Privacy Policy

Version 1. Effective 5 October 2026.

Chrēma is operated by Aeternum Systems LLC ("Aeternum," "we," "us" or "our"). This Privacy Policy explains what Chrēma collects, why, who else receives it, and when we delete it. It is part of Chrēma's Terms of Service.

Chrēma is built to keep as little as possible. There is no account, no password, no mailing list and no advertising. We do not store your email address, and we never hold your card.

1. What We Collect, and When

When you search

To find your organization, you type its name, EIN or UEI and choose a state. We send what you type to SAM.gov and SEC EDGAR, and if neither finds you, to an artificial intelligence web search. We do not save what you typed in the search box.

To count your matches, we keep with your search the organization name you confirm, your applicant type, your state, your focus area, the amount you plan to ask for, your SAM.gov status, and your website or your description of your work, if you give one.

To stop abuse, we keep a scrambled form of your connection's address. It is a one-way code made with a secret key, so it cannot be turned back into the address. It is used only to limit how many searches come from one connection, and it is deleted within two hours.

When you buy a report

We read your website, or your description if you gave one instead, so that the report is checked against your own work. We keep a short summary of what your organization does. We do not keep the text of your website.

When you ask for a letter or proposal

We keep the answers you give on the form. They include the name and title of the person who leads your organization, a contact person's name, title, telephone number and email, the street address where the work happens, and details about your project, the people it serves, and its budget.

When you pay

Stripe collects your name, email address, billing address and card details on its own payment page. We never see or store your card number. We do not store your email address either. When we need to email you, we ask Stripe for the address on your payment at that moment.

We keep a record of each purchase: what you bought, the funder it is for, the amount, the date, Stripe's reference numbers, whether it was delivered, refunded or disputed, and any referral code.

When you ask us to send your links again

On chrema.co/recover, the email address you type is used once, to ask Stripe for the purchases made with it. To stop misuse, we keep a scrambled form of that address for one day and a scrambled form of your connection's address for up to two hours. We never keep the address itself.

Records of how Chrēma runs

Chrēma records each step it takes, such as a lookup, a model call or an email, with its time, its cost and whether it worked. These records do not contain your answers, your documents or what you typed in the search box.

Cookies

Chrēma sets no cookies of its own and uses no advertising or analytics trackers. Stripe's payment page sets its own cookies under Stripe's privacy policy.

2. How We Use It

We use what we collect only to find your matches, read your work, write your documents, deliver them, email you about your purchase, send refunds, find your links when you ask, stop abuse, and keep the records that accounting, taxes and payment disputes require.

We do not sell your information, rent it, or share it for advertising. We do not use your information to train artificial intelligence models, and we use our artificial intelligence providers under terms that do not allow them to train on it.

3. Who Else Receives It

We share information only with the companies that run parts of Chrēma for us, and only what each needs:

• Anthropic provides the artificial intelligence models that read your website, search for your organization when the registries cannot find it, rank funders and write documents. It receives what those tasks need, including your answers.
• Voyage AI helps Chrēma find writing comparable to your project. It receives your project's name, its summary, the population it serves and your focus area.
• Stripe processes payments and refunds, and is where we look up your purchases when you ask for your links.
• Resend sends Chrēma's emails. It receives your email address and the message.
• Supabase hosts Chrēma's database.
• Vercel hosts the Chrēma website.
• SAM.gov (a United States government system) and SEC EDGAR receive what you type to identify your organization.

These providers are based in the United States, and Chrēma's database is stored in the United States.

We may also disclose information when the law requires it, to protect the rights or safety of Chrēma, its users or others, or to a buyer of all or part of our business, who would be bound by this policy.

4. How Long We Keep It

• A search that never becomes a report is deleted a day after you run it.
• A report, your answers and your documents are deleted one year after the latest purchase made from that report. A free report is deleted one year after it is finished.
• The scrambled form of your connection's address is deleted within two hours.
• The scrambled form of an email address typed on chrema.co/recover is deleted within one day.
• Purchase records are kept for as long as accounting, tax and payment disputes require. Once the report they came from is deleted, they no longer connect to it.
• Records of how Chrēma runs are kept to operate and audit the service. They hold none of your answers or documents.
• Copies in our database provider's backups are removed on its regular schedule.

Stripe and Resend keep their own records under their own policies.

5. Your Choices and Your Rights

Everything you bought is at your link, where you can read it and download it. You can give a description of your work instead of a website, and you can leave optional questions blank.

You can ask us to delete your report, your answers and your documents before their year is up. Write to support@aeternumsystems.com and include the link, because the link is how we know the report is yours. We will delete them within 30 days and tell you when it is done. Purchase records are kept as described in Section 4.

Depending on where you live, you may have other rights over your personal information, such as the right to know what we hold or to correct it. Write to us and we will respond within the time the law requires.

6. Security

Every connection to Chrēma is encrypted. Chrēma's database can be reached only by its own servers. Connection addresses and email addresses typed on chrema.co/recover are kept only in scrambled form, and card numbers never reach us. No system is perfectly secure, and if a breach affects your information, we will notify you as the law requires.

7. Children

Chrēma is for people 18 and older. We do not knowingly collect information from anyone younger.

8. Where Chrēma Is Offered

Chrēma is offered for applicants in the United States. Your information is processed and stored in the United States.

9. Changes to This Policy

When we update this policy, we post the new version with a new version number and date. A change that reduces how we protect information you have already given us will not apply to that information without your agreement.

10. Contact

Aeternum Systems LLC

support@aeternumsystems.com

Replying to any email from Chrēma reaches a person.