Privacy Policy
DRAFT. NOT YET IN EFFECT. Must be reviewed by a qualified attorney before launch, and updated if you change providers. Bracketed items must be filled in. Not legal advice.
This policy explains how [COMPANY LEGAL NAME] ("Amenflow", "we") handles personal information when you use amenflow.com and the Amenflow app.
The short version
- Your recordings and content packs are private to your account. We don't publish, sell, or rent them, and we don't use them for advertising.
- You can delete a sermon or your whole account anytime in the app.
- We use one essential cookie (your login session). We don't use advertising or analytics cookies. [UPDATE IF YOU ADD ANALYTICS OR AD PIXELS. ADS.md PROPOSES CONVERSION TRACKING, WHICH WOULD REQUIRE CHANGES HERE.]
What we collect
| Information | Examples | Why |
|---|---|---|
| Account details | Email, password (stored only as a bcrypt hash), church name, pastor/speaker name | To create and secure your account |
| Your content | Recordings, podcast episode links you choose, documents, transcripts, generated outputs, "Ask your sermon" questions and answers | To provide the Service |
| Billing details | Plan, Stripe customer and subscription IDs, subscription status | To manage your subscription. Card details go directly to Stripe; we never see full card numbers |
| Usage and logs | Number of uploads, processing status, IP address and request logs, AI usage counts (tokens, cost) per sermon | Security, rate limiting, preventing abuse, plan limits, and troubleshooting |
| Emails we send | Which onboarding or account emails were sent to you, and when | To avoid duplicates and honor your email preferences |
Sermon recordings can include the voices of people other than the account holder, such as readers, worship leaders, or congregants. Please upload only recordings you have the right to share with us.
How we use it
We use this information to provide and improve the Service, process payments, send essential account emails (such as "your content pack is ready") and, unless you opt out, a few onboarding tips; to keep the Service secure; and to comply with the law. We do not use your content to train AI models.
Who processes it (subprocessors)
We share information only with providers that help us run the Service, under agreements that limit what they can use it for: - Hosting: [APP HOST, e.g. Fly.io / Hetzner / Railway] (app servers and storage) and Cloudflare (website delivery, DNS and security). - Payments: Stripe (subscriptions and invoices). - Email delivery: [EMAIL PROVIDER, e.g. Postmark / Amazon SES] (once enabled). - AI processing: By default, transcription and writing run on our own servers. [IF YOU SET LLM_PROVIDER=openai OR TRANSCRIBE_PROVIDER=openai, NAME THE PROVIDER HERE, e.g. "OpenAI / Groq processes transcripts and audio to generate content; under its API terms it doesn't use API data for training". VERIFY THE PROVIDER'S CURRENT DATA-RETENTION TERMS.] - Fonts: Pages load fonts from Google Fonts, which receives your IP address and browser information. [CONSIDER SELF-HOSTING THE FONTS TO REMOVE THIS.]
We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or acquisition (and we'll tell you if that happens).
Retention and deletion
- Your content is kept until you delete it or your account.
- Deleting a sermon immediately removes its recording, transcript, clips and generated content from our live systems. Deleting your account also removes your account details and cancels any subscription.
- Encrypted database backups are kept for up to [14] days and then overwritten, so deleted data disappears from backups within that time. Uploaded media files aren't included in database backups. [CONFIRM THIS MATCHES YOUR BACKUP SETUP.]
- We keep billing records as long as tax law requires. Basic logs are kept for up to [30] days.
Security
We use HTTPS, hashed passwords, CSRF protection, rate limiting, per-account access checks, and restricted server access. No system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.
Your choices and rights
You can view, download (DOCX, PDF, ZIP), correct, or delete your content and account in the app at any time, and you can turn off tip emails in Account settings or with the unsubscribe link. Depending on where you live (for example, California, Colorado, Virginia, or the EU/UK), you may have additional rights to access, correct, delete, or port your data, or to object to certain processing. Email [PRIVACY EMAIL] and we'll respond within the time the law requires. We don't sell or "share" personal information as California law defines those terms.
Children
Amenflow is for church staff and volunteers aged 18 and over. It isn't directed to children, and we don't knowingly collect personal information from children under 13. The "kids' lesson" output is written for teachers to use, not for children to use the Service.
International users
We're based in the United States and process data there. [ATTORNEY: ADD A TRANSFER MECHANISM IF YOU TARGET EU/UK USERS.]
Changes
We'll post updates here and email account owners about material changes before they take effect.
Contact
[COMPANY LEGAL NAME] · [MAILING ADDRESS] · [PRIVACY EMAIL]