Legal
Privacy policy
Your church's data belongs to your church. Here is how we handle it, in plain language.
This is placeholder copy for the marketing site build. Replace it with policy reviewed by your legal counsel before launch.
Roost exists to serve the local church, and that means treating the people in your care, and their information, with respect. This policy explains what we collect, why, and the control you keep.
What we collect
- Account details for the staff and members who use Roost, such as name, email, and role
- The church data you choose to store, including people, groups, giving, and communication records
- Usage information that helps us keep the service reliable and improve it
How we use it
- To provide and operate the platform for your church
- To provide support and respond when you reach out
- To keep the service secure and to meet our legal obligations
We do not sell your data, and we do not use the personal information in your church account to advertise to your people.
Your control
- You can export everything you put into Roost, at any time
- You can correct or delete records, with deletion handled as anonymization where financial integrity must be preserved
- Members can manage their own communication preferences, and opt-outs are enforced automatically
- Sensitive data, such as giving amounts, care notes, and children's information, is gated by role and access is logged
Security
Card details are handled only through our payment partners and never touch our servers. We encrypt sensitive information, enforce multi-factor authentication for staff, and keep a full audit trail of who changed, viewed, or exported what.
Contact
Questions about privacy or a data request? Email [email protected] and a real person will help.