We keep what you give us: your organization's details, your statements and budgets, the files you upload, your grant work, and your team's names and emails.
We use it to run WhatIF for you. We never sell it, and it is never used to train AI.
Admins can download all of it at any time (Settings > Data & activity) and see who changed what.
Deleting a document erases its file right away. Deleting your organization removes its records and files right away. Backup copies are kept for 30 days, then they are gone.
Analytics run only if you allow them.
Services that handle your data
Base44: runs WhatIF: it stores your records and handles sign-in. It also keeps basic counts of app use (pages opened, time in the app) to run the service.
Cloudflare R2: stores the files you upload, privately and encrypted. Deleting a document erases its file.
Anthropic (Claude): reads your numbers to write analysis and reports. Never used to train AI.
Intuit QuickBooks: only if you connect it. WhatIF reads from it and never writes to it.
Supabase: holds the nightly backups (30 days) and the public IRS and funder data behind grant search.
Stripe: takes payments. Your card number never reaches WhatIF.
Resend: sends WhatIF's emails.
U.S. Census Bureau: answers Demographics lookups. Only the ZIP codes you enter are sent.
Tally: shows the feedback form when you open it.
Google Analytics and PostHog: only if you allow them (below). They never record what you type.
Your analytics choice
Asked once for each person on each device. Change it here at any time.