Privacy Policy

1. Scope

This Privacy Policy applies to CFMConnect websites, member tools, public ministry profiles, church landing pages, events, prayer features, and related services (collectively, the “Service”). It applies whether you browse public pages, submit information, request access, or sign in to manage a profile.

2. Information we collect

• Account information: email address, authentication and session details, access status, account role, and security settings.
• Ministry and profile information: names, ministry roles, church affiliations, biographies, family details you choose to provide, contact details, photographs, service schedules, ministry history, prayer requests, and availability information.
• Church and event information: church names, addresses or approximate locations, websites, leaders, event details, flyers, speakers, registration links, and related media.
• Requests and communications: account applications, profile claims, corrections, content proposals, Tech Advisor requests, feedback, optional reply emails, and screenshots you intentionally attach.
• Location information: a city, state, country, ZIP or postal code you provide. If you choose “Use my device location,” your browser provides coordinates with your permission so nearby results can be calculated. CFMConnect does not durably store those device coordinates.
• Technical information: IP address, browser and device information, request logs, timestamps, cookie or session identifiers, and security or diagnostic information generated when the Service is used.

Information may come directly from you, authorized church or fellowship representatives, existing CFMConnect records, or publicly available fellowship sources such as CFMMap.org. Please submit information about another person only when you are authorized to do so.

3. How we use information

• Provide, operate, secure, and improve the Service.
• Authenticate members and administer profile claims, roles, and permissions.
• Publish and maintain church, leader, event, prayer, and fellowship-directory content.
• Power search, maps, nearby results, church lineage, event discovery, and prayer mode.
• Review submissions, respond to feedback, send service messages, and prevent misuse.
• Comply with legal obligations and enforce applicable policies.

Where applicable, we process information to provide the Service you request, based on consent (for example, device location), for our legitimate interest in operating a secure fellowship directory, or to meet legal obligations.

4. Public information

CFMConnect is designed in part as a public ministry directory. Content shown on public profiles, church landing pages, maps, events, search results, or prayer experiences can be viewed and shared by anyone. Private account information and fields marked for member-only use are not intentionally published. Review the information you submit and avoid adding confidential or sensitive details to public fields.

5. Unsplash photos

Some church landing pages display location images supplied by Unsplash. CFMConnect hotlinks those images from Unsplash's image network and displays photographer and Unsplash attribution. When an image loads, your browser contacts Unsplash directly, which may provide Unsplash with information such as your IP address, browser or device information, the image requested, and related interaction data. When a photo is first assigned to a church or changed, CFMConnect also calls the photo's download-tracking endpoint once as required by the Unsplash API rules; it is not called on every page view.

Unsplash handles that information under its own Privacy Policy.

6. When information is shared

We do not sell personal information or use it for third-party behavioral advertising. We may share or allow information to be processed in these circumstances:

• Service providers: Supabase provides authentication, database, and file storage; Vercel provides hosting and request processing; Resend may deliver administrative or service email; Unsplash supplies location photography; and mapping or geocoding features may use OpenFreeMap, OpenStreetMap/Nominatim, or Google Maps.
• Flyer extraction: when an authorized administrator chooses the automated event flyer import tool, the selected flyer is sent to OpenAI to extract event details.
• Authorized people and the public: information is shared with account administrators, approved Tech Advisors, church leaders, or the public according to the feature, permission, and visibility involved.
• Legal and safety reasons: we may disclose information when reasonably necessary to obey law, protect rights or safety, investigate abuse, or secure the Service.
• Organizational changes: information may be transferred as part of a merger, reorganization, financing, or transfer of the Service, subject to appropriate protections.

7. Cookies and local storage

CFMConnect uses cookies that are necessary for authentication, session continuity, security, and remembering your theme. The app may also use browser local or session storage for draft applications, display preferences, prayer-mode progress, and similar device-level features. These items can usually be cleared through your browser settings, although doing so may sign you out or remove saved drafts and preferences.

8. Retention and deletion

We retain information for as long as needed to operate the Service, maintain accurate fellowship records, resolve disputes, protect the Service, and meet legal obligations. Retention varies by record type. Feedback screenshots use time-limited access links, while underlying records or files may remain until they are reviewed or deleted. Deleted information may persist for a limited period in backups or security logs.

You may request access to, correction of, or deletion of your personal information by contacting us below. We may need to verify your identity and authority over a ministry record before acting on a request. Some information may be retained where the law permits or requires it.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing relies on consent. You can deny device-location access in your browser, clear cookies or local storage, and request corrections to public directory content. We will not discriminate against you for exercising applicable privacy rights.

10. Security and international processing

We use reasonable administrative, technical, and organizational safeguards intended to protect information. No online service can guarantee absolute security. CFMConnect serves an international fellowship, and information may be processed in countries other than your own, including the United States, where privacy laws may differ. We use service providers and safeguards appropriate to the information and processing involved.

11. Children

The Service is intended for adults and ministry organizations, not children under 13. A parent, guardian, or other authorized adult should provide any family information concerning a minor and should avoid publishing details that could create a safety or privacy risk. If you believe a child's information was submitted without appropriate authorization, contact us so we can review it.

12. Changes to this policy

We may update this policy as the Service or applicable rules change. We will post the revised policy here and update the date above. If a change is material, we may also provide notice in the Service or by email when appropriate.