How the AchieveDXP Grant Navigator handles your data.

Effective 2026-04-22 · Last updated 2026-04-22

Summary, in plain English

If you fill out the wizard, we collect the information you enter (agency name, role, work email, phone, the program details you select) and send it to our team at leads@nucleos.com so they can follow up. That's the only place your data goes. We don't sell it, we don't share it with third parties for marketing, and you can ask us to delete it at any time by emailing that address.

Who we are

The AchieveDXP Grant Navigator is operated by Nucleos, an iT1 Company. For any question about this policy, your data, or a deletion request, write to leads@nucleos.com.

What we collect

1. Information you give us via the wizard

Agency information — name, type (state DOC, county jail, etc.), state, population size served
Program information — your stated goals, existing infrastructure, budget range, grant experience, timeline
Contact information (Step 10) — your name, role, work email, and optionally phone number
Optional free-text notes (e.g., existing partners)

2. Technical information collected automatically

localStorage in your browser — your in-progress wizard answers are saved locally so you can resume a session. This data stays on your device unless you submit the wizard.
Shareable report URL hash — when you copy a share link, your wizard answers are encoded into the URL itself. Anyone you send the link to will see the same plan; the data is not stored on our servers.
No analytics cookies, no advertising trackers, no third-party session recording.

3. What we do NOT collect

Sensitive personal information — Social Security numbers, financial-account numbers, passwords, health records.
Biometric, geolocation (beyond self-reported state), or protected-class information.
Information about incarcerated individuals or agency-case data — this tool is exclusively for corrections-agency procurement planning, not program operations.

How we use your data

To contact you about your plan. When you submit the wizard, a Nucleos account executive receives your information and typically reaches out within one business day.
To prioritize high-fit inbound. Leads with a high readiness score + immediate timeline are flagged internally as [PRIORITY] so a specialist responds faster.
To improve the product. Aggregate, de-identified patterns (e.g., which agency types are most common) may inform future features. No individual records are published.

Who receives your data

Nucleos sales & success team (employees of Nucleos / iT1) — receive the full submission to follow up with you.
Formsubmit.co — a third-party form-relay service that routes your submission from the web page to our inbox. Their privacy policy: formsubmit.co/privacy-policy. We do not authorize them to use your data for any other purpose.
No one else. We do not sell, rent, license, or exchange your data with advertisers, data brokers, or third-party marketers.

How long we keep it

Active prospects — while there's an active procurement conversation.
Closed / not-a-fit — purged within 24 months of last contact.
Request deletion anytime — email leads@nucleos.com with "Delete my data" in the subject. We'll remove your record from our CRM and mail archives within 30 days and confirm in writing.

Your rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your information ("right to be forgotten").
Port your information to a structured format.
Opt out of future contact.

To exercise any of these, email leads@nucleos.com.

California residents (CCPA/CPRA)

We do not sell your personal information as defined under the California Consumer Privacy Act. You have the right to request disclosure of what we hold, request deletion, and not be discriminated against for exercising either right. Requests to leads@nucleos.com.

EU / UK / other GDPR-style jurisdictions

The tool is designed primarily for U.S. correctional agencies. If you are a resident of a jurisdiction with data-subject rights under GDPR or an equivalent regime, our legal basis for processing your submission is legitimate interest (responding to your direct inquiry) and, where applicable, consent (the disclosure on Step 10 of the wizard).

Security

The Navigator is served over HTTPS.
Nucleos's AchieveDXP platform itself is SOC 2 Type I audited and continuously monitored for SOC 2 Type II controls, HIPAA, FedRAMP, ISO 27001:2022, and NIST SP 800-53 via Drata. See the Compliance section.
The lead-capture form uses Formsubmit.co for routing; the data in transit is encrypted.
Your in-progress wizard answers (localStorage) are stored only in your browser — never transmitted until you submit Step 10.

Cookies

The Navigator does not set tracking cookies. It uses localStorage to remember your wizard progress on a single device. You can clear it at any time via your browser's site-data settings.

Third-party data sources

The Navigator displays data from the following public sources (none of which receive your personal data):

grants.gov (U.S. federal grant opportunities) — public API, no authentication.
USASpending.gov (U.S. federal award history) — public government data.
ProPublica Nonprofit Explorer (IRS 990 foundation filings) — public, free, with attribution.
State Administering Agency directory — compiled by Nucleos from publicly available state and DOJ/BJA sources.

Changes to this policy

We may update this policy as the product evolves. Changes are published on this page with an updated "Last updated" date. Material changes that affect how your existing data is handled will be communicated by email to known contacts.

Contact

Nucleos, an iT1 Company
leads@nucleos.com
publicsafety@it1.com · (877) 777-5995

← Back to AchieveDXP