Who this statement covers

This statement applies to:

• Website visitors and people who request demos, downloads, or marketing materials
• Church and ministry customers and their authorized users (staff, admins, consultants)
• Individuals whose giving-related information is processed through GivFlow because a church connected its church management or giving system (for example, Planning Center) to GivFlow

When a church uses GivFlow, that church is typically the organization directing how donor and member information is used. GivFlow processes that information to provide the Services on the church's behalf.

Information we collect

Information you provide to us

• Account and profile details (name, email, role, organization name)
• Billing and payment-related information (processed by our payment providers where applicable)
• Support requests, feedback, and correspondence
• Demo, waitlist, or marketing form submissions

Information from connected church systems

If a church connects GivFlow to a church management or giving platform, we may receive information such as:

• Organization, campus, fund, and campaign details
• Donor or people records and related identifiers used by that platform
• Donation, recurring gift, pledge, and related giving activity
• Lists, statuses, and other data the church chooses to sync so GivFlow can provide analytics, automations, and reporting

Donors usually continue to give through the church's existing giving experience. GivFlow does not replace that experience unless a specific feature says otherwise.

Information generated through the Services

• Email and automation activity (for example, whether a message was sent, opened, or led to a tracked action, where available)
• Product usage and configuration (flows enabled, campaign settings, report views)
• Impact and tracking metrics churches use to measure communication results

Automatically collected technical information

When you use our website or app, we may collect:

• IP address, browser type, device type, and operating system
• Pages viewed, referring URLs, and approximate timestamps
• Cookies or similar technologies (see Cookies below)

How we use information

We use information to:

• Provide, operate, maintain, and improve the Services
• Sync and analyze giving-related data so churches can understand patterns and take action
• Send church-branded or church-authorized donor communications and automations that the church configures
• Show impact tracking and reporting (for example, actions taken after a campaign email)
• Authenticate users, secure accounts, and prevent abuse
• Provide customer support and onboarding
• Send service-related notices (security, billing, product changes)
• Send optional product or marketing communications where permitted (you can opt out of marketing emails)
• Comply with law and enforce our terms

We do not sell personal information.

How we share information

We may share information with:

• Service providers who help us run the Services (hosting, email delivery, analytics, customer support tooling, payment processing), under obligations to protect the information
• The church customer that owns or controls the relevant account and connected data
• Integrations the church chooses to connect (for example, a church management or giving platform), according to that church's settings and that provider's policies
• Professional advisors (legal, accounting) when needed
• Authorities or other parties when required by law, or to protect rights, safety, and security
• A buyer or successor in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections

We do not share donor information from a church's account with other churches for their marketing.

Cookies and similar technologies

We may use cookies and similar technologies to keep you signed in, remember preferences, understand how the site is used, and improve the Services. You can control cookies through your browser settings. Some features may not work if cookies are disabled.

Data retention

We retain information for as long as needed to provide the Services, meet legal and accounting requirements, resolve disputes, and enforce agreements. Churches may request deletion or export of account data subject to our contracts and technical limits. When a church disconnects an integration, we follow our retention and deletion practices for synced data, which may include a limited period needed for backup, security, or legal obligations.

Security

We use administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please use strong passwords and limit access to authorized staff.

Children's privacy

The Services are built for churches and ministry organizations and their staff users. We do not knowingly collect personal information directly from children for GivFlow marketing. If you believe a child has provided personal information to us inappropriately, contact support@givflow.com.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. How you exercise those rights depends on your relationship to GivFlow:

• Church staff users: contact us at support@givflow.com or manage settings in your account where available
• Donors / members: please contact your church first. They control most giving-related records in GivFlow. We can help route requests when appropriate

You may unsubscribe from marketing emails using the link in those emails. Service and transactional messages may still be sent.

International users

We primarily serve organizations in the United States. If you access the Services from another country, your information may be processed in the United States or other locations where we or our providers operate.

Third-party services

Our Services may link to or integrate with third-party sites and platforms (including church management and giving providers). Their privacy practices are governed by their own policies. We encourage you to review those policies.

Changes to this statement

We may update this Privacy Statement from time to time. We will post the updated version with a new "Last updated" date. Continued use of the Services after changes become effective means you accept the updated statement, except where applicable law requires additional notice or consent.