Privacy Policy

Information We Collect

We collect information that you provide directly:

• Account information (name, email address)
• Church organization details
• Member data entered into the platform (connect cards, prayer requests, volunteer information)
• Images uploaded for connect card processing
• Phone numbers (when provided for SMS opt-in)

We automatically collect standard usage data including IP addresses, browser type, and pages visited to maintain and improve the Service.

How We Use Your Information

• To provide and maintain the Service
• To authenticate your identity and secure your account
• To process connect cards using AI-powered text extraction
• To send transactional emails (login codes, notifications)
• To improve the Service and fix issues

Data Isolation & Security

Each church organization's data is logically isolated. Staff from one church cannot access another church's data. We use encryption in transit (TLS) and implement strict access controls at every layer of the application.

Third-Party Services

We use the following third-party services to operate the platform:

• Neon — Database hosting (PostgreSQL)
• Vercel — Application hosting
• Resend — Transactional email delivery
• Anthropic — AI processing for connect card extraction
• Google — OAuth authentication (optional)
• Twilio — SMS/text message notifications
• Stripe — Payment processing
• Sentry — Error monitoring and performance

We do not sell your data to third parties. Data shared with these services is limited to what is necessary to operate the platform.

Church Management System Integrations

If your church connects a third-party church management system (such as Planning Center), we access only the data necessary to sync information you explicitly choose to share. You can disconnect integrations at any time.

SMS/Text Messaging

Steeple uses Twilio to send SMS notifications to church members and visitors who have opted in. These messages may include volunteer schedule confirmations, visitor follow-up, event reminders, and prayer request updates.

Phone numbers collected through the opt-in process are used solely for delivering these messages. Text messaging opt-in data and consent will not be shared with or sold to any third parties, except as required to deliver text message services (e.g., Twilio as our messaging service provider).

Message frequency varies by church and message type. Message and data rates may apply.

• Opt out: Reply STOP to any message to unsubscribe. You will receive a confirmation and no further messages.
• Help: Reply HELP to any message for support information including our contact email.

For questions about SMS messaging, contact hello@getsteeple.com.

Data Retention

We retain your data for as long as your account is active. Upon account termination, we make data available for export for 30 days, after which it is permanently deleted from our systems and backups.

Children's Privacy

Steeple accounts are intended for church staff aged 18 and older. While churches may store information about minors (e.g., kids ministry check-in), only authorized adult staff have access to this data through the platform's role-based access controls.

Our digital connect card forms do not knowingly collect personal information from children under 13 without parental or guardian consent. Church staff are responsible for ensuring compliance with applicable laws, including COPPA, when collecting or managing minors' data through the platform. If we learn that we have collected information from a child under 13 without appropriate consent, we will delete it promptly.

Your Rights

You have the right to access, correct, or delete your personal data. Church administrators can manage member data directly through the platform. For account-level requests, contact us at the email below.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the email associated with your account.

Contact

Questions about this Privacy Policy? Contact us at hello@getsteeple.com.