Privacy Policy

1Who we are

ChurchSurface is provided by GetWoven LLC. In this policy, "we" and "us" mean GetWoven LLC. We are based in the United States and the service is intended for churches in the United States.

ChurchSurface keeps a church's public information accurate in the places AI assistants read from, and reports on what those assistants say. The information we handle is overwhelmingly information a church already publishes about itself.

2What we collect

When you ask for a free visibility check

The form on our home page asks for three things: your church's name, its city and state, and your email address. That is all it collects. There is no other field, hidden or otherwise, except a single decoy input used to catch automated spam, which is discarded.

When you open an account

Signing up asks for your church's website address and your email address. There is no password. We email you a short code when you sign in, and we keep those codes briefly so they can be checked and then expire.

While you are signed in, your browser holds one cookie that says which account you are. It is described in the next section.

What you put in your record

The record is the center of the service and you write it: your campuses and their addresses, service times, phone number, what you run for children and young people, whether you stream, the languages you meet in, the ministries you want to be found for, and how you describe your church. We keep it, we keep the fact that somebody at your church confirmed it and when, and we keep the versions as it changes.

What we read from your website

We fetch pages from the website address you gave us, the way any visitor or search engine would, and keep what we read: the text of those pages, the machine-readable data on them, the addresses and phone numbers they carry, and which pages we could and could not reach. This is how the report can tell you what your own site does and does not say.

What the reports contain

Every month we ask AI assistants a fixed set of questions about your church and keep exactly what came back, word for word, along with the sources each answer cited and our reading of whether it was right. Those answers are the product, so we keep them: a report you cannot check is worth nothing, and comparing this month with last is most of the point.

When you pay

Card and bank details never reach us. They go straight to our payment processor on its own pages. What comes back to us is the fact that you are paying, what for, and whether the last payment worked.

When you visit the site

Our host records standard server information for every request, including IP address, browser type, and which pages were requested. This is ordinary web server logging and is used to keep the site running and secure.

When you email us

We keep your message and your address so we can reply, in the same way any business keeps its correspondence.

3Cookies and tracking

This site carries no analytics, no advertising tags, and no tracking pixels. Nobody is building a profile of you here, and on these public pages we do not know who you are at all.

Three things are worth naming honestly:

• Signing in sets one cookie. It says which account you are and nothing else, it is signed so it cannot be edited, and it is there because an application you sign in to has no other way to remember you between clicks. It is not used to follow you anywhere, and signing out clears it.
• Our host may set a security cookie to distinguish people from automated traffic. It is not used to track you across sites.
• The site loads its typefaces from Google Fonts. Your browser therefore requests those font files from Google, which means Google receives your IP address as part of that request. We do not send Google anything else, and we receive nothing back about you.

4How we use it

We use what you give us to do the thing you asked for, and for nothing else:

• Your church name and city let us look up what assistants currently say about you.
• Your email address lets us sign you in, send you your reports, and reply if you write back.
• Your record is what every answer is checked against, and what we publish on your behalf.
• What we read from your website tells you what assistants can and cannot find there.
• The answers we keep are what your report is made of, and what lets next month be compared with this one.
• Server logs let us keep the site up and defend it from abuse.

We do not sell your information. We do not rent it, trade it, or hand it to advertisers. We will not add you to a marketing list because you asked for a free check. If we ever want to send you something other than what you asked for, we will ask first.

5Who else sees it

Running the service requires a small number of companies that hold or carry information on our behalf. They act on our instructions, are bound by contract to use it only to provide their service to us, and may never use it for their own purposes. They fall into five groups:

• Hosting and storage, which runs the site and the application and holds the database behind it.
• Email delivery, which carries your sign-in codes, your reports and our correspondence.
• Payment processing, which takes card and bank details directly and tells us only whether you are paid up.
• AI providers, described below.
• Form delivery, which passes what you type into the form on our home page to us as email and holds it only long enough to send it on.

We are happy to name any of them. Write to [email protected] and we will tell you who they are and what each one holds.

Beyond that, we share nothing. We do not sell your information and we do not trade it. The exception is the ordinary one: if we are legally required to produce information, we will comply, and we will tell you unless we are forbidden from doing so.

6Information about your church

The heart of the service is publishing accurate public information about a church so that assistants describe it correctly. That information is public by nature and by intent: service times, address, phone number, ministries, and events a church wants people to know about.

We publish only what a church confirms. Claiming a church's record requires verification that you actually speak for the church, which is the check that makes the record worth trusting. A church can correct or withdraw its record at any time by writing to us.

7Children

This site is directed at church leaders, not children, and we do not knowingly collect information from anyone under 13. Information about children's ministry means the ministry itself, its ages and its schedule, never information about particular children.

If a future part of the service ever lets a parent register a child for an event through an assistant, three conditions will hold: somebody at the church confirms every registration before it counts, no child's information is stored by us, and the church can switch it off. If you believe a child's information has reached us in error, write to us and we will delete it.

8How long we keep it

A free check request arrives as an email and is kept in our mailbox while we prepare and send your report, and afterwards as a record of the correspondence, so that we can pick up the conversation if you come back to us. If you would rather we did not, say so and we will delete it.

A church's record is kept for as long as the church wants it maintained, and removed when the church asks.

Reports and the answers behind them are kept for as long as you have an account, because a report you cannot go back to is not much of a report and because comparing months is most of the value. Ask us to delete them and we will. Closing your account removes your record, your reports and your published page; say the word and we will do it, and we will not make you explain.

Server logs are kept for a short period on a rolling basis. Sign-in codes expire within minutes.

9Your choices

You can ask us at any time to tell you what we hold about you, to correct it, or to delete it. One email to [email protected] is enough, and there is no form to fill in. We will act on it promptly and will not ask you why.

Depending on where you live you may have additional rights under state privacy law. We extend the choices above to everyone who asks, regardless of where they live, because keeping track of who is entitled to what is not a good reason to treat people differently.

10Security

Everything is served over HTTPS and travels encrypted. There are no passwords to steal, because there are none: signing in uses a short code sent to your own email, which expires within minutes. Card and bank details are handled by our payment processor on its own pages and never reach our systems. The database is encrypted and access to it is limited to the people who need it, which today is a very short list.

No system is perfect, and we will not claim otherwise. If information you gave us is ever exposed, we will tell you what happened and what we did about it.

11Changes

If this policy changes we will update the effective date at the top. If a change materially affects what we do with information you already gave us, we will contact you about it rather than relying on you to notice.

12Contact

Write to [email protected] with anything at all about this policy. A person reads it.

ChurchSurface is provided by GetWoven LLC.