Privacy Policy

This policy explains what happens to your information on the Churchgether website and what we measure while you browse. It applies only to this site — the app used by the members of a church has its own policy, as explained at the end.

Who is responsible for your data

The churchgether.com website is operated by Horebe Tech, Brazilian company registration (CNPJ) 53.497.763/0001-56, which is responsible for the decisions about the processing described here (the “controller”, in the vocabulary of the LGPD, Brazil’s General Data Protection Law).

For anything related to privacy, write to us at contato@churchgether.com.

What data we collect

The site has no form and does not ask for any of your data. There is no field to fill in, we do not store your name, e-mail or phone number, and we do not create visitor accounts.

Every contact button leads to a WhatsApp conversation. When you click one of them, WhatsApp opens with a pre-written message, and you are the one who decides to send it. From then on the conversation happens inside WhatsApp: whatever you write there reaches Horebe Tech’s sales team like any other WhatsApp message, and WhatsApp’s own privacy policy, which we do not control, also applies.

On the site itself, we store only two things, both in your own browser:

• your cookie decision, in localStorage, for 12 months;
• the campaign parameters from the URL (utm_source, utm_medium, utm_campaign, utm_content, utm_term), in sessionStorage, deleted when you close the tab.

If you choose a language with the site’s language switcher, that choice is stored in a cg_locale cookie for 12 months, so that the site opens in your language next time. It is a functional cookie: it holds only the language code and is not used for measurement.

We do not collect sensitive data, we do not ask for documents and we do not ask for information about your faith or anyone else’s.

Why we measure and on what legal basis

Measuring how the site is used has a single purpose: understanding which pages and which buttons help people who are getting to know Churchgether, in order to improve the site.

• Google Analytics 4 only starts with your consent (article 7, I, of the LGPD), given in the cookie notice and revocable at any time.
• Vercel’s aggregate measurement, which uses no cookie or persistent identifier, relies on our legitimate interest (article 7, IX) in maintaining and improving the site itself.
• UXCam, which records browsing sessions to show where people get stuck on the site, also only starts with your consent (article 7, I), through the same cookie notice and equally revocable.

If you start a WhatsApp conversation, the data in that conversation is processed in order to respond to your contact — preliminary steps towards a contract, at the request of the data subject (article 7, V).

How long we keep it

• Cookie decision: 12 months, in your browser. You delete it by clearing the site’s data.
• Campaign parameters: until you close the tab.
• Language choice: 12 months, in your browser. You delete it by clearing the site’s cookies.
• WhatsApp conversations: kept in the business account’s history. Contacts that do not become a contract are deleted after 24 months; those that do are then processed in the context of the relationship with the church.

You can request deletion before that at any time (see “Your rights”).

Cookies and usage measurement

The site uses three measurement tools, and they work in different ways:

• Google Analytics 4. Only starts after you accept in the cookie notice. Until there is an acceptance — or if you decline — GA4 runs in Consent Mode with storage denied: no analytics cookie is written to your browser. Your decision is stored in your browser’s localStorage for 12 months and can be changed by clearing the site’s data.
• Vercel Web Analytics. Always runs, with no cookie and no persistent identifier. It only produces aggregate counts: pages viewed, traffic sources, country and device type.
• UXCam. Like GA4, it only loads after your acceptance — until then, or if you decline, its script never reaches your browser. Once active, it records your browsing on this page: pointer movement, clicks, scrolling and what appears on screen, so we can see where people get lost. Since the site has no form fields, there is nothing typed to be recorded. We use it anonymously only: we do not link a recording to anyone’s name, e-mail or phone number.

The events these tools receive are categorical — which section you saw, which button was clicked, which part of the page it came from — and do not identify you. No content from WhatsApp conversations is sent to them.

The site also stores the campaign parameters from the URL in your browser’s sessionStorage, to know which campaign brought the visit. That information is deleted when you close the tab.

Who we share with

We do not sell, rent or transfer your data. It is processed only by Horebe Tech’s sales team and by the providers that keep the site running:

Provider	Purpose
Vercel	Site hosting and aggregate access measurement
Google	Google Analytics 4, when you accept cookies
UXCam	Anonymous recording of browsing on the site, when you accept cookies
WhatsApp (Meta)	Channel for the conversations started from the site’s buttons

These providers act as processors: they handle the data following our instructions and cannot use it for their own purposes. Some of them keep infrastructure outside Brazil, under contractual protection commitments compatible with the LGPD.

We may also share information when required by law or by a competent authority.

What we do not do

• We do not use your data for advertising or to build ad profiles.
• We do not sell data or pass it on to commercial partners.
• We do not send unsolicited mass communication: we reply to those who wrote to us, about what was asked.
• We do not track you on other sites.

Your rights

Article 18 of the LGPD guarantees that you can, at any time:

• confirm whether we process your data and access that data;
• correct incomplete, inaccurate or outdated data;
• request the anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
• request the portability of your data to another provider;
• request the deletion of your data;
• know who we share your data with;
• object to processing you consider irregular;
• withdraw the consent given for analytics cookies.

To exercise any of these rights, write to contato@churchgether.com with your request. We reply within 15 days and may ask for a simple identity confirmation before acting, so as not to hand data to the wrong person.

Security

The site is served over an encrypted connection (HTTPS) and is fully static: there is no site database, no server receiving your data and nothing stored on your side beyond what is described above. WhatsApp conversations are protected by WhatsApp’s own encryption.

The members’ app has its own policy

This policy covers only the institutional website. The app used by members is contracted by each church: there, the church is responsible for the community’s data and Horebe Tech acts as a processor, following the instructions and the contract signed with it. If you are a member of a church that uses Churchgether, look for the policy provided by your church.

Changes to this policy

If anything changes in how we process data, we update this text and the date at the top of the page. Significant changes will be communicated to those already in contact with us.

Contact us

Questions about this policy, requests related to your data or any other privacy matter: contato@churchgether.com.