This is a starting draft. Have it reviewed before you rely on it.
Who we are
FaithOps operates faithops.foundrcode.com, which provides congregation-management software to churches, mosques and other faith organisations.
Each organisation using FaithOps is the controller of its own members' records. We are a processor acting on that organisation's instructions. If you are a member of a congregation, that congregation decides what is held about you — contact them first, and us if they cannot help.
What we hold
For organisations: the name and contact details of their staff, their billing tier, and the configuration of their site and app.
For members, on behalf of an organisation: name, contact details, household relationships, attendance, giving history, and any pastoral or lifecycle records that organisation chooses to keep. Some of this is, in law, information revealing religious belief and therefore a special category of personal data. It is held because it is the substance of what a congregation asked us to keep for it.
Technical data: sign-in sessions, one-time codes used to verify an email address, device tokens used to deliver notifications, and server logs.
Payments
Card details never reach our servers. Payments are handled by the processors an organisation configures — which may include Stripe, Paystack or Flutterwave — and we store only the reference, amount and outcome.
The assistant
Where an organisation enables the in-app assistant, questions and the organisation's own library passages are sent to that organisation's chosen AI provider to generate an answer. We do not send member records, giving or attendance. Conversations are stored so a member can read them back.
Who else sees it
Only: the organisation whose records they are, the providers named above, and our hosting provider. We do not sell personal data and we do not use it for advertising.
How long
For as long as the organisation keeps its account, and then for as long as it takes to close the account down. One-time codes are deleted a week after they expire. An organisation can export or erase its records at any time.
Your rights
Access, correction, erasure, portability, and objection. Ask your congregation first, since the records are theirs. Otherwise contact FaithOps [email protected].
Changes
We will publish any change here and, for anything material, tell organisation administrators by email.