Privacy Policy

This Privacy Policy describes how Ministry Branch ("we," "our," or "us") collects, uses, and shares personal information in connection with the ChurchFlow web application and related services (the "Service"). ChurchFlow is part of the Ministry Branch family of services. Ministry Branch is headquartered in Fresno, California, USA.

California residents: please also see our CCPA / CPRA Rights notice for additional disclosures and rights under California law.

1. Information We Collect

Information you provide

• Account information — name, email, password (hashed), organization name.
• Organization data — church / nonprofit profile, fiscal preferences, tax ID, addresses you choose to add.
• Donor records — donor names, contact details, and giving history you enter.
• Transactions — income, expense, fund, category, and notes you record.
• Communications — emails or support requests you send to us.

Information collected automatically

• Device & log data — IP address, browser type, operating system, time zone, and pages visited.
• Cookies & similar technologies — used for authentication (httpOnly session cookies) and to remember preferences.
• Product analytics — aggregated usage signals to understand which features are used.

2. How We Use Information

• To provide, secure, and improve the Service;
• To authenticate your account and prevent unauthorized access;
• To generate the reports, statements, and exports you request;
• To respond to support requests and communicate updates;
• To comply with legal obligations and enforce our Terms of Use.

We do not sell personal information, and we do not use Customer Data (including donor records) to train third-party AI models.

3. How We Share Information

We share personal information only as described below:

• Service providers — cloud hosting, database, email delivery, and analytics vendors who process data on our behalf under written contracts.
• Legal compliance — when required by law, subpoena, or to protect the rights, safety, or property of Ministry Branch, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to notice.
• With your consent — for any other purpose disclosed to you and approved by you.

4. Data Retention

We retain Customer Data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or de-identify Customer Data within 30 days, except where retention is required by law (e.g., financial records subject to IRS retention rules).

5. Security

We use industry-standard safeguards including TLS in transit, encryption at rest, bcrypt password hashing, role-based access controls, and audit logging. No system is perfectly secure; we encourage you to use a strong, unique password and protect your credentials.

6. Your Choices

• Access & correction — you can view and edit most data directly in the app.
• Deletion — request account deletion at privacy@ministrybranch.com.
• Marketing communications — unsubscribe via the link in any marketing email.
• Cookies — most browsers let you block or delete cookies, though doing so may break authentication.

7. Children's Privacy

ChurchFlow is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

8. International Users

The Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data-protection rules than your jurisdiction.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect.

10. Contact

Ministry Branch · Fresno, California · USA
Privacy questions: privacy@ministrybranch.com
General legal: legal@ministrybranch.com