Privacy Policy

1. Information We Collect

We collect information directly from you and automatically through your interactions with the Easychurch platform, web widgets, NFC connection points, and background automation engines:

• Church Profile & Settings Data: Public church name, logo URLs, primary contact email, phone number, and workspace configuration settings.
• User Account Details: Name, login credentials, and roles managed securely via encrypted Supabase Auth sessions.
• Knowledge Base & Sermon Media: Uploaded PDF sermon notes, pastoral care guides, video transcripts, and crawled site URLs used to contextualize AI responses and video highlight workflows.
• Conversational Agents & Voice AI Data: Text transcripts, voice session streams (speech-to-text and text-to-speech audio data), intent captures, and visitor lead submissions (names, emails, phone numbers, prayer requests).
• NFC Taps & Digital Contact Cards: Visitor check-in form data, vCard (.vcf) download requests, and interaction timestamps from physical NFC tap plaques and landing pages.
• Third-Party Connected Account Tokens: Encrypted OAuth 2.0 access and refresh tokens for connected platforms (Google Workspace, Google Drive, Google Calendar, Gmail, YouTube, Planning Center, Slack) required to execute your active automations.

2. How We Use Your Information

Easychurch utilizes gathered data strictly to deliver, maintain, and execute our core platform features:

• Isolated AI Agent Training & Contextualization: Configure, train, and run customized autonomous AI chat and voice agents for your website and widgets. Your church data (sermons, FAQs, documents) is used exclusively to train and contextualize your own isolated church agent so it can better serve your specific congregation. Your data is never pooled, shared, or used to train general foundation models or other churches' agents.
• Generate dynamic NFC connection pages and downloadable contact card (vCard) files for church visitors.
• Execute automated workflows, such as checking Google Calendar availability, scheduling pastoral counseling sessions, parsing Google Drive sermon documents, and sending automated visitor follow-ups via Gmail or SMS.
• Process video highlight clipping and publish approved 9:16 vertical clips to connected YouTube Shorts channels.
• Populate your administrator dashboard with real-time analytics, conversation transcripts, and visitor lead sheets.

3. Data Storage and Security

All church records, membership tables, message transcripts, third-party credentials, and visitor lead details are hosted inside Supabase PostgreSQL databases backed by AES-256 encryption at rest and SSL/TLS encryption in transit. OAuth credentials and API keys are stored using versioned field-level encryption. Access is restricted by Row-Level Security (RLS) policies requiring verified claims.

4. Third-Party Integrations & AI Training Privacy

We do not sell, rent, or trade your church or visitor data to third-party advertisers. We share text/audio segments of conversational prompts with partner Large Language Model (LLM) providers (OpenAI, Anthropic, xAI) solely to execute real-time response generation for your agent. Your church's uploaded documents, sermon transcripts, and custom training datasets are strictly isolated to your church account and are NEVER used to train public foundation models or any global/shared AI models.

Easychurch's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. OAuth data accessed via Google Drive, Calendar, Gmail, or YouTube is used exclusively to fulfill user-configured workflow steps.

5. Church Responsibilities

As the administrator of a church account, you act as the data controller for the visitor conversation leads collected by your deployed AI agents. You are responsible for ensuring that you have appropriate consent from your congregation members and visitors before requesting or storing their personal details.

6. Changes to this Policy

We may modify this Privacy Policy from time to time to reflect modifications in our systems or compliance regulations. We will notify you of any structural updates by updating the date at the top of this policy and providing prominent notices inside the administrator dashboard.

7. Contact Our Privacy Officer

If you have questions regarding data storage, backups, or removal requests, please reach out to our privacy officer in Atlanta at easychurchmarketing@gmail.com.