Privacy Policy

Faith-Links operates in two roles depending on the data involved:

• As a data processor for Customer Data — member records, donations, attendance, communications, and other information that organizations upload. The Customer is the data controller and is responsible for obtaining consent and lawful basis. Our obligations are described in our Data Processing Agreement.
• As a data controller for account and usage data — information we collect directly to operate, secure, and improve the Services, such as login credentials, billing information, and usage logs.

We collect the following categories of personal information:

• Account information: name, email address, role, and organization affiliation.
• Authentication data: login credentials, OTP codes, and session tokens.
• Billing information: subscription plan and payment processor records (card details are handled by our payment processor; we do not store full card numbers).
• Usage data: IP address, device type, browser, access times, and feature usage logs.
• Support communications: correspondence and content you share when requesting support.

We use the personal information we collect directly to:

• Provide, maintain, and secure the Services and your account;
• Process subscription payments and manage billing;
• Communicate with you about your account, updates, and policy changes;
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Comply with legal obligations; and
• Aggregate, de-identified analytics to improve the Services.

We do not sell personal information to third parties. We do not use Customer Data for our own marketing or commercial purposes.

Organizations using Faith-Links may upload personal information about their members, including contact details, family relationships, attendance, donations, and notes. The organization — not Faith-Links — is the controller of this data and is responsible for:

• Establishing a lawful basis and obtaining any required consents;
• Providing privacy notices to its members;
• Responding to member requests regarding their personal data; and
• Ensuring the accuracy and appropriateness of the data it uploads.

Faith-Links processes Customer Data only on documented instructions from the organization, as described in our Data Processing Agreement.

We may share personal information with:

• Service providers: trusted vendors that help us operate the Services (e.g., cloud hosting, email delivery, payment processing), bound by confidentiality and data protection obligations;
• Legal authorities: when required by law, court order, or to protect rights, safety, or property; and
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to confidentiality obligations.

We implement appropriate technical and organizational measures to protect personal information, including encryption in transit, access controls, audit logging, and regular security reviews. However, no system is perfectly secure, and we cannot guarantee absolute security. In the event of a personal data breach affecting Customer Data, we will notify affected organizations without undue delay in accordance with our Data Processing Agreement.

We retain account and usage data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. Customer Data is retained for the duration of the organization's subscription and may be deleted after termination in accordance with our retention schedule, unless retention is required by law.

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict the processing of your personal information, or to object to certain processing or request data portability. To exercise these rights regarding your own account data, contact privacy@faith-links.com.

Requests regarding Customer Data (member information stored by your organization) should be directed to the organization that controls that data.

The Services may process and store data in Canada and other countries where our service providers operate. By using the Services, you consent to the transfer of personal information to these countries, subject to appropriate safeguards as required by applicable law.

The Services are not directed to children under 18. Organizations may store limited information about minors (e.g., children of members for check-in purposes); the organization is responsible for obtaining parental consent where required. We do not knowingly collect personal information directly from children. If you believe we have, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify account administrators of material changes by email or through the Services. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

For privacy questions or requests, contact privacy@faith-links.com.