Privacy Policy

Last updated: January 2026

At e-ChurchTech, we take your privacy seriously. This policy explains how we collect, use, and protect your personal data when you use our church management platform.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, church name, and billing information (for paid plans).

Church Data

Member profiles, attendance records, financial contributions, event registrations, and other data you enter into the platform. This data belongs to your church — we act as a data processor.

Usage Data

We collect anonymised usage statistics to improve our service: feature usage, error logs, and performance metrics.

2. How We Use Your Data

• Provide and maintain the e-ChurchTech platform
• Process payments and manage subscriptions
• Send service-related notifications (never marketing without consent)
• Improve platform features and performance
• Comply with legal obligations

3. Data Sharing

We never sell your data. We share data only with:

• Sub-processors — hosting (Azure), payment processing (Stripe), email delivery
• Legal authorities — when required by law or court order

4. Data Security

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Role-based access controls within your church account
• Regular security audits and penetration testing
• SOC 2 Type II compliant infrastructure

5. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — request deletion ("right to be forgotten")
• Portability — export your data in machine-readable format
• Objection — object to processing based on legitimate interests

6. Data Retention

We retain account data for the duration of your subscription plus 90 days. Church data is deleted within 30 days of account closure. Financial records are retained for 7 years as required by tax law.

7. Cookies

We use essential cookies for authentication and session management. No third-party tracking cookies are used.

8. Children's Privacy

Children's data (e.g. youth group members) is entered by authorised church staff. We do not knowingly collect data directly from children under 16.

9. Changes to This Policy

We will notify you of material changes via email 30 days before they take effect.

10. Contact Us

For privacy questions or data requests: Contact Us or email privacy@echurchtech.org