CHOS ("us", "we", or "our") operates the CHOS church management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, church or organization name, and any other information you choose to provide.

Church Data

Through your use of the Service, you may store member contact information, household and care notes, attendance records, service plans, volunteer schedules, service-plan attachments, and related church operations data. This data belongs to your organization and is processed on your behalf. CHOS does not currently provide a released global Documents or resource-library workspace.

Usage Data

We automatically collect information about how you access and use the Service, including your IP address, browser type, device information, pages visited, and the time and date of your visit.

Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how the Service is used. You can instruct your browser to refuse cookies, though some features of the Service may not function properly without them.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service
Authenticate your identity and manage your account
Process subscription payments
Send transactional emails and service notifications
Respond to your requests and provide support
Analyze usage to improve the Service's performance and features
Detect and prevent fraud or abuse
Comply with legal obligations

AI Assistant Beta may send permission-scoped context to a configured model provider when an authorized user invokes it. CHOS does not publish a blanket provider-training, data-residency, or zero-retention guarantee. Before using AI with sensitive church data, ask us for the current provider and data-handling terms and complete your own review.

3. Data Sharing and Disclosure

We may share your information only in the following circumstances:

Service Providers. We work with third-party providers who help us operate the Service, including cloud hosting, payment processing, email delivery, and analytics. Their handling of data is governed by the agreements and policies that apply to the configured service. Contact us for the current provider list before placing sensitive data in the Service.
Legal Requirements. We may disclose your information if required by law, court order, or governmental authority.
Business Transfers. If CHOS is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
With Your Consent. We may share information for any other purpose with your explicit consent.

4. Data Retention

We retain personal data and church data while an account is active and as needed for operational or legal purposes. CHOS does not publish a fixed post-closure deletion or anonymization window. If you close an account, request a written export and deletion plan and do not treat account closure alone as confirmation that every copy has been removed.

You may request export or deletion of your data by contacting us. Requests are subject to identity verification and any operational or legal retention requirements; completion should be confirmed in writing.

5. Data Security

CHOS uses authenticated access and the security controls available in its configured services. Hosted controls, backup state, provider configuration, and a recurring security-review cadence have not been published as verified production guarantees. This policy does not claim a security certification or absolute security, and no method of electronic storage or transmission is completely secure.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict certain processing
Request a portable copy of your data in a structured format
Withdraw consent at any time

To exercise any of these rights, please contact us at the email address below. We may ask you to verify your identity before processing your request.

7. Children's Privacy

The Service is intended for authorized church staff, not for children to administer directly. A church may place children's information in People or supervised Check-ins workflows. The church is responsible for lawful collection, guardian permissions, access control, retention, and its existing child-safety procedures. Contact us to request review or deletion of a child's information.

8. International Data Transfers

Data may be transferred to and processed in countries other than your own by configured service providers. CHOS has not published a blanket data-residency or cross-border compliance guarantee. Before using the Service where transfer restrictions apply, request the current provider, region, and contractual details and obtain appropriate advice for your organization.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

support@thechos.app