1. What data we process

The MOS reads data from your existing church tools — Planning Center, your CRM, your communication platforms — to produce readiness reports, gap alerts, and content drafts. All reads are read-only. The MOS never writes back to your tools without an explicit, approved action.

Data types the MOS may read include: service schedules, minister assignments, confirmation statuses, people records (names, contact info, roles), attendance counts, and giving summaries (read-only, opt-in, and never written to).

2. Multi-tenant isolation

Each church is a separate tenant with isolated data, doctrine, voice, staff, and records. One church literally cannot read another's data. There is no path between tenants. This is enforced by architecture, not by access policy.

3. How we use your data

Your data is used solely to:

• Produce your daily Shepherd's Briefing and Ministry Pulse dashboard
• Detect gaps, missing sheep, and care needs in your flock
• Draft content (devotionals, blog posts, social clips) in your church's voice
• Log all operations to your tenant's stewardship record

We never sell, share, or use your data for advertising. Your data is not used to train models for other churches.

4. Data retention

Your data remains in your tenant for as long as your subscription is active. Upon cancellation, you may export your data and request deletion. The stewardship record (audit log) is retained for accountability purposes as required.

5. Cookies and local storage

The MOS landing page and Ministry Pulse dashboard use minimal local storage for display preferences only. No tracking cookies, advertising pixels, or third-party analytics are used on any MOS surface.

6. Third-party services

The MOS integrates with tools your church already uses — Planning Center, ActiveCampaign, Google Workspace, and others. Each integration is governed by that provider's own terms and privacy policy. The MOS reads from these services; it does not share your data with them.

7. Safety by architecture

Crisis alerts route to pastoral staff — the AI never contacts someone in crisis directly. Giving data is read-only. Anything touching a child is confined to pastors and oversight. These are properties of the design, not settings someone remembered to turn on.

8. Your rights

You may request: a copy of your tenant's data, correction of inaccurate data, deletion of your tenant's data, or an export of your stewardship record. Contact us at hello@acts6.app to exercise any of these rights.

9. GDPR (European Economic Area & United Kingdom)

If your church is located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR, and UK GDPR):

• Right of access — you may request a copy of the personal data we process on your behalf
• Right to rectification — you may request correction of inaccurate or incomplete data
• Right to erasure — you may request deletion of your tenant's data, subject to stewardship-record retention obligations
• Right to data portability — you may receive your data in a structured, machine-readable format and transmit it to another system
• Right to restrict processing — you may request that we limit processing to storage only
• Right to object — you may object to processing based on legitimate interests or for direct marketing (we do not engage in direct marketing)
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

Lawful basis for processing: The MOS processes data on the basis of contractual necessity (providing the services you have subscribed to) and legitimate interests (producing readiness reports and stewardship records essential to the service). We do not process special category data (health, religion, belief) beyond what your church itself inputs into its own tenant configuration.

Data retention: Tenant data is retained for the duration of your active subscription. Upon cancellation, you may export all data and request deletion within 30 days. The stewardship record (audit log) is retained for a minimum of 12 months after cancellation for accountability purposes, then deleted unless legal obligations require longer retention.

Data transfers: The MOS is hosted on Cloudflare's global network. Data may be processed in data centers outside the EEA/UK. We rely on Cloudflare's adequacy safeguards and Standard Contractual Clauses for any such transfers.

Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national DPA in the EEA) if you believe our processing of your data infringes your rights.

10. CCPA & CPRA (California)

If your church is located in California, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know — you may request disclosure of the categories and specific pieces of personal data we collect, use, or disclose
• Right to delete — you may request deletion of your personal data, subject to stewardship-record retention obligations
• Right to correct — you may request correction of inaccurate personal data
• Right to opt out of sale or sharing — we do not sell or share personal data for cross-context behavioral advertising. No opt-out is needed because no sale or sharing occurs
• Right to limit use of sensitive personal information — we do not use sensitive personal information beyond what your church itself configures in its own tenant
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at hello@acts6.app with the subject line "Privacy Request." We will verify your identity and respond within 45 days, as required by California law.

11. Contact

Questions about this policy or your data? Contact us at hello@acts6.app. For privacy-specific requests, use the subject line "Privacy Request" so we can route it promptly.

Last updated: October 2026. This policy may be updated as the MOS evolves; changes will be posted on this page.