Privacy Policy

Who this covers

This policy is published by Emberline Studio ("Emberline", "we", "us"), 115 E. Main St STE A1B-1150, Buford, GA 30518, for Emberline Essentials: the storefront at https://emberline-platform.old-wildflower-55a6.workers.dev, the customer portal, and the church and ministry websites we host (each a "Site"). The Emberline Studio website at emberline.studio has its own policy.

For subscribers (pastors, church staff and teammates they invite), we decide how data is used and are the controller. For visitors to a Site, the church is the controller and we process visitor data on the church's behalf as a processor. Each Site also carries its own privacy page, written for its visitors.

What we collect from subscribers

• Account details: your name, email address and the organization you sign up for.
• Billing: your payment is processed by Stripe. We receive your Stripe customer id, subscription status, the last four digits and brand of your card, and invoice history. We never see or store your full card number.
• Site content: everything you enter in the setup wizard and editor, including church name, address, service times, staff names and photos, logos, colors, and links to your YouTube, giving and live-stream accounts.
• Portal activity: sign-in events, edits, publishes, settings changes and support requests, with timestamps and IP addresses, kept as an audit log so you can see who changed what.
• Support messages: what you send us by email or through the portal.

What we collect from site visitors (as a processor)

• Form submissions: what a visitor types into a church's forms (for example name, email, optional phone, a prayer request, a booking request or a message), plus the time, the form used and an IP address for abuse prevention. Form submissions are delivered to the church and stored in the church's private inbox. We never publish them on the Site.
• Hosting logs: our hosting provider records standard request logs (IP address, pages requested, browser type, referring page) to serve pages and protect against abuse. Sites do not include advertising trackers or third-party analytics by default.
• Embedded media: when a visitor plays an embedded YouTube video or clicks through to a giving provider, that provider collects data under its own policy.

How we use information

• To build, host, secure and improve your Site and the portal.
• To deliver form submissions to your team and send auto-replies to visitors in your church's name.
• To bill you, send receipts, and tell you about failed payments.
• To send service emails: sign-in links, "your site is live", setup reminders, billing and payment notices, domain status, support replies, and notices about changes to the service or these terms.
• To detect abuse, spam and security problems.
• To comply with the law.

We do not sell personal information, and we do not use subscriber or visitor data for advertising. We will not send you marketing email about other Emberline products without a way to opt out.

Subprocessors

We use a small number of providers to run the service. Each receives only what it needs:

• Stripe (payments, invoices, the billing portal): your name, email, card details you enter on Stripe's pages, and subscription status.
• Email delivery provider: recipient address, subject and message body for every email we send, including form notifications and auto-replies.
• Hosting, storage and security provider: your Site's files and images, request logs, and the database and file storage behind the portal, including form submissions.
• Content storage and version history provider: your Site's content files and images, so every change is versioned and restorable.

We will give you the current list of named providers on request at hello@emberline.studio, and we update it when a provider changes. Each provider is bound by its own terms and security commitments.

Retention

• Site content is kept while you subscribe, and for 30 days after cancellation or refund so you can export it. On day 30 your account is closed and your Site's files are archived. On day 60 your Site, its content, uploads, form submissions and account details are permanently deleted. If you ask for immediate deletion in Settings, the same deletion happens after a 7 day grace period. After deletion we keep only billing records, the reserved name of your Site's hosting address, the list of guests who asked not to be emailed, and audit logs in which email addresses are replaced by a one-way hash.
• Unpaid checkouts: if you start checkout and never pay, the record is deleted after 30 days.
• Form submissions are kept for the period the church sets in its portal. The default is 90 days for prayer requests and 365 days for other forms, and the church can change both. Churches can delete a submission at any time.
• Billing records are kept for as long as tax and accounting law requires, generally seven years.
• Audit and security logs are kept for up to 12 months.
• Email logs (who we sent what, and whether it was delivered) are kept for up to 12 months.
• Backups age out on a rolling basis within 30 days. Data deleted from the service can remain in a backup for up to that long and is not restored.

Your choices and rights

Subscribers can view and change account and content information in the portal, export their content at any time, and cancel at any time. Churches can delete individual form submissions and set retention periods. Visitors to a Site who want their submission corrected or deleted should contact the church, which can do so in its inbox; if you cannot reach the church, email us and we will help route the request.

Depending on where you live, you may have rights to access, correct, delete or port your personal information, or to object to certain processing. Email hello@emberline.studio and we will respond within 30 days. We will not treat you differently for exercising a right.

Cookies

The storefront uses no advertising or analytics cookies. The portal sets one strictly necessary cookie to keep you signed in; it is deleted when you sign out or after it expires. Church Sites set no cookies of their own; embedded YouTube players and linked giving providers may set cookies under their own policies.

Security

All traffic is encrypted in transit. Sign-in uses one-time links that expire in 15 minutes rather than passwords. Access to customer data is limited to the people and systems that need it. Content changes are versioned so they can be restored. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay and as the law requires.

Children

Essentials is a service for churches and ministries and is not directed to children. We do not knowingly collect personal information from children under 13 through the storefront or portal. Church Sites may serve families; churches should not collect children's information through forms, and should obtain parental consent for photos of minors. If you believe a child has submitted personal information through a Site, contact the church or email us and we will help remove it.

International visitors

We are based in the United States and store data in the United States and on our providers' global networks. If you use Essentials from outside the United States, you consent to your information being transferred to and processed in the United States.

Changes to this policy

We may update this policy. If the change is material, we will email subscribers before it takes effect and update the date at the top.

Contact

Emberline Studio, 115 E. Main St STE A1B-1150, Buford, GA 30518. Email hello@emberline.studio. We reply within two business days.