Church Data Agreement
Last updated: September 11, 2026
This agreement describes our commitments regarding the data your church stores in Shepherd Station. It applies to every organization on the platform.
1. Your church owns its data
All member, visitor, giving, messaging, and content data your church enters into Shepherd Station belongs to your church — not to us. We claim no right to use it for anything other than running the service you've asked for.
2. Complete isolation between churches
Each organization's data is kept separate from every other organization's at the database level. No church can see another church's people, messages, giving, or content, and no church's data is used to serve or train anything for another church.
3. Limited, purpose-bound use by us
Our staff can only access church data when necessary to support that church — for example, when the church asks us to investigate a problem. We do not mine, sell, advertise against, or share church data with third parties, except the providers the church has authorized to deliver parts of the service (texting, email, payments, advertising platforms).
4. Giving money goes straight to the church
Online gifts are processed on the church's own connected payment account and deposited to the church's bank. The platform never holds, moves, or takes a percentage of giving. We store only the gift records the church needs for receipts and reporting.
5. Security
We protect church data with encrypted connections, role-based access controls within each church, per-organization isolation enforced in the database, and monitoring for misuse. We will notify affected churches promptly in the event of a data breach involving their data.
6. Export and deletion
Your church can export its people and giving data from the app at any time. When you close your account, we will provide your data on request, then delete it after a reasonable retrieval window — except records we must retain by law (such as billing history).
7. Consent and communications law
Churches are responsible for obtaining proper consent to contact their people and for honoring opt-outs. The platform provides consent capture on forms, consent-aware tracking, and opt-out handling to make this straightforward, but the church directs its own communications.
8. Sub-processors
The platform relies on hosting, database, email delivery, SMS/voice (Twilio), payment (Stripe), and bot-protection (Cloudflare) providers to deliver the service. We hold these providers to confidentiality obligations and only share the minimum data each needs.
9. Questions
Data questions or requests? Email support@shepherdstation.app.