Overview
CityInsites is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Information We Collect
Account Information
- Name and email address
- Organization and city affiliation
- Role and access permissions
Usage Data
- Login and session information
- Features accessed and reports generated
- IP addresses and browser information (for security)
Grant Application Data
- Tracked grant opportunities
- Application status and notes
- Deadline and submission tracking
How We Use Your Data
- Service Delivery: To provide budget analysis, grant matching, and reporting features
- Account Management: To authenticate users and manage access permissions
- Security: To monitor for unauthorized access and protect your data
- Communications: To send password resets and account notifications
- Improvement: To enhance our platform based on usage patterns
Your Privacy Rights
Under GDPR and CCPA, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Data Portability
Receive your data in a machine-readable format
Right to Object
Object to processing of your personal data
Right to Restrict Processing
Request limitation of how we process your data
Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. After account deletion:
- Personal data is deleted within 30 days
- Anonymized audit logs may be retained for security purposes
- Backup data is purged within 90 days
Data Security
- Password hashing using industry-standard algorithms
- HTTPS encryption for all data transmission
- CSRF protection on all forms
- Session timeout after 30 minutes of inactivity
- Role-based access control
- Comprehensive audit logging
CCPA-Specific Disclosures
California residents have additional rights under CCPA:
- Right to Know: What personal information is collected and how it's used
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: We do not sell personal information
- Non-Discrimination: Equal service regardless of exercising privacy rights
We do not sell your personal information.
Need to Exercise Your Rights?
Log in to your account to access data export and deletion options, or contact us for assistance.
Log In
Contact Us
For privacy-related inquiries or to exercise your rights, please contact:
Email: privacy@cityinsites.com
Response Time: We respond to all privacy requests within 30 days
← Back to Home
Last updated: January 2026