Privacy Policy

1. Scope

This Privacy Policy applies to all users of ChurchRaise and e-Church Bulletins, including:

• Church administrators and staff who use the platform to manage their organization
• Church members and donors who interact with public-facing pages (giving pages, event registrations, group hubs, fundraiser pages, church websites, volunteer sign-ups, membership portals, and online stores)
• Visitors to our marketing sites and help center

2. Data We Collect

We collect information in the following categories:

Account Data

Name, email address, phone number, organization name, role, and login credentials.

Contact & People Data

Church organizations may store member and visitor records including names, email addresses, phone numbers, mailing addresses, household relationships, group memberships, tags, custom fields, attendance records, prayer requests, and pastoral notes.

Financial Data

Donation amounts, fund designations, recurring giving preferences, pledge commitments, and transaction history. We do not store credit card numbers, bank account numbers, or other raw payment credentials — these are handled directly by our PCI-compliant payment processors (Stripe and Square).

Communications Data

Email and SMS message content, recipient lists, delivery status, open rates, click rates, and unsubscribe preferences.

Form & Response Data

Form submissions, connect card responses, uploaded files, and survey answers.

Event & Volunteer Data

Event registrations, RSVPs, check-in records, ticket purchases, volunteer team assignments, schedule preferences, and sign-up sheet responses.

Media Data

Uploaded images, videos, documents, and AI-generated images and graphics.

Website Data

Church website content, page views, visitor analytics, and custom domain configurations.

AI Interaction Data

Conversations with AI assistants, user prompts, generated content (text and images), tone and style preferences, and usage metrics (token counts for billing purposes).

Safety & Screening Data

Background check completion status and safety training status via MinistrySafe. We store only the status (pass/fail/pending) — full screening results are retained by MinistrySafe and are not stored on our servers.

Usage & Device Data

IP address, browser type, device type, operating system, session data, referring URLs, QR code scan analytics, and general geolocation (city/region level).

3. How We Use Your Data

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process donations and financial transactions
• Deliver email and SMS communications on behalf of church organizations
• Power AI assistant features (generating text, images, and recommendations)
• Generate analytics, reports, and giving statements
• Facilitate background checks and safety screening
• Send service-related communications (account notifications, billing, support)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate the platform. Data shared with each provider is limited to what is necessary for the specific service:

Each third-party provider is subject to their own privacy policy and data handling practices. We encourage you to review their policies directly.

5. AI Features

Our platform includes AI-powered features such as:

• AI assistants for general help, giving strategy, content writing, graphic design, marketing, SEO, service planning, sermon processing, and financial analysis
• AI image generation for church graphics and media
• AI-powered form building, event creation, and email drafting
• Bible verse lookup and thematic scripture search

When you use AI features:

• Your prompts and conversation history are sent to OpenAI and/or Google Gemini for processing
• AI-generated content (images and text) is stored in your organization’s account
• We track AI usage for billing purposes (token counts and credit consumption), not the content of your conversations
• AI providers may process your data according to their own data use policies. As of this writing, both OpenAI and Google state they do not use API data to train their models
• You may choose not to use AI features; they are not required for core platform functionality

6. Payment Processing

All payment processing is handled by PCI-DSS compliant third-party processors (Stripe and Square). When a donor or customer enters payment information:

• Card numbers, bank account details, and other sensitive payment data are transmitted directly to the payment processor and are never stored on our servers
• We receive and store only transaction metadata: amount, date, donor identity, fund designation, and confirmation status
• Recurring giving preferences and schedules are managed by the payment processor

7. Data Sharing

We do not sell personal information to third parties.

We may share information in the following circumstances:

• Service providers — Third-party vendors who help us operate the platform (listed in Section 4), under contracts that limit their use of your data
• Church organizations — Data you provide through a church’s public pages (donations, registrations, forms) is shared with that church organization
• Legal requirements — When required by law, subpoena, court order, or to protect our rights, safety, or property
• Business transfers — In connection with a merger, acquisition, or sale of assets, with notice to affected users
• With your consent — When you explicitly authorize sharing

8. Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS/SSL
• Data at rest is encrypted via Google Cloud’s default encryption
• Role-based access control limits data access to authorized users
• Firebase Security Rules enforce data isolation between organizations
• Payment data is handled exclusively by PCI-DSS compliant processors
• Regular security reviews and monitoring

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable efforts to protect your data, we cannot guarantee absolute security.

9. Data Retention & Deletion

• Organization data is retained for as long as the account remains active
• Upon account closure, data is deleted within 30 days, except where retention is required by law (e.g., financial records)
• AI conversation history can be cleared at any time by the user
• System backups containing deleted data are purged within 30 days
• Individual contact records can be deleted by the church organization at any time

To request deletion of your personal data, contact us at support@faith-systems.com.

10. Children’s Privacy

Our platform is designed for use by church staff and administrators aged 13 and older. We do not knowingly collect personal information directly from children under 13.

Church organizations may store records for minors (e.g., children’s ministry check-in, youth group memberships). In such cases, the church organization is responsible for obtaining appropriate parental or guardian consent in compliance with applicable laws, including COPPA.

If we learn that we have collected personal information from a child under 13 without proper authorization, we will take steps to delete that information promptly.

11. Cookies & Tracking

We use cookies and similar technologies to:

• Maintain your login session and authentication state
• Remember your preferences and settings
• Analyze platform usage to improve our Services
• Track QR code scans and link clicks for analytics

You can control cookies through your browser settings. Disabling cookies may affect some platform functionality (such as staying logged in).

We use Google Analytics for aggregated usage insights. You can opt out using the Google Analytics Opt-out Browser Add-on.

12. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate personal information
• Deletion — Request deletion of your personal information
• Portability — Receive your data in a portable format
• Opt-out — Opt out of promotional communications at any time
• Restriction — Request restriction of processing in certain circumstances

We will not discriminate against you for exercising any of these rights. To submit a request, contact us at support@faith-systems.com.

13. California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have additional rights:

• Right to know — Request the categories and specific pieces of personal information we have collected
• Right to delete — Request deletion of personal information, subject to certain exceptions
• Right to opt-out of sale — We do not sell personal information
• Right to non-discrimination — We will not discriminate for exercising your rights

To exercise your rights, email support@faith-systems.com with the subject line “California Privacy Request.” We may verify your identity before processing your request.

Residents of Virginia, Colorado, Connecticut, Utah, and other states with consumer privacy laws have similar rights. Contact us using the information above to submit a request.

14. Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where required by law, provide additional notice (such as an in-app notification or email). Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: