Privacy Policy

Last updated: July 2026

Who we are

ChurchManager is operated by Fortress Technology, a company registered in South Africa. We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) and, where applicable, other privacy laws such as the GDPR. You can reach us atcontact@churchmanager.io.

What we collect

We collect two kinds of information:

  • Account information — details you give us when you sign up or apply for early access, such as your name, email address, church name, and role.
  • Member data — information your church enters into the Service about its people: names, contact details, group membership, attendance, giving records, and pastoral notes.

We also collect limited technical data (such as browser type and pages visited) through analytics to understand how the website and Service are used.

How we use it

We use personal information only to:

  • provide, maintain, and improve the Service;
  • respond to your enquiries and provide support;
  • send service-related notices (such as onboarding steps or changes to terms);
  • keep the Service secure and prevent abuse.

We do not use member data for advertising, profiling, or any purpose beyond running the Service.

Member data: your church is in control

For the member data your church stores in ChurchManager, your church is the responsible party (the "controller") and we act as its operator (the "processor"). Your church decides what is collected, who on its team can see it through roles and permissions, and when it is deleted. Churches are responsible for having an appropriate basis under POPIA for the member information they record.

Sharing

We never sell personal information. We share it only with service providers who help us run the Service (such as hosting and email delivery) under contracts that protect your data, or where the law requires disclosure.

Security

Data is encrypted in transit and at rest. Access within our team is limited to what is needed to operate and support the Service, and access within your church is governed by the roles and permissions your administrators configure.

Retention & deletion

We keep personal information for as long as your account is active or as needed to provide the Service. When your church leaves, you can export all of your data, and we will permanently delete it from our systems on request, subject to any legal retention obligations.

Your rights

Under POPIA (and similar laws), you have the right to:

  • ask what personal information we hold about you;
  • request correction of inaccurate information;
  • request deletion of your information;
  • object to processing in certain circumstances;
  • lodge a complaint with the Information Regulator (South Africa).

If your information is held inside a church's ChurchManager account, contact that church first — it controls its member records. We will support the church in honouring your request.

Cookies & analytics

Our website uses a small number of cookies for essential functionality and Google Analytics to understand site usage. You can block cookies in your browser settings without losing access to the core Service.

Changes to this policy

We may update this policy from time to time. Material changes will be announced to account administrators by email or in-app notice before they take effect.

Contact

Privacy questions or requests? Email us atcontact@churchmanager.io.