This Privacy Policy describes how Together Technology, Inc. ("Together", "we", "us") collects, uses, and shares information when you use togethertech.app and our hosted ministry platform.

1. Information we collect

We collect three categories of information:

Account information — name, email, church or ministry name, and password (stored hashed). Required to operate your account.
Content you upload — sermon videos, audio, transcripts, member rosters, lesson materials, and anything else you put into the platform. This belongs to you.
Usage data — how you and your members interact with the platform, including page views, feature usage, and aggregated engagement metrics. Used to improve the product.

2. How we use it

We use the information we collect to operate the platform, respond to support requests, send service announcements (not marketing), and improve product features. We do not sell your data, and we never hand your account information to advertisers.

3. Who else sees it

We share information only with the subprocessors required to run the platform — payment processing (Stripe), email delivery (Postmark), SMS delivery (Twilio), and network, video, and hosting infrastructure (Cloudflare, Amazon Web Services). A full list of subprocessors is available on request.

Advertising measurement. If you sign up after clicking one of our ads, we tell Meta that a signup happened so we can tell which ads work. That message contains a one-way scrambled (hashed) form of your email address and an internal account reference — never a readable email, and never anything about what you do inside the platform. Separately, if you accept marketing cookies on our marketing site, Meta receives ordinary page-visit signals from that site. Both are described in our Cookie Policy, and the marketing cookies are off until you opt in.

4. Mobile & SMS messaging

If you opt in to text (SMS) notifications, we collect your mobile phone number and opt-in status to operate the notification program. We use this information only to deliver the messages you requested. We do not sell, rent, or share mobile opt-in information or phone numbers with third parties or affiliates for marketing purposes. Opt-in data is shared only with our SMS delivery provider (Twilio) solely to transmit those messages. You can opt out at any time by replying STOP to any message, or by managing notifications in your account. Message and data rates may apply. See our SMS Terms for the full program terms.

5. Your rights

You can export your data at any time from your account settings. You can request deletion of your account and all associated data — we'll process the deletion within 30 days. If you're in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA respectively, which we honor regardless of where you sign up from.

6. Data retention

We retain account data for as long as your account is active. Deleted data is purged from backups within 90 days. Aggregated, de-identified usage data may be retained indefinitely.

7. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We do not store payment card numbers — those go directly to Stripe. We follow industry-standard practices for access control, logging, and incident response.

8. Children

Together is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with information, contact us and we'll delete it.

9. Changes to this policy

We'll notify you by email of any material changes to this policy at least 30 days before they take effect. Minor clarifications may be made without notice.

10. Contact

Privacy questions: support@togethertech.app