Privacy Policy

FaithForm Technologies LLC | FaithForm.io
Effective Date: October 20, 2026 Last Updated: September 20, 2026 
1. Introduction
Welcome to FaithForm.net ("Company," "we," "our," or "us").
We provide automation tools, AI-powered communication systems, and operational support services for churches and faith-based organizations.
This Privacy Policy explains how we collect, use, disclose, and protect your information when you:
• Visit our website
• Use our software platform
• Use our AI phone agents
• Submit information through forms
• Communicate with us
Scope note. This policy governs our website and the FaithForm platform used by churches and their staff. The FaithForm mobile apps for iPhone and Android, and the public giving pages used by congregants, are governed by a separate privacy policy available at faithform.io/privacy. Where a congregant uses the apps, that policy applies to their account; this policy continues to apply to the church's own use of the platform.
By using our services, you agree to this Privacy Policy.
2. Information We Collect
A. Information You Provide Directly
We may collect:
• Name
• Email address
• Phone number
• Church or organization name
• Billing information
• Uploaded documents
• Message transcripts
• Audio recordings
B. Automatically Collected Information
When you visit our website, we may collect:
• IP address
• Browser type
• Device information
• Pages visited
• Cookies and usage data
We use analytics tools (e.g., Google Analytics or similar) to improve our services.
C. AI and Communication Data
If you use our AI phone system or automation features, we may process:
• Call recordings
• Call transcripts
• Messages
• Form submissions
• Appointment data
• Calendar data
This data is processed solely to provide the service.
D. Google API Services Data
FaithForm uses Google API Services to access data on behalf of church clients who have authorized such access through the Google OAuth consent process. This may include:
• Google Calendar: We read and write calendar events to support appointment scheduling, service planning, and operational automation workflows.
• Gmail: We read email content and metadata to support communication automation workflows, including automated follow-ups, form-triggered responses, and inbox management features that a church client has enabled.
How we use Google API data: We use Google API data solely to provide the specific features and automation workflows that the church client has enabled. We do not use Google API data to develop, improve, or train generalized AI or machine learning models. We do not use Google API data for advertising purposes. We do not sell or transfer Google API data to third parties except as necessary to provide the service to the client who authorized the access.
Compliance with Google's Limited Use Policy: FaithForm's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. For more information, visit: developers.google.com/terms/api-services-user-data-policy
Revoking Google access: Church administrators may revoke FaithForm's access to their Google account at any time by visiting their Google Account permissions settings at myaccount.google.com/permissions. Revoking access will disable features that depend on Google Calendar or Gmail integration.
E. Social Media Platform Data
If a church client connects their Facebook Page to FaithForm, we may access and process:
• Facebook Page posts, comments, and engagement data
• Private messages sent to the connected Facebook Page
• Page audience and reach metrics
How we use Facebook Page data: Facebook Page data is used solely to provide the social media automation and communication features that the church client has enabled, such as automated replies to inquiries, post scheduling, and message routing. We do not use Facebook Page data to develop or train AI models. We do not use Facebook Page data to target advertising. We handle Facebook Platform data in accordance with Meta's Platform Terms.
Important notice to congregants: When you send a message to a church's Facebook Page, that message may be processed by FaithForm's systems as part of the communication automation features the church has enabled. If you have questions about how your message is handled, please contact the church directly.
Revoking Facebook access: Church administrators may disconnect their Facebook Page from FaithForm at any time through the FaithForm platform settings.
F. Children's Data
Where a church client uses FaithForm features that process personal information about children under 13 — for example, children's ministry check-in — the church is the operator responsible for providing direct notice to parents and obtaining verifiable parental consent under the Children's Online Privacy Protection Act (COPPA). FaithForm processes that information only on the church's instructions.
We publish a Children's Data Retention Schedule describing what categories of children's information we hold, how long we hold each category, and how it is deleted.
We do not collect photographs, biometric identifiers (including face templates, fingerprints, and voiceprints), or device location of children under 13. We do not use children's information for advertising or to train any AI or machine learning model.
A parent may request to review their child's information, or to refuse its further use or collection, by contacting their church or emailing us at support@faithform.io. We will action a deletion instruction within 30 days.
3. How We Use Your Information
We use collected information to:
• Provide and maintain our services
• Process payments
• Improve platform functionality
• Communicate with users
• Provide customer support
• Comply with legal obligations
• Improve and develop FaithForm's AI workflows, using only data that originates within the FaithForm platform through a church's own administrative and operational use — such as form submissions, scheduling data entered directly into FaithForm, and call transcripts generated by FaithForm's systems — and only in de-identified and aggregated form.
Data we never use to train, develop, or improve any AI or machine learning model. For the avoidance of doubt, the following are excluded from the bullet above without exception:
• (a) Data obtained through Google API Services, including Gmail and Google Calendar; through Facebook or Meta API connections; or through any other third-party API integration;
• (b) Individual congregant giving records, pledge history, gift amounts, or payment data;
• (c) Individual congregant attendance, check-in, or service-participation records;
• (d) Any location data, and any data derived from location, including geofence results, arrival records, and check-in location outcomes;
• (e) Personal information of any individual under the age of 13;
• (f) Any data that identifies, or is reasonably linkable to, an individual congregant's religious participation or affiliation.
We do not sell your personal data.
4. How We Share Information
We may share data with the following third-party service providers ("Sub-Processors") who support our ability to deliver services:
Sub-Processor
Category
Purpose
Supabase
Infrastructure / Database
Database, authentication, and file storage for the FaithForm platform and apps
Vercel
Infrastructure / Hosting
Website, application, and server hosting; compute and edge delivery
OpenAI
AI Processing
Natural language processing, AI-generated responses, call transcript analysis
Anthropic (Claude)
AI Processing
AI reasoning, workflow automation, content generation features
Google Cloud AI
AI Processing
AI processing and speech-to-text
Stripe
Payment Processing
Subscription billing; processing of congregational gifts on the church's own connected Stripe account
Resend
Email Delivery
Delivery of transactional email, including receipts, notifications, and account messages
Apple
Notification Delivery
Delivery of push notifications to iOS devices via Apple Push Notification service
Google
Notification Delivery
Delivery of push notifications to Android devices via Firebase Cloud Messaging
Analytics Providers
Analytics
Website and platform usage analytics (e.g., Google Analytics)
Legal Authorities
Legal
As required by applicable law, court order, or legal process
All Sub-Processors are contractually required to protect your data and are permitted to use it only for the specific purposes described above. We will update this Sub-Processor list when we add or change material Sub-Processors and will provide at least 30 days' notice of such changes to active clients.
5. Data Retention
We retain data only as long as necessary to:
• Provide services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements
Personal information about children under 13 is retained according to our published Children's Data Retention.
Users may request deletion of their data by contacting us at: support@faithform.io
6. Security
We implement commercially reasonable safeguards, including:
• Encrypted data transmission (SSL/TLS)
• Secure cloud storage
• Access controls
• Limited personnel access
However, no system can be guaranteed 100% secure.
6A. Security Incident Notification
In the event that we discover or are notified of a security incident that results in the unauthorized access, acquisition, or disclosure of your personal information or your organization's data, we will:
• Notify affected church clients within 72 hours of confirming a breach that affects their data, to the extent permitted by law and our ability to identify affected parties.
• Provide a description of the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it.
• Work with you to meet any applicable breach notification obligations under Kentucky law (KRS 365.732) or other applicable law.
• Promptly investigate and take reasonable steps to contain the breach and prevent further unauthorized access.
Sub-Processor breaches: We require our Sub-Processors to notify us without undue delay if they experience a security incident affecting FaithForm data. We will pass through any such notifications to affected clients in accordance with this section.
To report a security concern: support@faithform.io
7. Your Rights
Depending on your location, you may have rights to:
• Access your data
• Correct inaccurate information
• Request deletion
• Withdraw consent
• Opt out of certain communications
To exercise these rights, contact: support@faithform.io
8. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date. For material changes affecting how we process your data, we will provide at least 30 days' notice to active clients by email before the change takes effect.
9. Contact Information
FaithForm Technologies LLC

4302 Taylorsville Rd Louisville, KY 40220

Email: support@faithform.io