Privacy Policy

1. Who We Are

Timely Church LLC is a Texas limited liability company that provides the TimelyChurch church management platform. For purposes of data protection laws, we act as the "data controller" for information we collect directly from you about your use of our website and Service. When you use our Service to manage your church members' data, your organization is the data controller for that member data, and we act as a "data processor" on your behalf.

2. Information We Collect

2.1 Information You Provide Directly

When you use TimelyChurch, you may provide us with:

• Account Information: Name, email address, phone number, password, and profile information when you create an account
• Organization Information: Church or organization name, address, contact details, and logo
• Member Data: Names, contact information, family relationships, birthdays, custom fields, and other data you add about your members
• Payment Information: Billing address and payment card details (securely processed by our third-party payment processor; we do not store full card numbers)
• Communications: Messages, emails, and other content you send through our Service or to our support team
• Content: Events, schedules, announcements, and other content you create using the Service

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Usage Data: Features used, actions taken, pages viewed, and interactions with the Service
• Device Information: Browser type and version, operating system, device type, and screen resolution
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies and Similar Technologies: Small data files and identifiers used to remember your preferences and improve your experience

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the TimelyChurch Service
• Process your registration and manage your account
• Process payments and send billing-related communications
• Send you transactional notifications, such as confirmations and reminders
• Respond to your comments, questions, and support requests
• Send you updates, newsletters, and marketing communications (with your consent, where required)
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues, fraud, and security threats
• Comply with legal obligations and enforce our Terms of Service

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate our Service, including:

• Cloud Hosting and Storage: For hosting our platform and storing your data
• Payment Processors: For processing subscription payments and donations (e.g., Stripe)
• Email Providers: For delivering emails
• Analytics Providers: For understanding how our Service is used
• Customer Support Tools: For managing support tickets and communications

These providers are contractually obligated to protect your information and may only use it to provide services to us. They cannot use your information for their own marketing purposes.

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• SSL/TLS encryption for all data transmission
• Encryption of data at rest
• Regular security assessments and updates
• Access controls limiting who can view your data
• Secure password hashing
• Firewalls and intrusion detection systems

6. Data Retention

We retain your information for as long as:

• Your account is active
• As needed to provide you with our services
• As required to comply with our legal obligations
• As necessary to resolve disputes and enforce our agreements

If you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, accounting, or compliance purposes.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Opt-Out: Unsubscribe from marketing communications at any time

To exercise these rights, contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences and settings
• Understand how you use our Service
• Improve and personalize your experience
• Analyze trends and gather aggregate data

Types of cookies we use:

• Essential Cookies: Required for the Service to function properly
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how the Service is used

You can control cookies through your browser settings. Note that disabling certain cookies may limit functionality of the Service.

9. Third-Party Services and Links

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access through our Service.

10. Children's Privacy

TimelyChurch is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at [email protected], and we will take steps to delete such information.

11. Your Organization's Responsibility

When you use TimelyChurch to manage your church members' personal data, your organization acts as the data controller for that data. You are responsible for: (a) obtaining appropriate consent from your members for the collection and use of their data; (b) ensuring the accuracy and quality of member data you input; (c) providing your members with information about how their data is used; and (d) complying with applicable data protection laws. We process member data on your behalf as a data processor according to your instructions.

12. International Data Transfers

Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws different from your country. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

13. GDPR and UK GDPR (European Economic Area and United Kingdom)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional rights and information apply under the General Data Protection Regulation (GDPR) and UK GDPR.

13.1 Lawful Basis for Processing

We process personal data only where we have a lawful basis to do so, including: (a) your consent; (b) performance of a contract with you; (c) compliance with a legal obligation; and (d) our legitimate interests in operating, securing, and improving the Service, where those interests are not overridden by your rights.

13.2 Your Data-Subject Rights

Subject to applicable law, you have the right to: access your personal data; request rectification of inaccurate data; request erasure ("right to be forgotten"); request data portability in a structured, commonly used, machine-readable format; restrict or object to processing; and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

13.3 International Transfers

Where we transfer personal data outside the EEA or UK, we rely on an appropriate transfer mechanism under Article 46 of the GDPR, such as the European Commission's Standard Contractual Clauses (SCCs) (and the UK International Data Transfer Addendum where applicable), to ensure your data remains protected.

13.4 Data Processing Agreement

For organizations that act as data controllers and use our Service to process member data, a Data Processing Agreement (DPA) is available on request. Please contact [email protected] to request a copy.

14. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect and how we use it
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at [email protected].

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

16. Data Protection Contact

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us: