Privacy Policy
Who we are
Borough Builder is a church management platform built and operated by Crenel Systems. Questions about this policy or your data: matt@crenelsystems.com.
What we collect
- Account and profile information — name, email, role, profile photo, church affiliation, business listing, and the profile details you choose to provide.
- Church records — the information a church enters or syncs into its own workspace: people and households, attendance, giving history, volunteer service, groups, documents, and notes. These records belong to the church, which controls them.
- Location and Civic information — city, state, ZIP, followed councils, districts, and Civic actions. When you provide a street address to resolve exact legislative districts, it is used for that lookup and is not saved in your Civic profile.
- Community content — Circles, meeting responses, connection requests, coordination notes, and Civic or Commerce items you choose to share. Safety reports and blocks are private and used to protect the community.
- Giving and payments — processed by Stripe. We receive transaction records (amount, fund, date); we never see or store full card or bank numbers.
- Device and technical data — push notification tokens, app version, logs, device type, security events, and usage information needed to deliver, diagnose, and secure the service.
How we use it
- To operate the platform for your church — nothing more exotic than that.
- We never sell personal data. Not to advertisers, not to data brokers, not to anyone.
- We never use your church's data to train AI models — ours or anyone else's. AI features read your church's data only to serve your church (drafting, ranking, answering questions), inside your church's own workspace.
- Every church's data is isolated from every other church's. Sensitive records (for example, pastoral-care and discipline notes) are restricted to the roles the church designates, are excluded from AI features entirely, and access to them is logged.
When data is shared
- Service providers that host and run the platform: Supabase (database and authentication), Railway (application hosting), Stripe (payments), Resend (email), Expo (app updates and push delivery), and configured AI providers such as Gab AI or Groq. They receive only the data needed to provide the requested function.
- Church-directed sharing — some features let a church deliberately share specific data with another church or a partner (for example, federation calendar sharing, or a business owner listing on a partner network). These always require explicit action and, where an individual's information leaves the platform, that individual's consent.
- Legal requirements — if the law compels disclosure, we limit it to what is required and tell the affected church unless legally barred.
Children
Records about children in a congregation (for example, kids-ministry check-ins) are entered and controlled by the church as ministry records, are invisible to non-certified app users, and are excluded from AI features. Borough Builder accounts are not directed to children under 13, and we do not knowingly collect account information directly from them.
Security
Data is encrypted in transit; access is enforced with row-level security scoped to each church; privileged and sensitive-record access is audited. No system is perfectly secure, and we will notify affected churches promptly of any breach that affects their data.
Your rights
You can correct profile information, manage notifications, block people, and delete your Borough Builder account from Profile in the app. Deleting a church-member login does not erase ministry records the church independently controls. Members may direct requests about those records to their church. You may also contact us directly to access, correct, or delete personal data we control, and we will respond within 30 days.
Retention
We keep account and operational data while the account or church workspace is active and as needed for security, legal, tax, and payment obligations. Individual account deletion cancels the platform subscription and removes the personal account data identified in the app. Backups age out on their normal protected schedule.
Changes
We will post updates to this page and note the effective date above. Material changes will be announced to churches directly.