Privacy Policy

1. What information do we collect?

• Contact details you submit in forms (name, email, phone, church, website).
• Request context, goals, and intake responses used to route support.
• Subscription and billing records for paid plans (processed by Stripe — see section 4; we do not store full card numbers).
• Website and interaction data from analytics cookies and identifiers (see section 5), including page views and on-page interactions.
• Free-tool usage: when you grade a website with our website grader, we log the graded domain and the resulting score to our records. The grader itself requires no email.

2. How do we process your information?

• Respond to requests and deliver advisory or diagnostic communications.
• Support operations, quality checks, and troubleshooting.
• Measure performance and improve service delivery.

3. Automated emails and text messaging

• Operational emails (checkout confirmations, intake links, delivery notices, and similar service messages) are sent to the addresses you provide.
• If you request a free review or demo, we may send a short series of follow-up (“nurture”) emails about that request.
• Every nurture email includes a plain opt-out: reply STOP or email us and we take you off the list. Where SMS is used, STOP / UNSUBSCRIBE / END is honored.
• We maintain suppression lists to honor opt-out choices.

4. When and with whom do we share your personal information?

We share personal information only with the service providers we use to run the business, at your direction, or where the law requires it. The providers we currently use:

• Stripe — payment processing for subscriptions and checkout. Card details go to Stripe directly; we never see or store full card numbers.
• Supabase and Airtable — storage of form submissions, intake responses, and subscription records.
• SMTP2GO (and comparable email delivery providers) — sending the operational and nurture emails described in section 3.
• Google — Tag Manager and Analytics (GA4), described in section 5, and ad platforms when you purchase advertising services.
• Cloudflare — Turnstile anti-spam verification on our contact and intake forms, and network infrastructure.
• Telegram — internal operator notifications (for example, alerting our team that a form was submitted or an order needs attention). These are internal operational messages, not marketing.
• Integrated tools you choose to connect at your direction.
• Legal/compliance requirements where disclosure is required.

We do not sell personal information.

5. Do we use cookies and other tracking technologies?

• We use essential cookies required for core site and form functionality.
• We use Google Tag Manager and Google Analytics 4 (GA4) for analytics. These set cookies and similar identifiers and record events on a dataLayer — including page views and on-page interactions such as button and link clicks and form submissions — so we can see how the site is used and improve it.
• We may also use attribution technologies (for example UTM parameters) where legally permitted.
• Ad-control options are available at aboutads.info/choices, and most browsers let you block or clear cookies.

6. How long do we keep your information?

Retention depends on operational, legal, and support needs. Intake and submission records may be retained for up to 365 days unless a longer period is required.

7. How do we keep your information safe?

We use administrative and technical controls intended to reduce unauthorized access. No internet transmission method is guaranteed as 100% secure.

8. Do we collect information from minors?

Services are intended for adults acting on behalf of churches or organizations. We do not knowingly collect personal information from children under applicable age thresholds. If you believe minor data was submitted, contact us so we can review and remove records when appropriate.

9. What are your privacy rights?

Depending on your jurisdiction, you may request access, correction, deletion, and processing restrictions for personal data used by Church Digital.

10. Controls for do-not-track and global privacy control

Browser do-not-track and global privacy control signals may be supported according to applicable law and platform capability. If you need a manual privacy request, use the contact path below and specify the right you are exercising.

11. California privacy notice

California residents may have rights to know, access, correct, delete, and limit certain uses of personal information. Church Digital does not sell personal information. Requests are processed through our support/contact workflow.

12. Virginia privacy notice

Virginia residents may have rights to access, correct, delete, data portability, and certain opt-out controls under applicable law. Submit requests through the same privacy contact route used for all jurisdictions.

13. International transfers

If data is transferred across regions, we use reasonable contractual and operational safeguards intended to maintain legally appropriate handling standards.

14. Do we make updates to this notice?

Yes. We may update this policy as legal, operational, or platform requirements evolve. Material changes are reflected by an updated effective date.

15. How can you contact us?

Email logan@churchdigital.com or use the contact page for privacy requests and support inquiries. Include your request type (access, correction, deletion, or restriction) so we can route it correctly.

16. How can you review, update, or delete your data?

Email logan@churchdigital.com or submit a request through the contact page and include enough detail to verify and locate records. We process requests consistent with applicable legal requirements.