is filled in by a person rather than a bot; for that check it sees your browser and network details (such as your IP address), not what you type. They process data only to provide those services.
- If the law requires it. We may disclose information when required by law or to protect the security of the service.
Security
Data is sent over encrypted connections. Uploaded agreements are stored privately and opened with short-lived links. Access to each organization’s records is limited to its own members. No system is perfectly secure, so please tell us right away if you think something is wrong.
Keeping and deleting data
We keep your organization’s data while its account is active. You can delete grants, files and drafts in the app at any time. To delete your account, your organization’s data or your waitlist entry, email yourfriend@thenonprofitaudit.com and we’ll do it within 30 days.
Cookies and local storage
The app stores a sign-in token in your browser so you stay signed in, and remembers a few preferences. We don’t use advertising cookies.
Children
The app is for organizations and their staff. It is not directed to children under 13, and we don’t knowingly collect their information.
Changes
If we change this policy in a meaningful way, we’ll update the date above and let account holders know by email.
Contact
Questions or requests: yourfriend@thenonprofitaudit.com