Privacy policy

SundayBridge is operated by Sourdough AI LLC (“we,” “us”). Questions about this policy? Email [email protected].

Two kinds of information. Account information — your email and login, and the billing details Stripe needs to charge your subscription. And your church's data — the people, households, groups, attendance, giving, and pastoral care records you enter. We collect that so the product can do its job; we don't mine it for anything else.

We use a cookie to keep you signed in. For traffic measurement we use privacy-respecting analytics that don't track you across other sites, and we don't run advertising trackers. We don't sell or share what little we measure.

SundayBridge has two AI features: Ask AI, a chat you drive, and the insight panels that summarise what changed on a page. Both are powered by a model run by Anthropic, which acts as a processor on our behalf. You should know exactly what leaves the database.

When you ask a question, we send Anthropic your question and the results of the read-only summaries it needs to answer — things like a head count, an attendance trend, or a giving total. We do not send your full database. The summaries are built so that the private contents of a pastoral-care note are never readable by the assistant, and giving summaries never identify an individual giver. For the insight panels, we strip email addresses, phone numbers, and dates of birth out of the context before it is sent.

Anthropic processes this to generate the response and does not use it to train its models. We store the question, the answer, and which summaries were consulted against your church's record, so you can audit later what the assistant was told. Ask AI is switched off entirely in the public demo.

The assistant can only ever address your own church's records. That is enforced at the database, not merely requested in a prompt: it reads through a restricted, read-only database role that returns no rows at all unless your church is set for that query.

A short list of vendors helps us run the service: our cloud host (Amazon Web Services), our payment processor (Stripe), our email provider, and Anthropic, which powers the AI features described above. They process data on our behalf to provide the service and are not permitted to use it for their own purposes.

We keep your church's data for as long as your account is active. If you close your account or ask us to delete it, we remove your data within a reasonable period, except where we're required to keep limited records (for example, billing history).

You can view and correct the records in your account at any time. You can export your people directory to CSV, and every report exports to CSV as well — your records are yours, and they leave in a format anything can read. There is no self-service bulk export of everything at once yet; if you want a full copy, email us and we'll produce one.

You can ask us to delete your account and its data by emailing [email protected]. We'll say so on the changelog when a one-click full export ships.

If we change this policy, we'll update this page and its effective date. Continuing to use SundayBridge after a change means you accept the updated policy.