Operator: Diamond Software Inc. ("we," "us," "our"), operating as GLAD Ministry Software, a Federal corporation of Canada.

This Privacy Policy explains how GLAD Ministry Software collects, uses, discloses, and protects information about you and the churches you represent when you use our platform at ministrysaas.com and any related subdomains (collectively, the "Service"). By using the Service, you agree to this Policy.

We comply with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), as well as the U.S. Telephone Consumer Protection Act (TCPA) for SMS communications directed at U.S. recipients.

---

1. Information We Collect

1.1 Account and Registration Data

When a church administrator ("Admin") creates an account, we collect:

Name, email address, and password (hashed — we never store plaintext passwords)
Google account ID and OAuth tokens, if you register or sign in via Google
Church name, chosen subdomain or custom domain, and plan tier
Billing information processed by Stripe (we do not store full card numbers — Stripe handles all payment card data under PCI-DSS)

1.2 Church and Member Data (Tenant Data)

Admins import or enter data about their congregation members ("Member Data"), which may include:

Names, email addresses, phone numbers, addresses, and dates of birth
Family relationships, life group memberships, ministry roles, and service team assignments
Giving records, attendance records, and prayer requests
Profile photos and documents uploaded to the platform
Health and allergy information entered in family profiles
Chat messages and communication records within the platform

This data belongs to the church, not to us. We act as a data processor on the church's behalf. See Section 7 (Data Ownership) for details.

1.3 Usage and Technical Data

IP addresses, browser type, device identifiers, and operating system
Pages visited, features used, and session duration
Error logs and performance metrics
Cookies and similar tracking technologies (see Section 10)

1.4 SMS and Communication Data

When SMS notifications are sent through the platform via Twilio (our SMS provider), we record:

The recipient's phone number and opt-in/opt-out status
Message delivery status and timestamps
STOP/HELP keyword responses

---

2. How We Use Your Information

Providing the Service: Operating the platform, processing payments, sending transactional emails, and delivering SMS notifications on behalf of your church
Account management: Authenticating users, managing subscriptions, and providing customer support
Security: Detecting fraud, abuse, and unauthorized access
Platform improvements: Analyzing usage patterns to improve features (using aggregated, de-identified data only)
Legal compliance: Meeting our obligations under applicable law
Communications: Sending you service announcements, billing receipts, and important platform updates. We do not send marketing emails without your consent.

We do not sell your personal information or Member Data to any third party. Ever.

---

3. SMS Messaging — Consent, Opt-Out, and TCPA/CASL Compliance

3.1 How Members Are Messaged

GLAD sends SMS messages on behalf of churches to their congregation members. Messages originate from +1 (833) 700-4523 (1-833-700-GLAD). Message types include service reminders, event notifications, and emergency broadcasts.

3.2 Consent

Churches are responsible for obtaining valid prior express written consent from their members before enabling SMS notifications. By activating SMS for a member, the Admin confirms that consent has been obtained. We require churches to maintain consent records and may audit compliance.

3.3 Opt-Out

Members may opt out of SMS messages at any time by replying STOP to any message. Upon receiving a STOP reply, we immediately add the number to our opt-out list and no further messages will be sent to that number from the platform. To re-subscribe, members reply START. For help, members reply HELP.

3.4 Message Frequency and Costs

Message frequency varies by church activity. Standard message and data rates may apply depending on the recipient's mobile carrier plan.

3.5 CASL Compliance

For recipients in Canada, we comply with CASL. Commercial electronic messages are only sent where express or implied consent exists. Every message includes identification of the sender and an unsubscribe mechanism.

3.6 Account Messages to Administrators

Separately from messaging congregation members, we may send SMS text messages from +1 (833) 700-4523 directly to a church's administrators about their own GLAD account, such as login verification codes, security alerts, and payment, renewal, or billing reminders. These messages are transactional; we do not send marketing texts on this number. Administrators opt in when creating their account or in their church settings, and may opt out at any time by switching the setting off or replying STOP (reply HELP for help). We record the opt-in — its date and time, the consenting number, and the originating IP address — and the opt-out status for compliance. Message frequency varies, and standard message and data rates may apply.

---

4. How We Share Your Information

We share information only as follows:

4.1 Service Providers (Sub-Processors)

We use the following trusted third-party providers who process data on our behalf under data processing agreements:

Stripe — Payment processing (PCI-DSS Level 1 compliant)
Twilio — SMS delivery
Resend — Transactional email delivery
Google — OAuth authentication (if you use Sign in with Google)
Oracle Cloud Infrastructure — Cloud hosting and data storage
Google Gemini — AI-powered features (only when explicitly invoked; no data is retained by Google for training)

4.2 Legal Requirements

We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of GLAD, our users, or the public.

4.3 Business Transfers

If Diamond Software Inc. is acquired, merges with another company, or transfers substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before such a transfer takes place.

---

5. Data Retention

Active accounts: Data is retained for the duration of the subscription
Cancelled accounts: We retain data for 90 days after cancellation, after which it is permanently deleted. Admins may export all church data before cancellation.
Billing records: Retained for 7 years as required by law
SMS opt-out records: Retained indefinitely to prevent re-contacting opted-out numbers
Backups: Encrypted backups may persist for up to 30 days after deletion

---

6. Data Security

We implement industry-standard security measures including:

TLS/HTTPS encryption for all data in transit
Encrypted storage for sensitive fields
Bcrypt hashing for all passwords
Role-based access controls limiting data access to authorized users
Regular security audits and dependency updates

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law, and no later than 72 hours after we become aware of the breach.

---

7. Data Ownership

You own your church's data. GLAD acts solely as a data processor. We do not use Member Data for any purpose other than operating the Service on your behalf. You may export your data at any time from the admin panel. Upon cancellation, you have 90 days to export before deletion.

---

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Correct inaccurate information
Delete your personal information (subject to legal retention obligations)
Port your data in a machine-readable format
Object to or restrict certain processing
Withdraw consent at any time (for SMS: reply STOP; for email: use the unsubscribe link)

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

---

9. Children's Privacy

GLAD is not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Churches may store family records that include minors — this data is entered by and under the control of the church Admin. If you believe we have inadvertently collected information from a child without appropriate consent, contact us immediately at [email protected].

---

10. Cookies and Tracking

We use session cookies necessary for authentication and security. We do not use third-party advertising cookies or sell browsing data. You can disable cookies in your browser, but doing so may prevent you from logging in to the platform.

---

11. International Data Transfers

Our servers are located in the United States (Oracle Cloud Infrastructure). If you are located in Canada or the European Economic Area, your data is transferred to and processed in the United States. By using the Service, you consent to this transfer. We use appropriate safeguards (contractual clauses with sub-processors) to protect transferred data.

---

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting a notice on the Service at least 30 days before the changes take effect. Continued use of the Service after that date constitutes acceptance of the updated Policy.

---

13. Contact Us

For privacy inquiries, data requests, or to report a concern:

Email: [email protected]
Mail: Diamond Software Inc., Attention: Privacy Officer, Ontario, Canada

For CASL-related inquiries or to withdraw consent for commercial electronic messages, email [email protected] with the subject line "CASL Withdrawal."