Skip to main content
Privacy & Data Protection

Privacy Policy

How we collect, use, protect, and share your information. Written plainly, because a firm that sells trust should be easy to read.

Effective: July 24, 2026  ·  Last updated: July 24, 2026

Summary

  • We collect what you give us through our forms, assessments, and intake, plus basic analytics when you browse.
  • We do not sell your personal information. No advertising trackers, no data brokers.
  • Some forms invite optional sensitive details (like demographic self-identification) to help identify funding programs you may qualify for. You can always leave those blank.
  • We run the site on a small number of trusted providers: Google, Cloudflare, and Resend.
  • You can ask us to show you, correct, or delete your information at any time: privacy@elysiantrust.org.

This summary is for orientation. The full terms below are what govern.

1. Who we are

This policy applies to elysiantrust.org and the services offered through it. The site is operated by Elysian X Incorporated, a Texas corporation doing business as Elysian Trust (“Elysian Trust,” “we,” “us,” or “our”). We are an institutional funding-services firm: grants, government contracts, certifications, and advisory work. When we act as the party deciding how and why your information is handled, we are the “controller” of that information.

For questions or requests about your privacy, contact us any time at privacy@elysiantrust.org.

2. What we collect

We collect three kinds of information: what you give us directly, what our forms gather when you use them, and a limited amount that is collected automatically as you browse.

a. Information you give us directly

  • Contact form. Your name, email address, and the contents of your message.
  • Readiness assessments (Grant, Contract, and Funding Readiness Assessments). Information about your organization and its funding and financial position. That can include organizational identifiers and tax identification numbers, revenue and budget figures, governance and program details, and contact information for you and your organization. Some questions are optional; see Section 3 on sensitive information.
  • Specialist & contractor intake. If we invite you to be considered for our specialist network, we collect your identity and contact details, your professional background and credentials, your résumé or CV and any work samples you upload, your rate and availability, how you were referred, and the permissions you grant us around the use of your name. For professional licenses we ask only the type and state, never the license or bar number. When you sign the confidentiality acknowledgment at the end, we record your typed name, the date, and the technical details of the signing (time, IP address, and browser) as a record that it happened. We do not collect tax or payment information at the intake stage.
  • Booking a call. Scheduling runs through Google Calendar. The details you enter there are governed by Google's privacy policy as well as this one.
  • Correspondence. If you email us or otherwise reach out, we keep that correspondence and any information in it.

b. Files you upload

Résumés, CVs, and work samples you upload through the specialist intake are stored in a private object-storage bucket (Cloudflare R2) that is not publicly listed or linked. Only our principals retrieve them, to evaluate a possible working relationship.

c. Information collected automatically

  • Analytics. We use Google Analytics 4 and Cloudflare Web Analytics to understand how the site is used: pages viewed, general device and browser information, referring links, and an approximate location derived from your IP address. Cloudflare Web Analytics is privacy-focused and does not use cookies. Google Analytics does (see Section 6).
  • Security and delivery logs. Our hosting and security provider (Cloudflare) processes technical data such as your IP address and browser type to deliver the site, defend against abuse, and keep the service reliable. Our forms use anti-spam measures (a hidden “honeypot” field, a timing check, and, on the contact form, Cloudflare Turnstile) to block automated submissions.

We do not use third-party advertising trackers, and we do not build advertising profiles about you.

3. Sensitive information

Eligibility for many funding programs, set-asides, and certifications depends on specific characteristics. Because of that, a few of our forms invite sensitive details: optional demographic self-identification (race or ethnicity, veteran status, disability, and similar characteristics), or information about the populations an organization serves. Where a field is marked optional, providing it is entirely your choice. Leaving it blank does not stop you from using the form.

When you choose to provide sensitive information, you consent to our using it only for the purpose described where it is collected. In practice, that means identifying funding pathways, set-asides, or programs you or your organization may qualify for. We do not sell it, use it for advertising, or share it except as described in Section 5. You may withdraw it or ask us to delete it at any time.

4. How we use your information

We use information to:

  • respond to your inquiries and provide the services you request;
  • evaluate readiness assessments and identify funding strategies, programs, and eligibility;
  • review specialist and contractor applicants and, where there is a fit, discuss a possible engagement;
  • operate, secure, maintain, and improve the website and our forms;
  • protect against fraud, spam, and abuse; and
  • comply with legal obligations and enforce our agreements.

We rely on your consent for optional and sensitive fields, on the need to take steps at your request and to perform our services, and on our legitimate interest in running a secure, functional website and evaluating potential engagements.

5. How we share your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only in these limited ways:

  • Service providers who run the site for us, under agreements that limit them to processing data on our behalf:
    • Google LLC — Google Analytics (usage analytics), Google Fonts (loading a font sends Google your IP address), Google Sheets (where form submissions are recorded), Google Calendar (scheduling), and Google Workspace (our email).
    • Cloudflare, Inc. — website hosting and content delivery, edge functions that process form submissions, bot protection (Turnstile), privacy-focused Web Analytics, and secure storage (KV and R2) for submissions and uploaded files.
    • Resend — delivery of transactional and notification emails (for example, alerting us that a form was submitted, or sending you a copy of what you signed).
  • With your direction. If we represent you or your organization to funders, or describe an approved specialist in a proposal, we do so consistent with the permissions and consents you provide.
  • Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, safety, and property of Elysian Trust, our clients, or others.
  • Business transfers. If Elysian Trust is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; we will require the successor to honor this policy.

Our providers are based in the United States, and information is processed there.

6. Cookies & analytics

We keep cookies to a minimum. Google Analytics sets cookies to measure site usage; Cloudflare Web Analytics does not use cookies. We do not use advertising or cross-site tracking cookies.

You can control cookies through your browser settings. To opt out of Google Analytics specifically, install Google's opt-out browser add-on. Because we do not respond to advertising signals, most tracking-related choices do not apply to this site.

7. How long we keep your information

We keep information only as long as we need it for the purpose it was collected, then delete or anonymize it. In general:

  • Contact and correspondence: for as long as we are in touch and a reasonable period afterward.
  • Assessment submissions: for the period during which we are evaluating or serving you or your organization; if no engagement results, we remove them within a reasonable period.
  • Specialist intake and uploaded files: if we do not move forward together, we retain them for a limited period in case a fit arises later, then delete them; if we do engage you, we retain records for the life of the engagement and as our agreements and the law require.
  • Analytics: in aggregate or per our analytics providers' standard retention windows.

You can ask us to delete your information sooner (see Section 9), subject to any records we must keep to meet legal or contractual obligations.

8. How we protect your information

We take security seriously and build the site accordingly. Measures include encryption in transit (HTTPS/TLS), a strict Content-Security-Policy, encrypted storage of credentials and secrets, access limited to our principals, private (unlisted) storage for uploaded files, and automated anti-abuse protections on our forms. No method of transmission or storage is ever completely secure. We work hard to protect your information, but we cannot promise absolute security.

9. Your rights & choices

You may ask us to:

  • Access the personal information we hold about you;
  • Correct information that is inaccurate or out of date;
  • Delete your information;
  • Receive a copy of information you provided, in a portable form; and
  • Withdraw consent going forward, or revoke a permission you granted (for example, permission to use your name in proposals).

To make a request, email privacy@elysiantrust.org. We will verify your request and respond within the time the law allows. We will not discriminate against you for exercising these rights.

If you live in Texas or another U.S. state with a comprehensive privacy law, these rights are yours under that law, including the right to appeal if we decline a request. To appeal, reply to our decision and we will take another look. Because we do not sell personal data or use it for targeted advertising or profiling with legal effects, those particular opt-outs do not apply here.

10. Children's privacy

This site and our services are intended for organizations and professionals, not for children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our practices or the law evolve. When we do, we will revise the “Last updated” date above, and for material changes we will make the update prominent. Your continued use of the site after an update means you accept the revised policy.

12. Contact us

Questions, requests, or concerns about this policy or your information:

Elysian Trust (Elysian X Incorporated)
Privacy requests: privacy@elysiantrust.org
General inquiries: elysiantrust.org/contact