Privacy Policy

1. Who processes your data

Shofar is responsible for operating the platform and for processing the data described in this policy. For data protection matters, use the channel given in the final section of this page.

2. Two different roles: the church and Shofar

This distinction is the most important part of this policy. When your church records members, financial entries and events in Shofar, it is the church that decides what data to collect and why — the church is the controller of that data. We act as a processor: we handle that data on the church's instructions, purely to deliver the service it subscribed to.

For the account data of the people who administer the platform — name, email, billing details, access logs — we are the controller.

In practice: if you are a member of a church and want to know why your data is in Shofar or ask for it to be deleted, speak to your church first. We help the church fulfil that request.

3. What data we collect

We collect only what the service needs to work:

• Account data: name, email, password (stored hashed), language and the church you belong to.
• Data entered by the church: member records, contributions and financial entries, events, studies and documents the church chooses to upload.
• Billing data: the plan subscribed to, invoice history and payment identifiers. Card details are handled by the payment provider and are not stored by us.
• Technical and usage data: IP address, browser type, pages visited, access times and error logs.
• Communications: the content of messages you send us through the support form.

4. Why we use it

Every use has a purpose and a legal basis:

• Performance of the contract: creating and maintaining the account, delivering the platform's features and processing payments.
• Legal obligations: keeping tax and access records for the periods the law requires.
• Legitimate interests: keeping the platform secure, preventing fraud, fixing faults and understanding in aggregate how the product is used.
• Consent: optional communications and analytics cookies, which you can decline.

5. Artificial intelligence and your data

Shofar's AI features send excerpts of your church's data to language model providers in order to generate the answer you asked for. This happens only when you use an AI feature.

• We do not use your church's data to train general-purpose models.
• Our contracts with model providers forbid the use of submitted content for training.
• We send the minimum context needed to answer the question asked.
• You can ask for the AI features to be disabled on your account.

6. Who we share with

We do not sell personal data. We share information only with suppliers that help us run the service, and only as far as necessary:

• Cloud infrastructure and hosting providers.
• Artificial intelligence model providers, under the conditions in the previous section.
• Payment processors, to bill subscriptions.
• Website analytics tools, such as Google Analytics.
• Public authorities, where there is a legal obligation or a court order.

7. Cookies and measurement

This site uses cookies necessary for basic operation, Google Analytics 4 analytics cookies, which show us in aggregate which pages are visited, and — on the online Bible pages — Google AdSense advertising cookies, which keep that reading free. You can block cookies in your browser settings; essential features keep working. Ads never appear anywhere in the platform that holds your church's data.

8. International transfers

Part of our infrastructure and some of our suppliers are outside Brazil. Where data is transferred internationally, it is done with the safeguards required by the LGPD and, where applicable, the GDPR — such as standard contractual clauses.

9. How long we keep it

We keep data for as long as the account is active. After closure, the church's data remains available for export for 30 days and is deleted or anonymised within 90 days, except for what the law requires us to keep longer — tax and access records, for example.

10. How we protect it

We apply technical and organisational measures appropriate to the sensitivity of the data:

• Traffic encrypted in transit (HTTPS) and data encrypted at rest.
• Passwords stored with hash functions, never in plain text.
• Role-based access control, both in the platform and internally.
• Audit logs and incident monitoring.
• Regular backups with restore testing.

No system is entirely immune. In the event of a security incident with significant risk, we notify the data subjects and the competent authority within the periods set by law.

11. Your rights

The GDPR and the LGPD give you a set of rights over your personal data:

• Confirm whether we process your data and access that data.
• Correct incomplete, inaccurate or out-of-date data.
• Request the anonymisation, blocking or deletion of unnecessary or unlawfully processed data.
• Request portability of your data to another provider.
• Withdraw consent and object to processing based on legitimate interests.
• Be told who we share your data with.

To exercise any of them, use the support form or the privacy channel below. We respond within 15 days. If the data belongs to a member registered by a church, we pass the request to the church responsible and support it in responding.

12. Children

Administrative accounts are restricted to people aged 18 or over. A church may register children and young people as members; in that case it is for the church to obtain the consent of parents or guardians and to handle that data in the child's best interests.

13. Changes to this policy

This policy may be updated when the service or the law changes. The date of the last update is at the top of the page, and material changes are announced before they take effect.

14. Privacy channel

For anything relating to data protection — exercising rights, questions about this policy or reporting an incident — write to our privacy channel or use the support form on this site.