Privacy Policy

This Privacy Policy explains how Abide365 (property of De Lo Alto Media, LLC) ("Abide365," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Abide365 platform, including the Majestic administrative dashboard, individual church subdomains, and the affiliate portal (collectively, the "Platform").

BY CREATING A TENANT (CHURCH/INSTITUTIONAL) ACCOUNT, A CONGREGATIONAL (DISCIPLE/MEMBER) ACCOUNT, OR AN AFFILIATE ACCOUNT, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF INFORMATION AS DESCRIBED HEREIN.

1. Scope

This Policy applies to all Users of the Platform: Majestic (platform administrators), Institutional Users/Shepherds (church administrators), Congregational Users/Disciples (church members and direct self-pay subscribers), and Affiliates (referral partners).

2. Information We Collect

2.1 Information You Provide Directly

• Account information: name, email address, password (stored in hashed form via our authentication provider), and role.
• Church/Tenant information: church name, subdomain, brand color, tagline, "About" content, seat count, and contact phone number (Shepherds).
• Disciple onboarding information: preferred devotion/reflection times, notification preferences, mobile phone number (if SMS reminders are selected), time zone, self-described current spiritual state, selected spiritual goal, and up to three selected focus areas.
• Spiritual and reflective content: journal entries and responses submitted during the Daily Walk conversation, standalone reflections, and any other content you write into the Platform. This content may reveal sensitive information about your emotional, mental, and spiritual state. Please see Section 6 regarding how this content is used, including AI-driven pastoral guidance flags visible to your Shepherd.
• Messages: content of direct messages exchanged between Congregational Users and their Shepherd.
• Demo booking information: if you book a demo on our website, we collect your name, email address, your church or organization and a message (both optional), the date and time you choose, your time zone, and your browser language. We use it to schedule the demo, send you a confirmation and reminders, and follow up about your inquiry. Please do not include any member's private or spiritual content in your message.
• Affiliate application information: first and last name, email, and (upon Stripe Connect onboarding) information Stripe collects to verify identity and enable payouts.
• Payment information: processed directly by Stripe. Abide365 does not receive or store full payment card numbers.

2.2 Information Collected Automatically

• Usage data: pages/features accessed, lesson and course progress, login timestamps, and general engagement metrics (e.g., daily/monthly active use), collected to operate and improve the Platform and to power Tenant- and platform-level analytics dashboards.
• Usage telemetry: for Disciples, timing and count information about how the Platform is used: which screens are opened, how long they are actively used, the day and time of day, how a visit began (for example from a reminder message), device type, and how a written answer was composed (such as how long it took and how many words it contained). We do not record the text of journal entries, reflections, or messages in this data, and it is not shown to Shepherds. Reminder messages may contain a link tagged with the type of message so we can tell which reminder led to a visit.
• Website analytics: on our public pages and our individual-subscriber landing pages (not inside signed-in church or member screens), we record anonymous information about visits: pages viewed, how far a page is read, time actively spent, which sections, buttons, links, FAQ questions and demo screens are used, which demo player controls (play, pause, stop, back, forward) are pressed and how long a demo is watched, whether a form was started, sent or failed (never what was typed into it), page speed and script-error counts, and coarse source, device, browser, language and country. These records use random identifiers kept in your browser, which we store only in a scrambled form that cannot be tied back to you. We do not record your IP address or any signed-in identity, and we delete these records after 13 months.
• Video meeting information: for churches that offer live video meetings, we record that a person joined a meeting and left it, when, how long they stayed, what type of device they used (phone, tablet or computer), and whether joining worked. We store this under a scrambled key that cannot be tied back to you without a secret we hold, and the summaries show counts only, never names. Meetings run on Zoom's Video SDK; the video, audio and chat are carried by Zoom to the other people in the meeting and are not recorded or stored by Abide365. Your mentor or pastor does not receive a list of who attended. We keep these records for 13 months and then delete them.
• AI usage logs: records of AI feature usage (e.g., token counts by endpoint) for cost tracking and service quality purposes.
• Referral/affiliate tracking: when a prospective church visits the Platform through an Affiliate's referral link, we record the click and, if that visit results in a Tenant signup, associate the resulting Tenant with the referring Affiliate for commission-attribution purposes.
• Device/log data: IP address, browser type, and similar technical data collected in the ordinary course of operating a web application, including for security and fraud-prevention purposes.

2.3 Information from Third Parties

We may receive limited account-verification or payment-status information from our service providers (e.g., Stripe subscription status, Stripe Connect onboarding completion) as necessary to operate billing, seat licensing, and affiliate payout features.

3. How We Use Information

We use the information described above to:

• Provide, operate, and personalize the Platform, including generating AI-driven devotionals, prayers, lesson content, journey summaries, and conversational guidance tailored to your onboarding responses and journal history;
• Enable Shepherds to manage their congregation, including viewing member rosters, activity, and pastoral guidance flags, and to send/receive direct messages;
• Process payments, manage seat-based and self-pay subscriptions, and administer promotional codes;
• Send transactional communications, including devotion/reflection reminders (via email and/or SMS, if opted in), billing notices, and account-related messages;
• Schedule demos that visitors request, assign each demo to an Abide365 team member, and send the confirmation, calendar invitation, reminders, and any change or cancellation notices;
• Attribute church signups to referring Affiliates and calculate, track, and pay commissions;
• Monitor, maintain, and improve the security, reliability, and performance of the Platform, including AI cost and quality monitoring;
• Comply with legal obligations and enforce our Terms of Agreement.

4. How AI Processes Your Information

Journal entries, reflection content, and onboarding responses are processed by artificial intelligence systems — including retrieval-augmented generation referencing a Bible scripture database and one or more third-party large language model providers — to generate personalized devotional content and conversational responses. This processing necessarily involves transmitting relevant portions of your input to our AI infrastructure and model provider(s) in order to generate a response. We do not permit our AI providers to use your content to train their general-purpose models beyond what is necessary to provide the Service, except as such providers' own terms may otherwise specify; we encourage Tenants and Users to contact us with questions about a specific provider's data handling.

5. Pastoral Guidance Flags — Special Notice

A core feature of the Platform algorithmically reviews Daily Walk and reflection content to detect language patterns that may indicate emotional or spiritual distress. When such patterns are detected, a flag is surfaced to the Congregational User's Shepherd so that pastoral follow-up can occur. This means that the fact that a flag was raised is visible to your church's designated Shepherd(s) as part of the Platform's intended pastoral-care function. The content of your journal entries and Daily Walk responses that triggered the flag is not shown to your Shepherd. This is not an anonymous or confidential counseling service, and it is not a substitute for emergency or professional mental health services. If you are in crisis, please contact local emergency services or a crisis hotline directly.

6. Who Can See Your Information

• Shepherds/Institutional Users of your Tenant can see your profile, activity summary, course progress, pastoral guidance flags, and messages you exchange with them. Shepherds cannot see the internal account data, journals, or messages of members belonging to a different Tenant.
• Majestic (Abide365 platform administration) can access aggregate and per-Tenant operational data (e.g., engagement metrics, AI usage/cost data, seat counts, lock status) for platform administration, billing, and support purposes, and may access individual account data as reasonably necessary to provide support, investigate abuse, or comply with law.
• Affiliates can see aggregate referral metrics (click counts, conversion counts) and commission data associated with their own referral code. Affiliates do not have access to any Congregational User's personal or spiritual content.
• Abide365 team members (employees and contractors who have internal accounts) can see business records about churches and sales leads that are assigned to them or that their role permits, such as the contact details of a church leader who has made an inquiry, notes, reminders and attached documents. When you book a demo, the team member who hosts it can see your name, email address, church, message and the time you chose, and the booking appears as a sales lead assigned to them. They do not have access to any Congregational User's journals, reflections, Daily Walk content, or the reasons behind pastoral guidance flags.
• Service providers described in Section 7 process information on our behalf under contractual confidentiality and data-protection obligations.
• We do not sell your personal information.

7. Third-Party Service Providers

We share information with the following categories of service providers as necessary to operate the Platform:

Each provider is contractually restricted to using your information only as necessary to provide services to Abide365.

8. Data Retention

We retain account and User Content data for as long as your account remains active and for a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. A self-pay Disciple's cancellation ends future billing but does not automatically delete historical journal, progress, or messaging data; you may request deletion as described in Section 10. Tenant-level data is retained according to the Tenant's subscription status; a locked or terminated Tenant's data may be retained for a reasonable transition period before deletion, consistent with applicable law. Usage telemetry (Section 2.2) is kept in detail for 13 months and then deleted; only aggregated, non-identifying summaries are kept longer. Demo booking details are kept with the sales lead they create until that lead is deleted, and you may ask us to delete them as described in Section 10.

9. Data Security

We implement technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including tenant-scoped database access controls (row-level security) that restrict each Tenant's data to that Tenant's authorized Users. Documents attached to internal business records are kept in private storage, opened only through short-lived links after an access check, and virus scanned before they are saved. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your Choices and Rights

• Usage telemetry: If your browser sends a Global Privacy Control or Do Not Track signal, we do not collect usage telemetry or website analytics from that browser.
• Notifications: You may opt out of email and/or SMS reminder notifications at any time through your account settings or via the unsubscribe mechanism included in our communications.
• Access/correction: You may access and update most of your profile information directly within the Platform, or by contacting your Shepherd (for Tenant-managed accounts) or Abide365 support.
• Deletion: You may request deletion of your account and associated personal data by contacting us at the address below, or, for self-pay Disciples, through account cancellation. We will honor deletion requests except where retention is required for legal, billing, or fraud-prevention purposes.
• Regional privacy rights: Depending on your location, you may have additional rights under applicable law (e.g., the right to know, delete, or opt out of certain processing under U.S. state privacy laws, or rights under the EU/UK GDPR). To exercise these rights, contact us using the information in Section 14.

11. Children's Privacy

The Platform is intended for use by individuals 18 years of age or older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If a Tenant's ministry serves minors through other means, the Tenant is responsible for ensuring appropriate parental consent and compliance with applicable children's privacy laws before permitting any minor to access the Platform under adult supervision.

12. International Data Transfers

Abide365 is based in the United States, and information we collect is processed and stored in the United States (and other locations used by our service providers). If you access the Platform from outside the United States, you consent to the transfer of your information to the United States and other jurisdictions, which may have different data protection laws than your home jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or by email. Your continued use of the Platform after the effective date of an updated Policy constitutes acceptance of the changes.

14. Contact Us

Questions or requests regarding this Privacy Policy, or to exercise your privacy rights, may be directed to: support@abide365.io