Altarflow

Privacy Policy

Last updated: July 18, 2026

Effective Date: July 18, 2026

1. Introduction

AU Sigma LLC ("we," "us," or "our") operates Altarflow, a church management platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Contact Information:

  • Company: AU Sigma LLC
  • Email: support@altarflow.com
  • Address: San Francisco, CA

2. Information We Collect

Personal Information

We collect the following personal information when you register and use our Service:

  • Full name (first and last name)
  • Email address
  • Phone number
  • Mailing address
  • Organization information (church name, nonprofit status)

Financial Information

  • Donation amounts and payout data
  • Processing fees

Bank Account Information (via Plaid)

When you or your organization connect a bank account to our Service, we use Plaid Inc. ("Plaid") to establish that connection. Through Plaid, we may collect and receive:

  • Bank account and routing numbers
  • Account balances
  • Account transaction history
  • Account holder name and account type

By connecting a bank account, you grant Altarflow and Plaid the right to access and transmit your financial information from your financial institution as described in the Plaid End User Privacy Policy. You can disconnect your bank account at any time from your account settings.

Note: We do not store credit card information or billing addresses. All payment processing is handled securely by Stripe.

Usage Information

  • Account activity and feature usage
  • Communication logs within the platform
  • Error reports and performance data (via Sentry)
  • Analytics data about how you use our Service (via PostHog and Google Analytics)

Content You Upload

  • Photos and images for newsletters
  • Church member information you choose to store
  • Communication content and records

3. How We Use Your Information

We use your information to:

  • Provide and maintain our Service
  • Process donations and manage payouts through Stripe
  • Authenticate your account (via Clerk)
  • Send service-related communications
  • Provide customer support
  • Improve our Service through analytics
  • Send marketing communications (with your consent)
  • Comply with legal obligations

4. Information Sharing and Disclosure

We may share your information with:

Service Providers

  • Stripe: Payment processing and Connect account management
  • Plaid: Bank account connectivity, account verification, and financial data access
  • Clerk: User authentication and account management
  • Supabase: Database hosting and management
  • HubSpot: Customer relationship management
  • Resend: Email delivery services
  • Topol: Newsletter creation tools
  • Sentry: Error monitoring and debugging
  • PostHog: Analytics and user behavior insights
  • Google Analytics: Website traffic and usage analytics

Legal Requirements

We may disclose your information if required by law, legal process, or government request.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We do not sell, rent, or trade your personal information to third parties.

5. Data Security

We implement appropriate security measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication
  • Secure hosting infrastructure

However, no method of transmission over the internet is 100% secure.

6. Data Retention

  • Active accounts: We retain your information while your account is active
  • Deleted accounts: We retain your information for 120 days after account deletion
  • Bank connection data: When you disconnect a bank account or close your account, we promptly delete the associated Plaid access tokens and instruct Plaid to revoke access to your financial institution. Historical transaction records already imported into your organization's financial ledger may be retained as part of your organization's financial records, consistent with this policy and applicable law
  • Legal compliance: Some information may be retained longer if required by law

7. Your Rights

California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Request deletion of your personal information
  • Opt-out of the sale of personal information (we do not sell information)
  • Non-discrimination for exercising your rights

All Users

You may:

  • Access and update your account information
  • Request deletion of your account
  • Opt-out of marketing communications
  • Contact us with privacy concerns

To exercise these rights, contact us at support@altarflow.com.

8. Cookies and Tracking

We use cookies and similar tracking technologies. Please see our Cookie Policy for detailed information about:

  • Types of cookies we use
  • How to manage cookie preferences
  • Third-party tracking (PostHog, Google Analytics, Sentry)

9. Age Requirements

Our Service is intended for users 18 years of age and older. We do not knowingly collect information from children under 18.

10. International Users

Our Service is currently available only to users in the United States and U.S. territories. By using our Service, you consent to the transfer and processing of your information in the United States.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notification to your registered email address

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

By using Altarflow, you acknowledge that you have read, understood, and agree to this Privacy Policy.