Last updated: October 2026
Your privacy matters to us. This Privacy Policy explains how Timely Church LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use TimelyChurch.
Timely Church LLC is a Texas limited liability company that provides the TimelyChurch church management platform. For purposes of data protection laws, we act as the "data controller" for information we collect directly from you about your use of our website and Service. When you use our Service to manage your church members' data, your organization is the data controller for that member data, and we act as a "data processor" on your behalf.
When you use TimelyChurch, you may provide us with:
When you use our Service, we automatically collect:
We use the information we collect to:
We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:
We share information with trusted third-party service providers who help us operate our Service, including:
These providers are contractually obligated to protect your information and may only use it to provide services to us. They cannot use your information for their own marketing purposes.
We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
We may share your information with third parties when you explicitly consent to such sharing.
Churches on a plan that includes bank sync can connect a church bank account to the Accounting module. We use Stripe Financial Connections, a service of Stripe, Inc., for this. When a church connects a bank account, Stripe Financial Connections collects transaction and balance data with the church's consent; TimelyChurch never sees bank credentials.
A church administrator with finance permissions chooses "Connect bank" in Accounting. Stripe's own secure window opens, the account holder signs in at their bank inside Stripe's window and gives explicit consent to share the account's data. The bank login happens entirely between the account holder, their bank and Stripe. TimelyChurch never asks for, receives or stores bank usernames, passwords or other login credentials.
Through Stripe we receive only:
We never receive full account numbers, routing numbers, bank login credentials or account-ownership details.
We use this data for one purpose: importing the church's own bank transactions into its TimelyChurch accounting records, where the church's finance users review each transaction and accept or exclude it for bookkeeping and reconciliation. We do not use bank data for advertising, profiling or any other purpose, and we never sell it.
Stripe is our service provider and data aggregator for bank connections and handles this data under its own privacy policy at https://stripe.com/privacy. We share bank data with no one else, except as the church itself directs, for example with the church's own accountant users within TimelyChurch.
Connection details (bank name, account type, last four digits, status and the latest balance) are kept while the bank account stays connected. Disconnecting the account stops all future access to the bank data. Transactions that the church has imported into its books are the church's own accounting records and stay there until the church deletes them or deletes the account. When a church closes its TimelyChurch account, this data is deleted together with the rest of its information as described in the Data Retention section below.
A church can end a bank connection at any time:
The rights described in "Your Rights and Choices" below (access, correction, deletion and the others) apply to this data too.
Bank data is encrypted in transit between the bank, Stripe and TimelyChurch and is protected by the measures described in the Data Security section. Within TimelyChurch, only the church's users with finance permissions can see connected accounts and imported transactions. Because the bank login takes place in Stripe's window, no bank credentials are ever stored by TimelyChurch.
We implement appropriate technical and organizational security measures to protect your information, including:
Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You acknowledge this risk and use the Service with this understanding.
We retain your information for as long as:
If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, accounting, or compliance purposes.
Depending on your location, you may have certain rights regarding your personal information:
To exercise these rights, contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.
We use cookies and similar technologies to:
Types of cookies we use:
You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality of the Service.
Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access through our Service.
TimelyChurch is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at [email protected], and we will take steps to delete such information.
When you use TimelyChurch to manage your church members' personal data, your organization acts as the data controller for that data. You are responsible for: (a) obtaining appropriate consent from your members for the collection and use of their data; (b) ensuring the accuracy and quality of member data you input; (c) providing your members with information about how their data is used; and (d) complying with applicable data protection laws. We process member data on your behalf as a data processor according to your instructions.
Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws different from your country. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional rights and information apply under the General Data Protection Regulation (GDPR) and UK GDPR.
We process personal data only where we have a lawful basis to do so, including: (a) your consent; (b) performance of a contract with you; (c) compliance with a legal obligation; and (d) our legitimate interests in operating, securing, and improving the Service, where those interests are not overridden by your rights.
Subject to applicable law, you have the right to: access your personal data; request rectification of inaccurate data; request erasure ("right to be forgotten"); request data portability in a structured, commonly used, machine-readable format; restrict or object to processing; and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.
Where we transfer personal data outside the EEA or UK, we rely on an appropriate transfer mechanism under Article 46 of the GDPR, such as the European Commission's Standard Contractual Clauses (SCCs) (and the UK International Data Transfer Addendum where applicable), to ensure your data remains protected.
For organizations that act as data controllers and use our Service to process member data, a Data Processing Agreement (DPA) is available on request. Please contact [email protected] to request a copy.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:
To exercise these rights, contact us at [email protected].
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:
Timely Church LLC
Timely Church LLC, [mailing address], Texas, USA
Privacy Inquiries: [email protected]
General Inquiries: [email protected]