Effective September 2026
When you create an account, we collect your name, email address, and the church or organisation you represent. As a church leader, you may enter member and congregant data into the People directory — this includes names, contact details, small group memberships, and giving records.
We use data to provide the Service, authenticate your access, generate reports, and communicate service-related updates (e.g., account status, password resets). We do not use member contact details for marketing.
Data is stored on self-hosted PostgreSQL infrastructure in Malaysia. Each church receives an isolated workspace, and row-level security (RLS) policies enforce that your congregation’s data is never visible to other organisations. We retain data only for as long as your account is active, unless retention is required by law.
We do not sell, license, or otherwise share your data with third parties for their marketing purposes. We never publish or disclose member information belonging to one church to any other church or organisation. Payment processing is handled by Stripe — see Stripe’s own privacy documentation for data they collect at checkout.
ChurchOS uses essential cookies only — to keep you signed in during your session and to preserve your interface preferences. We do not use tracking or analytics cookies.
You may request a copy of, correction to, or deletion of your congregation’s data at any time by contacting us at support@churchos.my. Where legally required, you also have the right to lodge a complaint with the Malaysian Department of Personal Data Protection (JPDP).
We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service.