Privacy Policy

SignUpChurch, operated by Katie Allred Consulting LLC, exists to help churches fill sign-up sheets — not to monetize anyone’s data. We collect only what we need to run the Service, we never sell personal information, and we never show ads. Volunteer information belongs to the church whose sheet you signed up on.

Two kinds of people use SignUpChurch:

• Administrators — people who create an account to build and manage sign-up sheets for their church or organization.
• Volunteers — people who sign up on a sheet, or whose name and email their church adds to its own People list. No account is needed.

For volunteer information, we act as a service provider (data processor) for the church that created the sheet — the church decides what to collect and how to use it.

• Account information: your name, email address, church name, and a password (stored only as a secure hash — we can’t see it). When an account is created we also note how its creator found us: the website that linked them here (just its domain, like facebook.com) and any campaign tags in that link, such as utm_source. We keep this on the church’s record so we know which of our posts, ads, and emails bring in churches.
• Sign-up information: whatever a sheet asks volunteers for — typically name and email, sometimes a phone number, a quantity, or a note.
• Imported contacts: a church may add its own volunteers to its People list by name, email, and optionally phone. We hold that list for the church alone; it is used only for the church’s own invitations, each of which carries a one-click stop link.
• Text-message consent: if a volunteer checks “Text me a reminder,” their mobile number and that opt-in. See our SMS Terms.
• Marketing preference: whether you checked the optional box at sign-up asking to receive marketing email from us, and when you confirmed it from the email we sent.
• Billing information: paid plans are billed through Stripe. Stripe handles your card details; we store only your Stripe customer and subscription identifiers and your plan.
• Customization: logos and theme settings churches and organizations upload for their sign-up pages.
• Integration credentials: if a church or organization connects a ChMS (Planning Center, Breeze, Tithe.ly, or CCB), we store the tokens or API keys needed to sync sign-ups. If it connects Slack, we store the token needed to post sign-ups to the channels it picks.
• AI sheet builder prompts: if an administrator uses the AI sheet builder, the description they type is sent to our AI provider to generate a draft sheet.
• Technical basics: standard server logs (like IP address and browser type) kept for security and debugging.
• Usage analytics: pages viewed, clicks, errors, and session recordings that show how people move through the site, collected with PostHog so we can find bugs and improve the Service. For logged-in administrators, this is linked to their account and church — including, when someone creates an account, the pages they viewed on our website earlier in that same visit. From November 4, 2026, visitors outside the UK, the EEA, and Switzerland are also counted with Google Analytics (pages viewed, where visits come from, and device and browser details) on our website and admin dashboard. We don’t collect analytics or session recordings on the pages volunteers use — public sign-up sheets, embedded sheets, and the manage, waitlist, and email-preference pages linked from our emails. The one exception: when a sheet is embedded on a church’s website, our server notes which website it’s embedded on (just the site’s domain, like example.org) and counts that toward the church’s account. Nothing about the volunteer viewing it is recorded — no name, email, IP address, cookie, or browser script.

• Running the Service — creating, sharing, and managing sheets.
• Sending transactional email: sign-up confirmations, event reminders, removal or reassignment notices, password resets, and admin invitations.
• Sending day-before text-message reminders for a volunteer's own sign-ups, only to volunteers who opted in themselves. That is the only kind of text we send — never marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes, and text-messaging opt-in data and consent are never shared with any third party.
• Syncing sign-ups to the church’s connected ChMS, when the church has enabled that.
• Posting sign-ups and cancellations to the church’s own Slack workspace, when the church has connected Slack and picked a channel for that form. Each post includes the volunteer’s name and what they signed up for, plus only the other details the church chose to include.
• Sending account email to church administrators — a welcome note when you register and, while your church has no sign-up sheet yet, up to three getting-started notes in the following days with a sheet idea and an offer of help. These are about the account you created, not marketing: they go only to the account owner, stop on their own once you build a sheet, and carry a one-click link to stop them sooner (also under Dashboard → Notifications).
• Sending marketing and product-news email — but only to church administrators who explicitly opted in by checking the box at sign-up and then confirmed from the email we sent them. Every marketing email includes an unsubscribe link, and you can withdraw consent at any time that way or by emailing support@signupchurch.com. We never send marketing email to volunteers.
• Delivering messages a church sends its own volunteers through the Service — sign-up sheet invitations and last-call emails, sent only at that church’s explicit request and only to people who have signed up with that church before. Every such email says why you’re receiving it and includes a one-click link to stop invitations from that church; opting out never affects emails about your own sign-ups.
• Processing subscription payments and managing plans.
• Keeping the Service secure, fixing problems, and understanding how the Service is used so we can improve it.

We do not sell or rent personal information, show ads, or use your data to train AI models. We don’t run third-party advertising scripts anywhere on SignUpChurch, and we don’t run analytics or tracking on sign-up pages beyond the embedding-site domain described above. Our analytics tools are PostHog and, for visitors outside the UK, the EEA, and Switzerland, Google Analytics (both described above), used on our website and in the admin dashboard just for us to improve the Service. We don’t use Google Analytics for advertising, and we don’t link it to Google’s ad products. Public forms may use Cloudflare Turnstile, a bot check Cloudflare doesn’t use for advertising or cross-site tracking.

We share information only with the service providers that make SignUpChurch work (also listed, with what each one handles and where, on our Subprocessors page):

• Stripe — payment processing for paid plans.
• Resend — delivering email.
• Twilio — delivering text-message reminders to volunteers who opted in.
• Anthropic — generating draft sheets when an administrator uses the AI sheet builder.
• PostHog — product analytics and error tracking on our website and admin dashboard (not on volunteer pages, except the embedding-site domain noted above).
• Google — website analytics (Google Analytics), from November 4, 2026, on our website and admin dashboard, only for visitors outside the UK, the EEA, and Switzerland, and never on volunteer pages.
• Vercel — hosting the application.
• Neon — hosting our database.
• Cloudflare — Turnstile bot checks on public forms (it sees technical signals like your IP address and browser, not what you type).
• The church’s ChMS (Planning Center, Breeze, Tithe.ly, or CCB) — only when the church connects that integration.
• The church’s Slack workspace — only when the church connects Slack, and only for the forms and details it chooses.

Our service providers may use the information only to provide their services to us, and their agreements with us require them to keep it confidential and protect it with appropriate security measures.

We may also disclose information if required by law, or to protect the rights, safety, or security of SignUpChurch and its users.

When you sign up on a sheet, your information goes to the church or organization that created it. That organization controls it — administrators can view, export, reassign, or remove sign-ups, may sync your details into their church management software, and may have new sign-ups posted to their own Slack workspace. To have your information corrected or removed, the fastest route is to contact the organization directly; you can also email us and we’ll help.

We only use cookies the Service needs to work: a session cookie that keeps church administrators logged in, and short-lived security cookies during two-factor sign-in and while connecting a ChMS or Slack. We don’t use advertising or cross-site tracking cookies. PostHog analytics runs without cookies or browser storage — its anonymous ID lives only in the open tab’s memory and is gone when you reload or close the page.

From November 4, 2026, if you visit our website or admin dashboard from outside the UK, the EEA, and Switzerland, Google Analytics sets its own analytics cookies (named _ga and _ga_ followed by an ID) so we can count returning visitors. Visitors in the UK, the EEA, and Switzerland don’t get Google Analytics at all — it isn’t loaded — and no one gets it on a volunteer page. You can block or clear these cookies in your browser, or use Google’s opt-out add-on.

Volunteers signing up on a public sheet don’t get any cookies from us. The only thing a sign-up page saves on your device is your name and contact details, and only if you tick “Remember my details on this device” — leave it unticked on your next sign-up to clear them. The admin dashboard also remembers, in your browser, when you dismiss one of its cards or notices. Our sign-up pages load their fonts from our own servers, not from Google.

For visitors in the UK, the EEA, and Switzerland, everything we store on your device is either needed to provide the Service or something you asked for, so we don’t show a cookie banner.

We keep information for as long as it’s needed to provide the Service. Account admins can delete individual sign-ups at any time, which removes them from the Service. A deleted sheet is held for 30 days so the organization can restore it, then removed. The account owner can delete the account and all of the organization’s data themselves from Dashboard → Security, or email us at support@signupchurch.com and we’ll take care of it. Residual copies may persist briefly in backups before being purged.

Details already sent to an organization’s ChMS or posted to its Slack workspace are held there under that organization’s control. Deleting a sign-up in SignUpChurch doesn’t remove them; the organization can.

All traffic is encrypted in transit with HTTPS, passwords are stored as secure hashes, ChMS and Slack credentials are encrypted at rest, and access to production data is limited to the people who need it to run the Service. No system is perfectly secure, but if we learn of a breach affecting your data, we will notify you as required by law.

SignUpChurch is intended for use by adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

If we make meaningful changes to this policy, we will update the effective date above and notify account holders by email or in the app. See also our Terms of Service.

If you’re in the UK, the European Union, or the wider European Economic Area, the UK GDPR or the EU GDPR gives you the rights below.

Who is responsible for your data. For administrator accounts, billing, and our website, the data controller is Katie Allred Consulting LLC, PO Box 31, Nolensville, TN 37135, USA (support@signupchurch.com). For volunteer sign-up information, the church or organization that created the sheet is the controller and we are its processor (see sections 1 and 5), under our Data Processing Agreement.

Our legal bases. We rely on:

• Performing our contract with you — creating and running your account, sending sign-up confirmations, reminders, and other transactional email, syncing to your ChMS, generating drafts with the AI sheet builder, and processing payments.
• Consent — marketing email, and text-message reminders to volunteers who opted in. You can withdraw consent at any time, which doesn’t affect anything done before you withdrew it.
• Legitimate interests — keeping the Service secure (server logs and bot checks) and understanding how it’s used so we can fix problems and improve it (PostHog analytics). You can object to this at any time (see below).
• Legal obligation — keeping billing records for tax and accounting purposes.

For volunteer information, the church decides the legal basis. Because signing up with a church can reveal your religious beliefs, churches using SignUpChurch are responsible for handling that information in line with the GDPR’s rules for this kind of data.

Your rights. You can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or send it to you or another service in a portable format. You can also object to our use of your data based on legitimate interests, including analytics. Email support@signupchurch.com and we’ll respond within one month. If you’re a volunteer, the church you signed up with controls your sign-up details, so contacting them is usually fastest. We’ll help them respond, or pass your request on if you contact us.

International transfers. SignUpChurch is run from the United States, and our service providers (section 4) store and process data there. When personal data moves from the UK or EU to the US, we rely on the safeguards in our providers’ data processing agreements, which include the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or on the provider’s certification under the EU–US Data Privacy Framework and its UK Extension. Email us for more detail on these safeguards.

No automated decisions. We don’t make decisions about you that have legal or similarly significant effects based only on automated processing.

Complaints. If you’re unhappy with how we’ve handled your data, please contact us first. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU or EEA, the authority in the country where you live or work.

Questions or requests about your data? Email support@signupchurch.com.