Privacy Policy

Spiritual Gifts Hub (“we,” “us,” or “our”) operates spiritualgiftstesthub.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

a. Information You Provide

• Account Information: Name, email address, password, and phone number when you register.
• Church Information: Church name, address, website, and description when registering a church account.
• Assessment Data: Responses to spiritual gifts assessments, including all questions answered and scores.
• Profile Information: Profile photo and other optional details you add to your account.
• Communications: Messages, feedback, and support requests you send us.

b. Information Collected Automatically

• Usage Data: Pages visited, features used, time spent, and interactions within the Service.
• Device & Browser Data: IP address, browser type, operating system, and device identifiers.
• Cookies: We use cookies and similar technologies to maintain session state and analyze usage. You may disable cookies in your browser settings, though some features may not function correctly.
• Analytics: We use Google Analytics to understand how users interact with the Service. Google Analytics data is subject to Google's Privacy Policy.

c. Payment Information

We do not store your credit card or payment details. All payment processing is handled by Stripe, Inc. When you make a payment, your payment data is transmitted directly to Stripe and is subject to Stripe's Privacy Policy. We only receive a token and limited billing details (last 4 digits, card type, billing name) from Stripe.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and provide the Service
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password reset, billing receipts)
• Send marketing and promotional communications — only if you have opted in
• Send SMS/text messages — only if you have provided express written consent
• Respond to your support requests and inquiries
• Improve and develop the Service using aggregated, anonymized data
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

3. Email Marketing (CAN-SPAM Compliance)

If you opt in to email marketing, we may send you product updates, ministry resources, tips, and promotional offers. Every marketing email we send will:

• Clearly identify Spiritual Gifts Hub as the sender
• Include an unsubscribe link that works immediately upon clicking
• Include our physical mailing address
• Honor all unsubscribe requests within 10 business days

You may opt out of marketing emails at any time by clicking “Unsubscribe” in any email or contacting us at [email protected]. Opting out of marketing emails will not affect transactional emails related to your account.

4. SMS / Text Message Marketing (TCPA Compliance)

5. Information Sharing & Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party vendors who help us operate the Service, including Stripe (payments), Amazon Web Services (hosting and file storage), and Resend (email delivery). These providers are contractually obligated to protect your data and use it only for the services they provide to us.
• Church Administrators: If you are a member taking an assessment through a church portal, your results are visible to your church's administrators. You consent to this when you take a church-administered assessment.
• Legal Compliance: We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of Spiritual Gifts Hub, our users, or the public.
• Business Transfers: If Spiritual Gifts Hub is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
• With Your Consent: We may share your information for any other purpose with your prior written consent.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as billing records, which we retain for 7 years for tax and accounting purposes).

Assessment data and congregation member records are retained as long as the associated church account is active. When a church account is deleted, all associated member data is permanently deleted.

7. Security

We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), hashed password storage (bcrypt), JWT-based authentication, and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use strong passwords and notify us immediately of any suspected unauthorized access.

8. Children's Privacy (COPPA)

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at [email protected] and we will delete it promptly.

Church administrators are responsible for ensuring that any minors participating in assessments have obtained appropriate parental consent in accordance with applicable law.

9. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request your data in a portable, machine-readable format.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time. Reply STOP to opt out of SMS.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and sold (we do not sell personal information), the right to opt out of any future sale, and the right to non-discrimination for exercising your rights. To submit a CCPA request, contact us at [email protected].

10. International Users

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers are located. By using the Service, you consent to this transfer.

11. Links to Third-Party Sites

The Service may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a prominent notice within the Service at least 14 days before the changes take effect. The “Effective Date” at the top of this policy indicates when it was last revised.

13. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, contact us:
Spiritual Gifts Hub — Privacy Team
[email protected]
spiritualgiftstesthub.com