Legal

Privacy Policy

Effective October 29, 2026. The Church Books is published by Computer Pro Network LLC (“we”, “us”).

This policy describes how the service is designed to handle information. Have it reviewed by qualified counsel for your jurisdiction before relying on it.

Information we process

  • Account information: names, email addresses, and authentication data (passwords are stored only as one-way hashes; two-factor secrets are encrypted).
  • Organization records: the accounting, donor, contribution, payroll, education, student, guardian and certificate information your organization enters. Your organization controls this information; we process it on your behalf to provide the service.
  • Billing information: subscription status and invoices. Card and bank details are collected and stored by our payment processor, Stripe; we never receive or store full card numbers.
  • Technical information: IP addresses, browser type and security events (sign-ins, failed attempts) used to protect accounts.

How we use information

To provide, secure and support the service; to process subscriptions; to send service emails (verification, password resets, invitations, billing notices); and to comply with law. We do not sell personal information or use organization records for advertising.

Separation and access

Each organization's records are separated from every other organization's. Within an organization, access depends on the roles your administrators assign. Our support staff access an organization's records only when needed for support, through a time-limited, read-only, recorded support session.

Children's information

Churches may record children's names, classes, attendance and certificates. Children do not need accounts. Access is limited to authorized staff and linked parents or guardians. Public certificate verification hides students' names unless sharing is authorized, and for minors only a parent or guardian can authorize it. Organizations are responsible for obtaining any consents required to record children's information.

Service providers

We use hosting, email delivery and payment-processing providers who process information only to deliver their services to us.

Retention

Organization data is retained while the subscription is active and for 12 months after cancellation for read-only access and export, then may be deleted. Encrypted backups are retained for a limited rolling period. Audit records may be kept longer where needed for security or legal obligations.

Security

We use encryption in transit (HTTPS), hashed passwords, optional and administrator-required two-factor authentication, role-based access controls, append-only audit logs and encrypted backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your choices

You can update your profile, change your password, enable two-factor authentication and sign out other devices from your account page. To request access, correction or deletion of personal information held in an organization's records, contact that organization; for account-level requests, contact us.

Changes

We will post any changes here and update the effective date.