ChurchTrac Software, Inc. (“ChurchTrac”) values your privacy and the security of your data. This Privacy Policy describes how we collect, use, and share personal information. It should be read together with our Terms of Service, which governs your use of the Service. In the event of any conflict, the Terms of Service will control.

We collect and process personal information as necessary to provide the Service. This includes: (i) Information you provide when creating or maintaining an account (e.g., name, church name, email, phone, etc.); (ii) Data entered by you or your Church into the Service (e.g., membership, giving, attendance, or other organizational data); (iii) Technical information such as (but not limited to) IP address, geolocation data, device/browser type, website interactions, and usage statistics. See our Terms of Service for definitions and details.

We use the information we collect to: (i) Provide, operate, and support the Service; (ii) Communicate with you regarding your account, billing, support, updates, or promotions; (iii) Maintain the security and integrity of the Service; and (iv) measure and improve the effectiveness of our own marketing and promotional efforts. We do not rent or lease your personal information. Our use of advertising and analytics technologies may be considered a "sale" or "sharing" of personal information under some state privacy laws; Section 6 describes this and how to opt out. Additional rights and responsibilities regarding data ownership and security are described in our Terms of Service.

We may share information: (i) With trusted third-party providers (e.g., Stripe, hosting partners, analytics providers, etc.) as necessary to operate, support, secure, analyze, improve, and promote the Service; (ii) As required by law, regulation, subpoena, or court order; (iii) as permitted in our Terms of Service. For example, we use third-party payment processors (e.g., Stripe) to process payments. For payments processed through Stripe, we do not store full credit card or bank account numbers, though we may access limited information (such as the last four digits, expiration date, or billing address) as needed to support your transactions. We also share limited device, usage, and sign-up or purchase information with advertising and analytics partners, as described in Section 6.

AI providers. We use third-party AI providers to read documents a user uploads; to answer questions asked of our automated assistant; and to automatically categorize and prioritize support requests and assist with support responses. ChurchTrac does not use your information to train AI models.

We retain your data while your account is active. If your account is closed, terminated, or abandoned, your data is handled as described in our Terms of Service. You may request deletion of personal information by submitting a Support Ticket.

Depending on your jurisdiction, you may have rights to: (i) Access, know, or receive a copy of personal information we hold about you; (ii) Request correction or deletion of personal information; (iii) Opt out of certain uses or disclosures of personal information, including sale or sharing where applicable by law; (iv) Not be discriminated against for exercising these rights.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants additional rights, including the right to know what personal information is collected, to request deletion, to know whether information is sold, shared, or disclosed and to whom, to opt out of the sale or sharing of personal information (see Section 6), and to equal service and pricing if you exercise these rights.

If you are located in the European Union or the United Kingdom, ChurchTrac does not actively market or target services to you. However, if you choose to use the Service, your Church is the data controller and ChurchTrac acts as a data processor on their behalf. Any requests to access, correct, or delete your personal data should be directed to your Church. If your Church does not respond, you may submit a Support Ticket, and we will respond as required by applicable law.

To opt out of sale or sharing, use the methods described in Section 6; no Support Ticket is needed. To exercise your other rights, submit a Support Ticket. We may need to verify your identity. If we cannot reasonably verify your identity, we may decline your request as permitted by law. If we decline your request, you may appeal by replying to our response.

If you access the Service from outside the United States, you consent to your information being transferred to and processed in the United States, where data protection laws may differ from those in your country.

We use cookies and similar technologies to operate and improve the Service. Cookies may be used to help you sign in and navigate the Service, remember preferences, track usage statistics and performance, provide fraud prevention and security, measure advertising effectiveness, and support our own marketing efforts. Some cookies are necessary for the Service to function. If you disable or block cookies, parts of the Service may not work properly.

Our websites and the Service use Google Analytics and the Meta Pixel. These send device and usage information (such as IP address, browser type, cookie identifiers, and pages visited) to Google and Meta. Unless you have opted out, when you create a ChurchTrac account or make your first ChurchTrac subscription payment, we send that event to Google and Meta directly from our servers, together with a hashed version of an email address associated with your account when available. Google and Meta may use this information to measure and target advertising, which some state privacy laws treat as a "sale" or "sharing" of personal information.

You may opt out at any time using the "Do Not Sell or Share My Personal Information" link at the bottom of our website. We also treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out request. After you opt out, we stop loading Google Analytics and the Meta Pixel and stop sending sign-up and purchase events to Google and Meta. Your choice is saved in that browser on that device and applies across churchtrac.com and its subdomains. If you change browsers or devices, or clear your cookies, use the opt-out link again or enable GPC. We keep records of opt-out requests as required by law.

ChurchTrac does not knowingly collect information directly from children under 13. Your Church is responsible for obtaining verifiable parental consent before entering data about minors and for complying with laws such as COPPA. See the Terms of Service for more detail.

We take commercially reasonable measures, consistent with industry practices, to protect your data and maintain the security of the Service. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee that unauthorized third parties will never be able to defeat our security measures. Accordingly, we cannot and do not guarantee absolute security of your data. In the event of a security incident or data breach, we will notify affected users and authorities as required by applicable law. Use of the Service and storage of your data is at your own risk, as further described in our Terms of Service.

We may update this Privacy Policy from time to time. The "Revised" date shows the latest version.

If you access ChurchTrac through your church's public-facing Church Connect services (e.g., website, app, member portal, online giving, event scheduling), your Church, not ChurchTrac, is the data controller. ChurchTrac processes this data on behalf of your Church and does not sell or share it for advertising.

Your Church is responsible for the accuracy, legality, and disclosure of any information entered about you. For privacy requests (access, correction, deletion), you should contact your Church directly. If your Church does not respond, you may submit a Support Ticket, and we will handle your request as required by law.

Certain Church Connect features may use cookies or third-party services (e.g., Stripe for payments, Firebase for analytics and push notifications). Use of these features is subject to those third parties' privacy policies.

ChurchTrac does not run its own Google Analytics or Meta Pixel on Church Connect websites. A Church that uses its own web address may add its own Google Analytics or Meta Pixel; that tracking is controlled by your Church, not ChurchTrac, and is subject to your Church's own privacy practices.

If you have questions or concerns about this Privacy Policy, contact us by creating a Support Ticket. You may also contact us by mail at:
ChurchTrac Software, Inc.
13551 Lake Newman Street
Jacksonville, FL 32221