Privacy Policy

1. Information We Collect

Church/Organization Information

• Organization name and address
• Tax identification number (EIN)
• 501(c)(3) status documentation
• Contact information (email, phone)
• Bank account information for withdrawals
• Blockchain wallet addresses

User Information

• Name and email address
• Account credentials (securely hashed)
• Role and permissions within organization
• Login history and IP addresses
• Device and browser information

Donor Information

• Name and email (if provided)
• Donation amounts and dates
• Blockchain wallet addresses used for donations
• Transaction hashes on the blockchain

Transaction Data

• All donation and withdrawal transactions
• Blockchain transaction hashes
• Timestamps and amounts
• Fund allocations

2. How We Use Information

We use collected information to:

• Provide and maintain the FaithStack service
• Process donations and withdrawals
• Generate tax receipts and financial reports
• Send transaction confirmations and receipts
• Communicate important service updates
• Prevent fraud and ensure security
• Comply with legal and regulatory requirements
• Improve our services based on usage patterns

3. Third-Party Services

We use the following third-party services to provide FaithStack:

4. Blockchain Transparency

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Secure authentication with multi-factor authentication support
• Regular security audits and penetration testing
• Access controls and audit logging
• Secure key management for blockchain operations

6. Data Retention

We retain data for the following periods:

• Financial Records: 7 years (IRS requirement for nonprofits)
• Donor Information: 7 years after last donation
• Account Information: Duration of account plus 3 years
• Blockchain Data: Permanent (immutable on-chain)
• Server Logs: 90 days

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data (subject to legal retention requirements)
• Export your data in a portable format
• Opt out of marketing communications
• Lodge a complaint with a supervisory authority

Note: Blockchain data cannot be deleted due to its immutable nature.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies may be used to improve service quality and can be disabled in your browser settings.

9. Children's Privacy

FaithStack is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. International Transfers

Your data may be transferred to and processed in the United States. By using FaithStack, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the Service. Your continued use of FaithStack after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

privacy@faithstack.church