Privacy Policy
Effective: September 9, 2026 · ChurchConnect, LLC · San Francisco Bay Area, California
1. Introduction and Scope
ChurchConnect, LLC ("ChurchConnect," "we," "us," or "our") operates the online marketplace at churchxconnect.com (the "Platform"), connecting churches with independent ministry professionals. This Privacy Policy explains what personal information we collect, how we use and protect it, with whom we share it, and what rights you have — including the specific rights afforded to California residents under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA), as amended.
By accessing or using the Platform, you agree to this Privacy Policy. If you do not agree, please do not use the Platform.
2. Information We Collect
We collect personal information in three ways:
a. Information you provide directly
- Name, email address, and password (account registration)
- Phone number (if provided, used for SMS notifications with your consent)
- Profile information: bio, ministry category, location, rate, skills, social links
- Photos, videos, and other media you upload
- Messages and communications through the Platform
- Payment information — processed by Stripe; we do not store card or bank numbers
- Tax identification numbers (SSN/EIN) for Partners, required for IRS 1099 reporting
- Government ID provided during Stripe identity verification
b. Information collected automatically
- IP address, browser type, device type and operating system
- Pages visited, time spent on pages, links clicked
- Referring URLs and search terms
- Session identifiers and authentication tokens (via cookies/localStorage)
c. Information from third parties
- Background check results (from consumer reporting agencies, for qualifying Partners)
- Stripe: payment verification and payout status
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate your identity
- Display your public profile to churches and Platform visitors
- Facilitate communication and bookings between churches and Partners
- Process payments, hold escrow funds, and issue payouts
- Send transactional emails (account confirmation, booking confirmations, dispute notices)
- Send SMS notifications (with your explicit prior consent)
- Comply with legal obligations, including IRS 1099 reporting and FCRA/ICRAA requirements
- Enforce our Terms of Service and investigate potential violations
- Improve, personalize, and secure the Platform
- Analyze usage trends to develop new features
Legal basis (where required): We process personal information on the basis of contractual necessity (to perform the services you signed up for), legal obligation (tax reporting, background check compliance), and legitimate business interests (security, fraud prevention). Marketing emails require your consent.
4. Information Sharing
We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. We may share information in the following limited circumstances:
- Other users (public profile): Your public profile — name, photo, bio, category, location, rate, skills, and links — is visible to all Platform visitors. Contact requests are shared with the intended recipient. Non-public information (such as phone number, email, or tax ID) is never shared with other users without your consent.
- Service providers (processors): We share data with vendors who process it on our behalf under confidentiality agreements:
- Supabase — database hosting and user authentication
- Stripe, Inc. — payment processing, identity verification, payout services
- Resend — transactional email delivery
- Consumer Reporting Agencies — background checks (Partners only, with required disclosures and consent)
- Legal requirements: We may disclose information if required by law, court order, or governmental authority, or when necessary to protect the rights, property, or safety of ChurchConnect, our users, or the public.
- Business transfers: If ChurchConnect is involved in a merger, acquisition, or asset sale, your personal information may be transferred as a business asset. We will notify you via email or Platform notice before any such transfer and before your information becomes subject to a different privacy policy.
5. Your Public Profile
When you create a Partner profile, the following information is publicly visible: name, photo, bio, ministry category, location, rate, skills, social media links, and uploaded media. Please only include information you are comfortable sharing publicly. You can update or remove profile information at any time through your account settings.
6. Data Security
We implement industry-standard technical and organizational security measures to protect your personal information, including:
- Encryption in transit (TLS 1.2+/HTTPS on all pages)
- Encrypted database storage (at rest)
- Role-based access controls — only authorized personnel can access personal data
- Row-level security on our database to prevent unauthorized cross-user data access
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify you and any applicable regulatory authorities as required by law.
7. Cookies and Tracking
We use session cookies and browser localStorage to maintain your authenticated session and remember your preferences. We do not use third-party advertising cookies or sell cookie data. You can disable cookies in your browser settings, but some features of the Platform may not function without them. We do not currently respond to "Do Not Track" browser signals, as no uniform standard for their interpretation exists.
8. California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA, Civil Code §1798.100 et seq.) and the California Privacy Rights Act (CPRA) give you the following rights with respect to your personal information:
Right to Know (§1798.100)
You may request that we disclose the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources, the business or commercial purpose, and the categories of third parties with whom it was shared.
Right to Delete (§1798.105)
You may request that we delete the personal information we have collected about you, subject to certain exceptions (e.g., where retention is required to complete a transaction, comply with a legal obligation, or prevent fraud).
Right to Correct (§1798.106)
You may request that we correct inaccurate personal information we maintain about you. You can also update most information directly in your account settings.
Right to Opt Out of Sale or Sharing (§1798.120)
We do not sell or share your personal information for cross-context behavioral advertising. If that ever changes, we will update this policy and provide a "Do Not Sell or Share My Personal Information" link on our homepage before doing so.
Right to Limit Use of Sensitive Personal Information (§1798.121)
We collect government ID and SSN/EIN only for legally required payment processing and tax reporting. We do not use this information for any other purpose.
Right to Non-Discrimination (§1798.125)
We will not discriminate against you for exercising any CCPA rights. We will not deny services, charge different prices, or provide a different level of service because you exercised a privacy right.
How to Exercise Your Rights
To submit a verifiable consumer request, email helpcc@churchxconnect.com with the subject line "California Privacy Request" and your account email. We will verify your identity and respond within 45 days (extendable once by an additional 45 days with notice). You may submit up to 2 requests per 12-month period. Requests are free of charge.
You may designate an authorized agent to submit a request on your behalf; we will require written permission and identity verification before honoring an agent's request.
Shine the Light (California Civil Code §1798.83)
California residents may request a list of the categories of personal information we disclosed to third parties for their direct marketing purposes in the preceding calendar year. We do not share personal information for direct marketing. Contact us to confirm.
9. Your Rights (All Users)
Regardless of your state of residence, you have the right to:
- Access and review the personal information we hold about you
- Correct inaccurate information through your profile settings
- Delete your account and associated data by contacting us
- Opt out of non-transactional marketing emails via the unsubscribe link
- Opt out of SMS notifications at any time by replying STOP
- Request a copy of your data in a portable format
To exercise these rights, contact us at helpcc@churchxconnect.com.
10. Children's Privacy
ChurchConnect is not directed to children under 13. We do not knowingly collect personal information from children under 13 (or under 16 where required by applicable law). If you are a parent or guardian and believe we have inadvertently collected information about a child, please contact us immediately at helpcc@churchxconnect.com and we will delete it promptly.
11. Data Retention
We retain your account information for as long as your account is active or as needed to provide services. If you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or compliance purposes (e.g., financial records required by tax law for 7 years, or backup copies subject to a 90-day automated deletion cycle). We will inform you of any applicable retention exception when you submit a deletion request.
12. SMS / Text Message Communications
ChurchConnect offers optional SMS text message notifications to members who provide a phone number and explicitly opt in during signup or in their account settings. By opting in, you agree to receive subscription renewal reminders and related account notifications via text message.
- Consent: SMS enrollment requires you to check the opt-in box on the signup form. This box is unchecked by default. Providing your phone number alone does not enroll you in SMS communications.
- Message frequency: You will receive no more than 2 subscription reminder texts per billing cycle (72-hour and 48-hour notices before renewal or expiration).
- Message & data rates: Standard message and data rates from your mobile carrier may apply.
- How to opt out: Reply STOP to any text message to immediately unsubscribe. You may also remove your phone number or disable SMS in your account settings at any time.
- Help: Reply HELP to any text message for assistance, or contact us at helpcc@churchxconnect.com.
- Carriers: Carriers are not liable for delayed or undelivered messages.
- Data: Your phone number is never sold or shared with third parties for marketing purposes. It is used solely to deliver messages you have consented to receive.
13. Changes to This Policy
We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 14 days before the new policy takes effect. The effective date at the top of this page reflects the most recent revision. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
14. Contact and Data Controller
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact:
ChurchConnect, LLC
Privacy Officer
San Francisco Bay Area, California
Email: helpcc@churchxconnect.com
For California residents wishing to submit a formal CCPA request, use the subject line "California Privacy Request" in your email.