Privacy Policy

Last updated: April 10, 2026

1. Who we are

Shepherds Circle ('we', 'our', 'us') is a church management platform operated by iampapagray. Our service is provided via shepherdscircle.app.

If you have questions about this policy, contact us at support@shepherdscircle.app.

2. What data we collect

Account data: name, email address, and authentication credentials when you register.

Church data: church name, location, logo, and administrative settings you provide.

Member data: congregation member information entered by your church administrators, including names, contact details, demographic information, and attendance records.

Usage data: pages visited, features used, and session information to help us improve the platform.

3. How we use your data

To provide and operate the Shepherds Circle platform.

To authenticate your account and keep it secure.

To send transactional emails (magic link logins, birthday reminders, invitations).

To provide customer support when you contact us.

We do not sell your data, rent it, or use it for advertising purposes.

4. Data ownership

All member data entered into Shepherds Circle belongs to your church. You retain full ownership and control of your data.

You may export or delete your data at any time from within the platform settings.

5. Data storage & security

Your data is stored in Supabase (PostgreSQL), hosted on infrastructure provided by AWS and Supabase Inc.

We enforce row-level security (RLS) policies to ensure your church's data is never accessible to other organisations.

All data is encrypted in transit (TLS) and at rest.

Authentication is handled by NextAuth.js with JWT tokens scoped to your church.

6. Third-party services

We use the following third-party services to operate Shepherds Circle:

• Supabase — database and authentication storage

• Resend — transactional email delivery

• Stripe — payment processing for paid subscriptions

• Vercel — hosting and deployment

Each of these services has their own privacy policy and data processing practices.

7. Cookies

We use cookies solely to maintain your authenticated session. We do not use tracking or advertising cookies.

8. Your rights

You have the right to access, correct, or delete your personal data at any time.

Church administrators may delete their church account and all associated data from the Settings page.

To request a full data export or account deletion by email, contact support@shepherdscircle.app.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance.