ShepherdCount

Privacy Policy

Last updated: August 15, 2026

ShepherdCount ("we," "our," or "us") operates shepherdcount.com and the ShepherdCount application (the "Service"). This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account information

When you create an account — whether by email/password or through a third-party provider (Google, Facebook) — we collect your name and email address. If you sign in with Facebook, we receive only the name and email address that Facebook provides; we do not receive your Facebook friends list, posts, or any other profile data.

Information you provide

As you use the Service on behalf of your church, you may enter information about church members (names, contact details, membership status), attendance records, training progress, prayer requests, and meeting minutes. This information belongs to your church and is stored on your behalf.

Usage data

We automatically collect standard web server logs (IP address, browser type, pages visited, timestamps) for security and performance purposes. We do not use third-party analytics trackers.

2. How We Use Your Information

  • To create and maintain your account
  • To provide, operate, and improve the Service
  • To send transactional emails (email confirmation, password reset, invitations)
  • To send the ShepherdCount newsletter, if you opted in (you may unsubscribe at any time)
  • To respond to support requests
  • To detect and prevent fraud or abuse

We do not sell your personal information to third parties.

3. Data Sharing

We share data only with the service providers necessary to operate ShepherdCount:

  • Supabase — database and authentication hosting
  • Stripe — payment processing (we never store card numbers)
  • Resend — transactional email delivery
  • Twilio — SMS text message delivery, for churches that use that feature
  • Vercel — application hosting

Each provider is bound by their own privacy policy and processes data only as directed by us.

4. Text Messaging (SMS)

If your church uses ShepherdCount to send text messages, we only send them to you with your direct consent. You can opt in to SMS messages at any time from your personal preferences page (linked in emails we send you), and opt out at any time by replying STOP to any message, or by returning to that same preferences page. Reply HELP to any message for assistance.

Message frequency varies depending on your church's activity and how often they choose to send broadcasts — it is not a fixed schedule. Message and data rates may apply, depending on your mobile carrier plan.

Your mobile phone number is never shared with, sold to, or used by any third party for their own marketing purposes. It is shared only with Twilio, our SMS delivery provider, solely to deliver the messages your church sends you.

5. Data Retention

We retain your account data for as long as your account is active. Church data (members, attendance, etc.) is retained until you delete it or request account deletion. After account deletion, residual data may remain in encrypted backups for up to 90 days before being permanently removed.

6. Your Rights

You may at any time:

  • Access, correct, or export the personal information we hold about you
  • Delete your account and associated data
  • Unsubscribe from marketing emails via the link in any email we send

To exercise these rights, email us at support@shepherdcount.com. We will respond within 30 days.

7. Facebook Login

If you choose to sign in with Facebook, we receive your name and email address from Meta Platforms, Inc. We use this information solely to create or identify your ShepherdCount account. We do not post to Facebook on your behalf or access any other Facebook data.

You may disconnect Facebook login and delete your ShepherdCount account at any time. See our Data Deletion Instructions for details.

8. Cookies

We use session cookies required for authentication. We do not use advertising or tracking cookies.

9. Children's Privacy

ShepherdCount is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

10. Security

We use industry-standard encryption (HTTPS/TLS) for data in transit and encrypt data at rest. Access to production data is restricted to authorized personnel.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of material changes. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact

Questions about this policy? Email us at support@shepherdcount.com.