Privacy Policy

Account and identity information. We may collect your name, email address, profile details, authentication identifiers, verification status, organization memberships, staff role, and account-security information.

Organization and workflow information. We collect organization names, assignments, prospects, invitation status, CRM notes, onboarding information, templates, audit activity, support requests, and other information users enter while managing a workspace.

Merchant and application information. Depending on the workflow, users may provide business contact information, processing-review details, onboarding responses, statements, documents, and configuration information. Financial and identity-sensitive information should be submitted only through the secure flow intended for it.

Contact-import information. If you choose an import method, we may receive names, email addresses, and phone numbers from Google Contacts, Microsoft 365, a supported device address book, CSV files, or vCards. Records are sent to our service for preview and duplicate checks. Confirmed saves are organization-level import records and may be visible to authorized users in the active organization, not only the importer. Saving does not itself send invitations.

Statement-review uploads. We store the original statement in private file storage for authorized program staff to prepare the requested review. Its contents are sent to Google Gemini through Replit AI Integrations for extraction; extracted information is then sent to Anthropic through Replit AI Integrations for fee classification. AI-assisted results support a staff-reviewed analysis. We record the notice version and acknowledgment time for the upload session. We do not automatically redact the file before storage or analysis. Remove sensitive banking, identity and full card information before uploading; if you cannot remove it, ask our team for another way to proceed. Sensitive information required for a processing account belongs in the separate provider-hosted application.

Technical and usage information. We may collect IP address, browser and device information, timestamps, log information, security events, pages or features used, and cookie or similar technology data.

• Provide accounts, organization workspaces, roles, onboarding, prospect management, templates, support, and related features.
• Process selected contact imports and queue or send authorized communications.
• Authenticate users, verify access, prevent fraud, protect the Service, and investigate misuse.
• Store uploaded records and maintain audit, security, operational, and legal records.
• Improve reliability, troubleshoot issues, measure feature performance, and develop the Service.
• Respond to requests, enforce our Terms, comply with legal obligations, and protect rights and safety.

Within your organization. Information may be visible to authorized organization administrators, staff, ambassadors, or other users according to workspace permissions and the workflow they are authorized to perform.

Service providers. We share the information needed to operate the Service with infrastructure, authentication, database, object-storage, statement-analysis AI, email, security, and support providers, including the AI integrations described above. These providers are expected to process information for service purposes and under appropriate safeguards.

Connected services you choose. When you connect Google Contacts or Microsoft 365, the relevant provider shares the contact data needed for the import after you authorize it. We do not use those connections to access more information than the selected workflow requests, and we do not sell imported contact data.

Legal and business reasons. We may disclose information when required by law, valid legal process, an emergency involving safety, to investigate abuse, or as part of a merger, acquisition, financing, or transfer of the Service with appropriate confidentiality protections.

We do not sell personal information to third-party advertisers. We do not grant a public, perpetual license to private merchant or organization records.

For California privacy disclosures, the categories of personal information we may collect are identifiers and account/contact details; organization, merchant, and other commercial or workflow records; internet, device, and site-activity information; and information you choose to provide through support or contact-import workflows. We receive this information from you, your organization’s authorized users, your device and browser, and connected services you choose to use.

We use these categories to provide accounts and workspaces, handle onboarding and communications, secure and troubleshoot the Service, maintain operational and legal records, and improve reliability. We may disclose relevant categories to service providers that host, authenticate, store, secure, or support the Service; authorized users in your organization; connected services you select; and legal or business recipients when permitted or required by law.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. The website currently has no third-party advertising pixels, analytics beacons, or similar optional tracking scripts. Essential session, security, and operational technologies may still be used to provide the Service. We will update this notice and keep future non-essential tracking scripts blocked unless you allow them.

We honor Global Privacy Control (GPC) signals as an opt-out of sale or sharing: when your browser sends GPC, optional tracking is denied, any prior tracking permission is overridden, and the consent banner is suppressed. You can use the “Do Not Sell/Share My Personal Information / Privacy Choices” control in the footer to review or change your preference when GPC is not active.

Tracking choices are saved in this browser and apply across the website and application. Use the privacy control on each browser or device you use. Clearing browser storage may remove a saved choice; a GPC signal is still honored whenever it is present. Opting out blocks future website tracking and may reload a page to stop previously loaded tracking; it does not erase information already transmitted.

California residents may submit requests to know/access, correct, or delete personal information and may exercise applicable opt-out and limitation rights. We will verify and respond as required by law, and legal, security, and financial-record exceptions may apply. To make a request, contact info@congregationcommerce.com. We do not discriminate against people for exercising privacy rights.

We use essential cookies and similar technologies to maintain authenticated sessions, remember privacy choices, secure the Service, and prevent fraud. These technologies are necessary for the requested service. Non-essential tracking scripts, including analytics or advertising beacons, are blocked until you allow optional tracking; you can change your choice at any time using the footer privacy control. Your browser may also provide a Global Privacy Control signal, which we honor as described above.

Emails or invitation links may include basic interaction or delivery signals when the relevant provider supports them. Those email signals are separate from website tracking preferences and are used for workflow status, security, and service operations.

We retain information for as long as needed to provide the Service, maintain organization and audit records, resolve disputes, prevent abuse, meet legal or financial obligations, and enforce agreements. Retention varies by record type.

Removing a contact from a local import list does not automatically erase an invitation queue record, prospect, audit event, or other record already created by an authorized workflow. Subject to legal and operational limits, you may request deletion of personal information through your organization administrator or by contacting us.

Disconnecting or revoking Google or Microsoft access does not delete records already saved to this Service. Removing saved records does not revoke access at the provider. Those are separate choices.

We use reasonable safeguards appropriate to the nature of the information, including authenticated access, role-based permissions, secure transport, protected storage, logging, and provider security controls. No transmission or storage system is completely secure, so we cannot promise absolute security.

Never send passwords, authentication codes, full card numbers, or bank credentials through an ordinary message or public intake form. If you believe information or an account has been compromised, contact us promptly.

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of certain personal information, or to object to certain processing. Organization-managed information may need to be handled through the organization that controls the workspace. We may verify your identity before completing a request and may retain information where the law permits or requires it.

To request privacy assistance, email info@congregationcommerce.com. You may also stop optional invitations or communications by following the applicable opt-out instructions or contacting the organization that sent them.

The Service is intended for adults and business or organization use. We do not knowingly collect personal information from children under 13. If you believe a child provided information to us, contact us so we can review and delete it where appropriate.

Our providers may process information in countries other than where you live. Their handling is governed by their own terms and privacy policies. The Service may link to third-party sites or applications; we are not responsible for their independent privacy practices.

We may update this Privacy Policy as the Service, providers, or legal requirements change. We will post the revised policy with a new “Last updated” date. Questions or privacy requests may be sent to info@congregationcommerce.com.