This Privacy Policy explains how Grantify (“Grantify,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with the Grantify platform at https://grantify.ae and related services (the “Platform”).

Grantify is a marketplace that helps students discover and receive scholarship offers from universities, with schools and counselors acting as trusted intermediaries on the student's side, and an internal admin team operating the Platform.

Note on young users. Many students on Grantify are minors. Please read Section 8 (Children's & Students' Data) carefully.If you are a parent, legal guardian, or school official, that section explains how a student's information is handled and how consent works.

a. Information you (or your school/counselor) provide

• Account & identity: Name, email, phone, password, role, and for students: Photo, nationality, graduation year.
• Application data (three sections — About You, Future Pathways, Academic Journey): Academic history, grades/GPA, test scores, program preferences, and free-text responses.
• Verification documents: E.g. School/bachelor transcripts, language-proficiency and equivalence-test results, and passport. Some of these are sensitive/special-category data (see Section 3).
• Communications: Messages you send in monitored chats, support tickets, scheduling/meeting details, and feedback.
• For universities/schools: Institutional profile details, program catalogs, scholarship configurations, and representative/counselor account details.

b. Information created about you as you use the Platform

• Application completeness and activity (last active, tasks, shortlists, offers received).
• Grantify score — a per-university match score derived from academics, verified documents, and preferred programs (see Section 6 on automated processing).
• Verification outcomes from our AI-first document checks.

c. Information collected automatically

• Device/browser data, IP address, log data, and cookies/similar technologies (see our Cookie Notice).

d. How students' data can enter the Platform

Student data may be entered by the student directly, imported by a school (e.g. via Excel/CSV or invite), or entered by a counselor acting on the student's behalf. When a counselor starts or fills a student's application, that action is logged in the student's activity timeline, and the student retains access to their own account.

Some data we process is sensitive under GDPR (Art. 9) and/or “sensitive personal information” under CCPA/CPRA — for example passport/government-ID information, nationality (which may reveal racial or ethnic origin), and detailed education records. This includes sensitive data about students who are minors.

We process this data only to operate scholarship matching, verification, and eligibility, and:

• under GDPR, we rely on the data subject's explicit consent as our Article 9 condition (Art. 9(2)(a)). Where the student is a minor, that consent is given or authorized by a parent, legal guardian, or authorized school official, as described in Section 8;
• under CCPA/CPRA, we limit its use to purposes permitted by law and honor your right to limit its use (see our “Limit the Use of My Personal Data” notice).

DECISION: We have set explicit consent (Art. 9(2)(a)) as the Art. 9 condition, because it is the realistic basis for a scholarship platform collecting passports, nationality, and transcripts, including from minors. Confirm this with counsel, and confirm how consent is captured for minors (direct parental/guardian consent vs. school-obtained consent).

We use personal information to:

• create and manage accounts and applications;
• verify submitted documents (AI-first, with manual admin fallback);
• compute the Grantify score and rank/recommend candidates to universities;
• power Discover Students, catalog visibility, offers, and negotiation;
• enable and monitor communications for safety and compliance (see Section 7);
• provide school/counselor case-management tools and reminders/tasks;
• send service messages and, where permitted, marketing;
• maintain security, prevent fraud/abuse, and protect minors;
• comply with legal obligations and enforce our Terms.

You can withdraw consent at any time without affecting prior processing.

Grantify uses automated processing in two ways you should know about:

• The Grantify score — an automated, per-university match/ranking score built from academics, verified documents, and program preferences. It influences how visible you are to universities and how you are ranked in Discover Students.
• AI-first document verification — documents are first assessed by automated systems; cases the system cannot confidently decide are routed to human admin review.

Your rights (GDPR Art. 22). Where a decision producing legal or similarly significant effects is based solely on automated processing, you have the right to obtain human intervention, to express your point of view, and to contest the decision . To exercise this, contact privacy@grantify.ae. Note that final scholarship and admission decisions are made by universities, not by Grantify's automated systems.

Chats on Grantify are monitored. This includes student↔university conversations (which are university-initiated and unlock only after an offer) and student↔counselor conversations. We monitor to protect users — especially minors — detect misconduct, and comply with law. Do not share information in chat that you do not want reviewed for safety and compliance. Contact details are hidden from universities until an offer is sent.

Protecting young users is central to Grantify's design.

• Age. You must be at least 14 to create your own account. Students under the age of digital consent (16 where GDPR applies; 13 under COPPA in the US) may use Grantify only with the consent and involvement of a parent, legal guardian, or authorized school official, as described below.
• School as intermediary. Where a school imports or manages a student, the school confirms it has the authority and any required parental consent to provide that student's information to Grantify for scholarship purposes. Schools and counselors act as trusted adults on the student's side and are institutionally separate from the universities recruiting the student.
• Education records (FERPA). Where transcripts or other education records are shared through a school, that sharing is subject to applicable education-privacy law.
• What universities can see. During discovery, universities see a student's profile, Grantify score, academics, preferences, name, photo, and nationality, but not reachable contact details (email, phone, address) until the university sends an offer.
• Parental rights. Parents/guardians may request access to, correction of, or deletion of a child's data, and may withdraw consent, by contacting privacy@grantify.ae. We will verify authority before acting.
• No sale/share of minors' data without opt-in. We do not “sell” or “share” (as defined by CCPA/CPRA) the personal information of users under 16 without the required opt-in consent.

If you believe a child's data has been collected without proper consent, contact privacy@grantify.ae and we will investigate and delete it where required

We share personal information with:

• Universities / representatives — student profiles, scores, and (after an offer) contact details, so they can recruit and communicate. Universities are bound by an institutional agreement.
• Schools / counselors — data about their assigned students, for guidance and case management.
• Service providers / processors — e.g. hosting, email delivery, push notifications, and analytics providers that support the Platform. See our current sub-processors in Section 15.
• Authorities — where required by law, to protect users (including minors), or to enforce our Terms.
• Corporate transactions — in a merger, acquisition, or asset sale, subject to this policy.

For some processing, universities and schools act as independent or joint controllers of the data they provide or receive; where that is the case, their own privacy notices also apply to their handling of the data.

We do not sell personal information for money. Whether certain disclosures (e.g. to universities, or advertising cookies) qualify as a “sale” or “share” under CCPA/CPRA is addressed in our “Do Not Sell or Share My Personal Information” notice.

Because universities and service providers may be located in other countries, your information may be transferred internationally. Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses, the UK IDTA/Addendum, and adequacy decisions. Contact privacy@grantify.ae for a copy of the relevant safeguards.

We keep personal information for as long as your account is active and as needed for the purposes above. If your account becomes inactive, we delete or anonymize your personal information after 24 months of inactivity, unless a longer retention period is required by law (for example, to keep certain records or resolve disputes). Verification documents (such as transcripts and passport data) are retained only as long as needed for verification and record-keeping, and are then deleted or anonymized.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing; to withdraw consent; to opt out of sale/sharing; to limit use of sensitive data; and to not be subject to solely automated decisions with significant effects (Section 6). US-state residents also have the right to be free from discrimination for exercising these rights.

To exercise any right, contact privacy@grantify.ae or use our Privacy Preferences center. We will verify your identity (and, for minors, the requester's authority) before responding. You may authorize an agent to act for you. EU/UK users may also lodge a complaint with the data-protection supervisory authority in their country of residence or work.

We use technical and organizational measures to protect personal information, described in our Security page. No system is perfectly secure; please use a strong, unique password and report concerns to privacy@grantify.ae.

We may update this policy. Material changes will be notified via the Platform or email, and the “Last updated” date will change.

We use the third-party processors below to operate the Platform. We keep this list current; where required, we will notify you of material additions or changes before they take effect.

Because these providers may process data outside your country, the safeguards described in Section 10 (International transfers) apply.

Last updated: July 8, 2026

This disclaimer governs your use of the Grantify platform at https://grantify.ae (the “Platform”), operated by Grantify (“Grantify,” “we,” “us”). By using the Platform you accept it. It should be read together with our Terms of Use and Privacy Policy.

Grantify connects students with universities and their representatives . We are not a university, a school, a government body, an educational agent, or an admissions authority. We do not award scholarships, admit students, or guarantee any outcome. All admission, eligibility, and scholarship-award decisions are made by the universities themselves.

An offer sent through Grantify opens contact and a monitored conversation between a student and a university. An offer is not a binding contract, an admission guarantee, or a promise of funding. Offers may change during negotiation, and a scholarship or place is only realized when the relevant university confirms enrollment through its own processes (“Uni Confirm”). Students may hold multiple offers at once; “pending” is a normal state during negotiation.

We do not warrant that using Grantify will result in any offer, scholarship, admission, or funding, or in offers of any particular value. Match scores, “high match” badges, rankings, and recommendations are automated estimates to aid discovery — they are not promises, guarantees, or professional advice, and they do not bind any university.

University profiles, program listings, scholarship tiers, amounts, deadlines, and eligibility rules are provided largely by the universities themselves. We do not independently guarantee their accuracy, completeness, or currency. Verify all material details — especially amounts, deadlines, and eligibility — directly with the university before relying on them. Currency amounts and percentages shown are indicative and subject to the university's terms.

Our document-verification process (AI-first, with human fallback) is designed to support the integrity of the Platform. It is not a certification of authenticity or a substitute for a university's own checks , and a “verified” status does not guarantee acceptance by any institution.

Content on the Platform is for general informational purposes and is not legal, immigration, financial, tax, or professional education-advising advice . Consult a qualified professional for advice specific to your situation, including on visas, financing, and study decisions.

The Platform may contain content from, or links to, third parties (universities, schools, service providers). We do not endorse and are not responsible for third-party content, sites, or conduct.

Messages, feedback, and other content submitted by users are the responsibility of the users who create them and do not represent Grantify's views.

To the fullest extent permitted by law, Grantify is not liable for any indirect, incidental, or consequential loss arising from reliance on the Platform, including lost opportunities, missed deadlines, or decisions made by universities. This does not limit any liability that cannot be excluded by law (for example, certain rights of consumers or minors). Full liability terms are in the Terms of Use.

Questions about this disclaimer: support@grantify.ae · Grantify,

Effective date: July 8, 2026 · Last updated: July 8, 2026

These Terms of Use (“Terms”) are a legal agreement between you and Grantify (“Grantify,” “we,” “us”) governing your use of the Grantify platform at https://grantify.ae and related services (the “Platform”). By creating an account or using the Platform, you agree to these Terms, our Privacy Policy, our Legal Disclaimer, and our Cookie Notice. If you do not agree, do not use the Platform.

The Platform serves four types of users: Students, School users/Counselors, University users/Representatives, and internal Admins.

• Minimum age. You must be at least 14 to create your own account.
• Minors. Because many students are minors, students under the age of digital consent (16 where GDPR applies; 13 under COPPA) may use the Platform only with the consent and involvement of a parent, legal guardian, or authorized school official. By allowing a student to use Grantify, that adult confirms they have authority and any required parental consent.
• Institutional users. If you register for a school or university, you represent that you are authorized to act for that institution and to accept these Terms on its behalf. University accounts are activated only after Grantify verifies the representative and an institutional agreement is in place; representatives cannot self-create university workspaces.

You agree to provide accurate information, keep your credentials confidential, and are responsible for activity under your account. Notify us promptly at support@grantify.ae of any unauthorized use. We may suspend or deactivate accounts (including representative and counselor accounts) to protect users and the integrity of the Platform.

• Students build an application; completeness increases visibility to universities.
• Universities discover students (seeing profile, score, academics, preferences, name, photo, and nationality — but not contact details until an offer is sent), and may send offers.
• Offers are non-binding negotiation-openers. They open a monitored chat and begin negotiation; a scholarship or place is realized only when the university confirms enrollment. Nothing on the Platform guarantees any offer, scholarship, admission, or amount. See the Legal Disclaimer.
• The Grantify score, match badges, and rankings are automated aids, not guarantees.

Counselors may start and complete an application on behalf of an assigned student. Such actions are logged in the student's activity timeline, and the student retains access to their own account. Counselors must act in the student's interest and only with appropriate authority.

Chats on the Platform are monitored for safety, compliance, and the protection of minors. Student↔university chats are university-initiated and unlock after an offer; student↔counselor chats are open two-way. By using these channels you consent to monitoring as described in the Privacy Policy. Do not use chat to harass, deceive, solicit off-platform payments, or contact students outside the intended, monitored flow.

You agree not to:

• provide false, misleading, or fraudulent information, documents, or credentials;
• impersonate any person or institution, or misrepresent your authority;
• attempt to obtain students' hidden contact details or contact minors outside the monitored, offer-gated flow;
• upload malware, scrape, reverse-engineer, or overload the Platform;
• misuse the Platform to harass, exploit, or endanger any user, especially a minor;
• infringe intellectual-property or privacy rights, or violate applicable law. Violations may result in immediate suspension and referral to authorities.

You retain ownership of content you submit (applications, documents, messages, institutional profiles, program data). You grant Grantify a non-exclusive, worldwide license to host, process, display, and share that content as needed to operate the Platform (e.g. showing a student's profile to universities). Universities and schools license their listings to us for display to relevant users. You are responsible for having the rights to any content and documents you upload.

DECISION: State who pays what (e.g. free for students; institutional fees for universities/schools), billing terms, and refund policy — or state that the Platform is free to a given user type. Insert here.

The Platform, including its software, design, and the “Grantify” name and logo, is owned by Grantify and protected by law. Except for the rights expressly granted, we reserve all rights. The referral/profile-points feature is promotional only and confers no functional benefit, ranking effect, or monetary value.

The Platform integrates with third-party services (e.g. hosting, email delivery, push notifications, and analytics) and links to third-party content. We are not responsible for third parties; their terms and privacy notices apply to their services.

You may stop using the Platform and request account deletion at any time (see the Privacy Policy). We may suspend or terminate access if you breach these Terms, to protect users, or as required by law. Sections that by their nature should survive (e.g. IP, disclaimers, liability, governing law) survive termination.

The Platform is provided “as is” and “as available.” To the fullest extent permitted by law, we disclaim all warranties, including merchantability, fitness for a particular purpose, and non-infringement, and we do not warrant any educational, admission, or funding outcome. See the Legal Disclaimer.

To the fullest extent permitted by law, Grantify and its affiliates will not be liable for indirect, incidental, special, or consequential damages, or for lost opportunities, and our total liability for any claim will not exceed the greater of the amount you paid us in the 12 months before the claim or [LIABILITY_CAP, e.g. USD 100] . Nothing in these Terms limits liability that cannot be excluded by law, including certain rights of consumers and protections for minors.

To the extent permitted by law, institutional users (schools and universities) agree to indemnify Grantify against claims arising from their misuse of the Platform, their content, or their handling of students' data in breach of these Terms or law.

These Terms are governed by the laws of UAE, and disputes will be resolved in the courts of Governing laws of UAE, without prejudice to mandatory consumer-protection rights you may have in your country of residence.

DECISION: If you want arbitration and/or a class-action waiver, add it here — note these are restricted or unenforceable in some jurisdictions and against minors.

We may update these Terms. Material changes will be notified via the Platform or email; continued use after changes take effect constitutes acceptance.

support@grantify.ae · Grantify,

Last updated: July 8, 2026

This Cookie Notice explains how Grantify (“Grantify”) uses cookies and similar technologies on https://grantify.ae (the “Platform”). It supplements our Privacy Policy.

Cookies are small files stored on your device. We also use similar technologies (local storage, pixels, SDKs). They help the Platform function, remember preferences, keep you secure, and understand usage.

DECISION: If Grantify uses no advertising/targeting cookies (common for a platform serving minors), delete that row and state “We do not use advertising or cross-context behavioral advertising cookies.” This also affects your CCPA “Do Not Sell or Share” obligations.

The specific cookies we set, their provider, purpose, and duration are listed below. Keep this in sync with your consent-management platform (CMP) scan.

[COOKIE_TABLE]

• Use our cookie banner / Privacy Preferences center to accept, reject, or customize non-essential cookies at any time.
• We honor the Global Privacy Control (GPC) browser signal where required by law.
• You can also block or delete cookies in your browser settings; some features may then not work.

For users under 16, non-essential cookies (especially advertising) are set only where we have the required opt-in consent. See the Privacy Policy, Section 8.

We may update this notice; the “Last updated” date will change. Questions: privacy@grantify.ae.

Last updated: July 8, 2026

This notice is for California residents (and residents of US states with similar laws) under the CCPA/CPRA. It explains your right to opt out of the “sale” or “sharing” of your personal information by Grantify (“Grantify”).

• Grantify does not sell your personal information for money.
• Under the CCPA/CPRA, “sell” and “share” are defined broadly — “share” includes disclosing personal information for cross-context behavioral advertising, even without payment.
• Because we do not sell or share personal information as those terms are defined by the CCPA/CPRA, there is nothing for you to opt out of. We still honor the requests and signals described below.

We do not sell or share the personal information of consumers we know to be under 16 without affirmative authorization: opt-in from the consumer if 13–15, or from a parent/guardian if under 13. Absent that opt-in, no sale/share occurs.

You (or your authorized agent) can opt out of any sale/sharing by:

• Using the “Do Not Sell or Share My Personal Information” link in our footer / Privacy Preferences center; and/or
• Emailing privacy@grantify.ae with the subject “Do Not Sell or Share.”

We honor the Global Privacy Control (GPC) signal as a valid opt-out request for the browser/device that sends it.

We will process your request without requiring an account, will not discriminate against you for exercising it, and will confirm completion. We may need limited information to identify you and, for authorized agents, proof of authorization.

For a description of the categories of personal information we collect and the parties we disclose to (including universities, schools, and service providers), see our Privacy Policy, Sections 2 and 9.

privacy@grantify.ae · Grantify,

Last updated: July 8, 2026

This notice explains the right of California residents (and residents of US states with similar laws) to limit the use and disclosure of sensitive personal information under the CPRA, and how to exercise it with Grantify (“Grantify”).

On Grantify, sensitive personal information may include:

• government identifiers — e.g. passport details;
• information about racial or ethnic origin — which nationality may reveal; and
• depending on content, other categories within your education records and documents.

You can direct us to use and disclose your sensitive personal information only for the purposes permitted by law — such as providing the service you requested (scholarship matching, verification, and eligibility), security, and fraud prevention — and not for other purposes.

Grantify uses sensitive personal information only to operate the Platform (matching, verification, eligibility) and related security/compliance — not to infer characteristics for advertising or to sell it.

Because we already limit our use of sensitive personal information to the purposes permitted under the CPRA, no further action is neededto restrict it — but you may still submit a request and we will confirm our practices.

Sensitive information of users under 16 is handled with heightened protection and is not used or disclosed beyond permitted purposes without the required opt-in consent (see the Privacy Policy, Section 8).

You (or your authorized agent, or a parent/guardian for a minor) can request to limit use by:

• Using the “Limit the Use of My Personal Data” link in our footer / Privacy Preferences center; or
• Emailing privacy@grantify.ae with the subject “Limit Sensitive Data.”

We will not discriminate against you for exercising this right, and we honor recognized opt-out preference signals where applicable.

privacy@grantify.ae · Grantify,

Last updated: July 8, 2026

At Grantify (“Grantify”), protecting personal information — especially students' data and the data of minors — is a core priority. This page describes the safeguards we use. No online service can be completely secure, but we work to reduce risk with layered protections.

• Encryption. We encrypt data in transit (TLS)and at rest using industry-standard methods.
• Access controls. Access to personal data is limited on a least-privilege, need-to-know basis, using role-based permissions. The Platform's authorization is domain-scoped across student, school, university, and admin roles.
• Sensitive documents. Verification documents (transcripts, passports, test results) are handled under restricted access and retained only as long as needed.
• Cross-portal separation. Switching between portals is admin-only and constrained, and administrative actions are logged.

• Communications monitoring. On-platform chats are monitored to detect misconduct and protect users, particularly minors (see the Privacy Policy).
• Activity logging. Sensitive actions — including a counselor operating a student's application — are recorded in an audit timeline.
• Account controls. Representative and counselor accounts can be deactivated, and universities are verified before activation and bound by an institutional agreement.
• Document verification. Submitted documents are checked (AI-first, with human review) to support data integrity.

• Vendor management. Service providers and sub-processors are subject to contractual data-protection and security obligations. See the sub-processor list in our Privacy Policy (Section 15).
• Data minimization & retention.We collect what we need for the purposes described in the Privacy Policy and delete or anonymize it when no longer needed.
• Backups & resilience. We maintain backups and recovery processes appropriate to the service. DECISION: confirm specifics before publishing detailed claims.

We maintain procedures to detect, investigate, and respond to security incidents, and will notify affected users and regulators where required by law and within applicable timeframes.

• Use a strong, unique password and keep your credentials private.
• Data minimization & retention: We collect what we need for the purposes described in the Privacy Policy and delete or anonymize it when no longer needed.
• Backups & resilience: We maintain backups and recovery processes appropriate to the service. DECISION: confirm specifics before publishing detailed claims.

If you believe you've found a security issue or your account has been compromised, contact us promptly at privacy@grantify.ae. Please give us reasonable time to investigate and address reports before public disclosure.

We may update this page as our practices evolve; the “Last updated” date will change.