Privacy notice

Public browsing requires no church account. Invited member and administrator accounts collect a name, email address, a salted and computationally hardened password verifier, security-session records, role, and acknowledgement of these policies. If you choose biometric or passkey sign-in, we also retain its public credential; biometric data remains on your device. Member invitations also create a church person record and retain only a keyed hash of the private activation-link token.

Card and bank details are entered on Stripe-hosted pages and are not stored by Truth Seeker Church.

Prayer, pastoral care, household, minor-safety, and giving records receive narrower permissions than ordinary contact information. Sensitive text is encrypted at rest and access is recorded in an audit trail.

We do not use ancestry, ethnicity, health, care, or giving data to rank spiritual worth or target fundraising.

Information supports the service you requested: authentication, gathering participation, pastoral care, group coordination, volunteer scheduling, receipts, reconciliation, security, and required legal administration. New uses require an appropriate notice and consent where required.

Current infrastructure includes OpenAI for managed site deployment and Cloudflare-powered edge delivery, database, storage, and security controls. Passkeys are created and may be synchronized by the device or password-manager provider you choose. Stripe processes online gifts on its hosted checkout pages. Member invitation details are currently delivered manually by an authorized church administrator; we do not currently use an email-delivery provider for account setup.

Optional passkey challenges expire after five minutes. Pending member invitations expire after the duration selected by the administrator, and revoked or completed invitations cannot be reused. Administrator sessions expire after seven days and require sign-in again after 24 hours of inactivity. Member sessions expire after 30 days and require sign-in again after seven days of inactivity. Account and audit records are kept while needed to operate and secure the ministry; future financial records will follow applicable legal retention duties. You may request access, correction, or deletion, subject to security, safeguarding, legal, and record-integrity requirements.

You can browse without an account, control communications, choose the sharing scope for prayer, request profile correction, and opt out of public recognition. Care, belonging, and participation never depend on marketing consent.

Email Matthew@truthseekerchurch.com with a privacy request or question. Material changes will show a revised effective date and a plain-language summary.