Privacy policy.
Effective date: September 4, 2026
1. Who we are
ChurchOS is operated by Isai Gustavo Cespedes Sanchez, Avenida Moscu 6175, Santa Cruz de la Sierra, Bolivia. For any question about this policy or to exercise your rights, contact cespedesisai88@gmail.com.
2. Two roles: processor and controller
ChurchOS plays two different roles depending on whose data is involved. For a church administrator's own account, ChurchOS is the controller: we decide why and how that account data is used, as described below. For the data a church records about its congregation -- members, visitors, attendance, donations -- the church itself is the controller and ChurchOS is only the processor, acting on the church's instructions under a data processing agreement. If you are a church member and want to exercise a data-protection right, direct your request to your church, not to ChurchOS.
3. Data we hold about account holders
For the person who signs in to ChurchOS (a church administrator or invited staff member), we hold: name, email address, a password hash, session records, IP address and browser user agent in security logs, and invitation records.
4. Purposes and legal bases
We process account data to provide the service (performance of a contract), to keep it secure and prevent abuse and to monitor for errors (legitimate interest), and where the law requires it (legal obligation).
5. Sub-processors
We use the following sub-processors to run ChurchOS. Most of them store data in the United States; transfers from the European Economic Area to those vendors rely on each vendor's EU-US Data Privacy Framework certification and/or Standard Contractual Clauses. Sentry, our error monitoring provider, stores data in the European Union.
6. Retention
Account data is kept while the account exists, and for 30 days after a deletion request. Security logs are kept for 90 days. Data a church records about its congregation is kept according to that church's own instructions and the data processing agreement between ChurchOS and the church.
7. Your rights
For account data where ChurchOS is the controller, you have the right to access, rectify, erase or restrict your data, to receive it in a portable format, to object to our processing, to withdraw consent where processing relies on it, and to lodge a complaint with a supervisory authority. To exercise any of these rights, contact cespedesisai88@gmail.com.
8. Cookies
ChurchOS uses only strictly necessary cookies: one to keep you signed in and one to remember your language preference. Our page analytics is cookieless and collects no personal data. Because we set no non-essential cookies, no cookie banner is needed.
9. Children
ChurchOS is a tool for churches, not a service offered directly to children. A church decides for itself what data it records about minors in its congregation, under its own legal basis and safeguarding policy.
10. Changes to this policy
We may update this policy as ChurchOS changes. The date above is when this version took effect.