Privacy Policy

1. Introduction

The Embassy Row Project ("we," "us," or "our"), a philanthropic initiative founded by James Scott and headquartered in Washington, D.C., is committed to protecting the privacy and security of all individuals and organizations who interact with our website, platforms, and services. This Privacy Policy explains how we collect, use, store, share, and protect information when you visit our websites - including embassyrowproject.org, embassyrowproject.com, embassyrowproject.net, and embassyrowproject.ai - or engage with any of our grant-funded services.

By using our Services, you consent to the practices described in this Privacy Policy. We encourage you to read this document carefully. If you do not agree with any part of this policy, please discontinue use of the Services.

2. Information We Collect

We collect information through several channels, all of which are designed to support our philanthropic mission and deliver grant-funded services effectively.

2.1 Information You Provide Voluntarily

• •Contact Form Submissions - name, email address, organization name, role/title, and the content of your inquiry
• •Grant Applications - organization details, mission statement, geographic focus, sector of operation, project descriptions, budget information, organizational capacity, and references
• •Feedback and Correspondence - any information you provide when communicating with us through the website or other channels

2.2 Information Collected Automatically

• •Device and Browser Information - browser type and version, operating system, device type, and screen resolution
• •Usage Data - pages visited, time spent on pages, navigation paths, referring URLs, and interaction patterns
• •Network Information - IP address (anonymized where possible), approximate geographic location (country/region level), and internet service provider
• •Performance Data - page load times, error logs, and technical diagnostics used to maintain and improve the Services

2.3 Information We Do Not Collect

The Embassy Row Project does not require user accounts, passwords, or login credentials for general website access. We do not collect payment information, social security numbers, government-issued identification numbers, or any financial account details. All services are grant-funded and provided at no cost to qualifying organizations.

3. How We Use Your Information

Information collected is used exclusively in furtherance of the Embassy Row Project's philanthropic mission. Specific uses include:

• •Processing and evaluating grant applications to determine eligibility and match organizations with appropriate services
• •Responding to inquiries submitted through the contact form
• •Providing, maintaining, and improving the Services and platform functionality
• •Communicating with grant recipients about service updates, program changes, and relevant opportunities
• •Generating aggregate, anonymized analytics to understand how visitors use the website and to improve user experience
• •Ensuring the security and integrity of the Services, including detecting and preventing fraud or unauthorized access
• •Complying with legal obligations and enforcing our Terms of Service

We do not sell, rent, trade, or otherwise commercially exploit your personal information. We do not use your information for advertising, marketing to third parties, or profiling for commercial purposes.

4. Cookies and Tracking Technologies

Our website uses a limited set of cookies and similar technologies to ensure proper functionality and to understand aggregate usage patterns.

We use privacy-respecting analytics that do not track individual users across websites, do not use fingerprinting, and do not share data with advertising networks. Our analytics are designed to provide aggregate insights only.

You may disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of certain features, such as form submissions.

5. Data Sharing and Disclosure

The Embassy Row Project does not sell or commercially share your personal information. We may share information only in the following limited circumstances:

• •Within the Embassy Row Project Ecosystem - Grant application data may be shared internally among our 59+ affiliated institutes to identify the most appropriate services for an applicant. All institutes operate under the same privacy standards.
• •Service Providers - We use a limited number of trusted service providers for website hosting, data storage, and analytics. These providers are contractually bound to protect your data and may only process it on our behalf.
• •Legal Requirements - We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of the Embassy Row Project, its users, or the public.
• •With Your Consent - We may share information with third parties when you have given explicit consent for a specific purpose.

6. Data Security

We implement robust technical and organizational measures to protect your information, including:

• •Encryption in transit (TLS 1.2+) and at rest for all sensitive data
• •Access controls limiting data access to authorized personnel on a need-to-know basis
• •Regular security assessments and vulnerability monitoring
• •Secure, geographically distributed server infrastructure with redundancy and disaster recovery capabilities
• •Incident response procedures to address potential data breaches promptly

While we strive to protect your information using industry-leading practices, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining the highest practicable standards.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

• •Contact form submissions are retained for up to 24 months to ensure adequate follow-up and correspondence tracking
• •Grant application data is retained for the duration of the grant relationship plus an additional 36 months for reporting and compliance purposes
• •Analytics data is retained in aggregate, anonymized form and does not contain personally identifiable information
• •Server logs containing IP addresses are retained for no more than 90 days for security purposes

Upon expiration of the retention period, personal data is securely deleted or irreversibly anonymized.

8. Third-Party Websites and Services

Our website contains links to external websites operated by our affiliated institutes, partner organizations, and other third parties. These external sites operate under their own privacy policies, and we are not responsible for their privacy practices or content. We encourage you to review the privacy policy of any third-party site before providing personal information. The inclusion of a link does not imply endorsement of the linked site by the Embassy Row Project.

9. International Data Considerations

The Embassy Row Project operates globally, with community programs and partner organizations across multiple countries. If you are accessing the Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers and central operations are located.

We take steps to ensure that international data transfers are conducted in compliance with applicable data protection laws. For visitors from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection regulations, we process data based on legitimate interests in operating our philanthropic mission, consent where applicable, and contractual necessity for grant recipients.

10. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• •Right of Access - Request a copy of the personal information we hold about you
• •Right of Correction - Request correction of inaccurate or incomplete personal information
• •Right of Deletion - Request deletion of your personal information, subject to legal retention requirements
• •Right to Restrict Processing - Request that we limit how we use your personal information
• •Right to Data Portability - Request a copy of your data in a structured, machine-readable format
• •Right to Withdraw Consent - Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing
• •Right to Object - Object to processing of your personal information based on legitimate interests

To exercise any of these rights, please submit a request through our contact page. We will respond to verified requests within 30 days. We may request additional information to verify your identity before processing your request.

11. Children's Privacy

The Embassy Row Project's Services are intended for use by organizations and their authorized representatives. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have inadvertently collected information from a child under 16, we will take prompt steps to delete that information. If you believe a child has provided us with personal information, please contact us through our contact page.

12. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). The Embassy Row Project does not sell personal information and does not use personal information for cross-context behavioral advertising. California residents may request disclosure of the categories and specific pieces of personal information collected, the purposes for collection, and the categories of third parties with whom information is shared. To submit a request, please use our contact page.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. For active grant recipients, significant changes may also be communicated directly. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy, your personal data, or the Embassy Row Project's privacy practices, please reach out through our contact page.

Embassy Row Project
A philanthropic initiative by James Scott - Est. 2007