Privacy Policy

Congrava is church-management software. Each church (an “organization”) uses it to look after its own members, services, attendance and finances. This policy explains how information is handled when a church uses Congrava, including when its administrators connect an AI assistant such as ChatGPT or Claude.

1. Who is responsible for the data

Each church decides what it records and why; its records belong to that church. Congrava provides the software and stores the records for the church, and does not use them for its own purposes, sell them or share them with advertisers. Records of one organization are kept separate from every other organization.

2. What a church may store

Depending on how a church uses Congrava:

• People: names, contact details, addresses, birthdates, membership and baptism dates, families and relationships, and optional photos.
• Services: schedules, who serves in which role, and attendance for services and Sunday school.
• Finances: contributions (aportes), other income and expenses, with the person and the date.
• Administrators: sign-in details, permissions and a log of what each administrator did.

3. AI assistants connected to a church

An administrator can connect an AI assistant, such as ChatGPT or Claude, to their church. The administrator signs in to Congrava and approves the connection; nothing is connected without that approval.

The connection acts as that administrator and never has more access than they have. It is limited to the same areas and churches the administrator can open in Congrava, and this is checked again on every request, so lowering an administrator’s permissions takes effect immediately.

The assistant can read what its administrator can read and, only where the connection allows it, propose changes. Changes follow the approval setting the church chose, and the sign-in security details of members are never available to an assistant.

Every request an assistant makes is recorded in the church’s activity log under the administrator who authorized it, with the time and the connection’s name. Administrators can end a connection at any time from Settings, and it stops working right away.

When an assistant asks for information, that information is sent to the assistant’s provider (for example OpenAI or Anthropic) and is then handled under that provider’s own terms and privacy policy. Congrava does not receive or keep the conversation.

Reports an assistant requests are delivered as a private link that expires after 15 minutes and is checked again when it is opened.

4. How information is protected

• Connections to Congrava are encrypted in transit.
• Administrators can protect their sign-in with passkeys or two-step verification, and sessions end after inactivity.
• Access is by permission area and by church, and sensitive actions are logged.
• Connections from AI assistants use revocable credentials, and repeated failed attempts are rate-limited.

5. How long information is kept

A church’s records are kept for as long as the church uses Congrava, or until the church deletes them. When a church asks us to close its account, we delete or return its records within a reasonable period, except where the law requires us to keep something. The activity log is kept so a church can see who did what.

6. Your choices and rights

If you are a member of a church that uses Congrava, ask that church first to see, correct or delete your information; it is the one that holds your record. If you cannot reach them, write to us and we will help route the request. A church’s administrators can export or remove records, and can disconnect any AI assistant at any time.

7. Children

Congrava is used by churches, which may record information about children in their care (for example in Sunday school). That information is entered and controlled by the church, not by the child, and is subject to the same protections and separation as every other record.

8. This website

This site only collects what you send us yourself, such as the name and email address you give when you write to us. It is used to reply to you.

9. Changes to this policy

If this policy changes in a way that matters, we will update the date above and tell the churches that use Congrava.

10. Contact

Questions about privacy can be sent to hello@congrava.com.