Legal

Privacy Policy

Effective date: 1 January 2025 | Last updated: April 2026

1. Who We Are

ChurchVault ("we", "our", "us") is a church finance management platform operated by Dunamis Code & Visuals. Our platform is accessible at https://seemychurch.org.

2. Information We Collect

Account information: Name, email address, church name, phone number, and subdomain when you register.
Financial records: Income and expense data you enter into the system. This data belongs to your church and is stored securely.
Payment information: Processed by Paystack. We do not store card details on our servers.
Usage data: Standard server logs (IP address, browser type, pages visited) for security and performance purposes.

3. How We Use Your Information

To provision and maintain your ChurchVault account
To process subscription payments via Paystack
To send account-related emails (setup, activation, billing)
To provide customer support
To improve the platform based on usage patterns (aggregate, anonymised data only)

3a. Financial Data Confidentiality

Your church's financial data is private. We will never read it, analyse it, or share it — except for the narrow technical purposes described below.

You own your data: All income, expense, and bank account records you enter belong entirely to your church.
No commercial use: We do not analyse, benchmark, monetise, or share your financial records with any third party for any commercial purpose, ever.
Technical access only: Platform administrators may access account data only when you request support, to fix a confirmed technical issue, or to comply with a valid legal order. All such access is logged.
Data isolation: Each church's data is stored in isolated records. No church can access another church's information.
Staff obligations: Every member of the ChurchVault team is bound by written confidentiality agreements. Unauthorised access to customer data is grounds for immediate termination.
No selling: We will never sell your church's data to advertisers, data brokers, or any other party.
Legal disclosure only: We may disclose data if required by a valid Nigerian court order or law enforcement request with proper legal authority. We will notify you where we are legally permitted to do so.

This applies equally to Starter (free) and paid subscribers. The free nature of the Starter plan does not grant us any right to use your data commercially.

4. Data Isolation

Each church's financial data is isolated by a unique church ID. No subscriber can view another church's records. Platform administrators can access all records for support and maintenance purposes only.

5. Sharing of Data

We do not sell your data. We share limited information only with:

Paystack — for payment processing (their Privacy Policy)
Hosting providers — under strict data processing agreements
Law enforcement — only when legally required

6. Data Retention

We retain your data for the duration of your subscription plus 30 days after cancellation, allowing you to export records. After 30 days, data is permanently deleted upon request.

7. Security

We implement SSL/TLS encryption, role-based access control, prepared SQL statements (SQL injection protection), and two-factor authentication options. Financial keys (Paystack) are never exposed to subscriber-level users.

8. Your Rights

Request a copy of your data
Request correction of inaccurate data
Request deletion of your account and data
Object to processing

9. Cookies

We use only essential cookies required for WordPress functionality and session management. We do not use advertising or tracking cookies.

10. Contact

Questions about this policy: support@seemychurch.org