Privacy Policy

When a church uses Shepherd Station, we store what it enters and what the platform needs to function: organization details, team member accounts, contacts and their information, messages, form submissions, giving records, website content, and advertising settings. This data belongs to the church. We use it only to operate the service, never sell it, and never share it between churches — each organization's data is isolated from every other's.

When someone visits a church website or submits a form on one, that church receives the information. We process it on the church's behalf so the website, forms, and follow-up work. If you have questions about how a church uses your information, contact that church directly — it controls the data.

Church websites on Shepherd Station can use Google Analytics, Google Ads, and Meta (Facebook) measurement tools so the church can understand its visitors and improve its outreach. These tools only load after a visitor in a region that requires consent accepts cookies through the site's consent banner. Visitors can decline, and can change their choice at any time. Declining means the church's measurement tools don't run for that visitor.

Subscriptions to Shepherd Station are processed by Stripe, and giving payments are processed on each church's own payment account. Card and bank details go directly to the payment provider and never pass through our servers in full. We retain only the records needed to confirm that payments happened.

Texts and emails sent through the platform are sent on behalf of the church using providers it has authorized (such as Twilio and our email delivery provider). Message delivery events (sent, delivered, failed) are recorded so the church can see what happened. Reply STOP to opt out of texts from a church; churches are expected to honor opt-outs.

We keep an organization's data while its account is active. After an account closes, data remains exportable for a reasonable period and is then deleted. Standard service records (like billing history) are kept as long as legally required.

Access to data is restricted by role and by organization, protected with encrypted connections, and audited. We limit internal access to what's needed to support churches and operate the platform.

Team members can update their account details in the app. Individuals whose information a church holds may request access, correction, or deletion from that church. You can also contact us at support@shepherdstation.app and we will pass the request to the church and assist.

We may update this policy as the service evolves. The date at the top shows the latest version, and material changes will be communicated to church owners.