Privacy Policy

1. Overview

B.Ent Group ("we," "our," or "us") operates StewardReach, a ministry growth and outreach platform available at stewardreach.com. This Privacy Policy explains how we collect, use, store, and share information when you use StewardReach as a ministry administrator ("Customer") or when end users ("Guests") interact with a ministry's public-facing pages powered by StewardReach.

By using StewardReach, you agree to the collection and use of information as described in this policy.

2. Who This Policy Applies To

This policy covers two categories of people:

• Customers (Ministry Administrators): Churches and organizations that create a StewardReach account to manage their outreach and guest follow-up.
• Guests (End Users):Individuals who interact with a ministry's public StewardReach page — for example, by submitting a visit request, prayer request, or event RSVP. If you are a Guest, the ministry you engaged with is primarily responsible for your data. You should contact that ministry directly with any privacy requests.

3. Information We Collect

3a. From Customers (Ministry Accounts)

• Account information: Name, email address, and password when you register
• Ministry information: Church name, address, service times, phone number, website, and logo
• Billing information: Subscription plan selection and payment method (processed and stored by Stripe — we do not store full card numbers)
• Team member information: Names and email addresses of staff you invite to your account
• Usage data: Pages visited, features used, actions taken, and session metadata (browser type, IP address, device type)

3b. From Guests (via Ministry Pages)

When a Guest submits a form through a ministry's StewardReach page, we collect on behalf of that ministry:

• Full name
• Email address
• Phone number
• Preferred visit date and service time
• Number and ages of people in their group
• How they heard about the ministry
• Prayer requests (submitted voluntarily)
• Event RSVP and check-in data

This data is stored in the ministry's account and is controlled by the ministry, not by B.Ent Group. We process it solely to provide the services described in our Terms of Service.

4. How We Use Information

For Customers

• To create and manage your account
• To process subscription payments and send receipts
• To provide customer support
• To send product updates, feature announcements, and service notifications
• To improve the platform, analyze usage trends, and develop new features
• To detect and prevent fraud, abuse, or security incidents

For Guests

• To deliver visit confirmations, reminders, and follow-up messages on behalf of the ministry
• To fulfill event RSVPs and facilitate check-in
• To relay prayer requests to the ministry team
• To enable the ministry to manage its guest relationships through the platform

We do not sell, rent, or trade any personal information to third parties for their own marketing purposes.

5. SMS and Email Communications

StewardReach sends automated SMS text messages and emails on behalf of ministries to their guests as part of follow-up sequences and notifications. These communications are sent using Twilio (SMS) and Resend (email).

For Guests: If you receive an SMS from a ministry using StewardReach, you may opt out at any time by replying STOP to any text message. You may also contact the ministry directly to request removal from their follow-up list. Message and data rates may apply.

For Customers: As a ministry, you are responsible for obtaining proper consent from guests before enrolling them in SMS or email sequences. StewardReach provides the tools; you are responsible for the legal basis under TCPA, CAN-SPAM, and any other applicable laws.

6. Third-Party Services We Use

StewardReach relies on the following trusted third-party service providers to operate the platform. Each provider processes data only as necessary to provide their specific service:

We do not share personal data with any third party beyond what is necessary for the operation of the platform. We require all service providers to maintain appropriate confidentiality and security measures.

7. Data Security

We take the security of your data seriously. StewardReach employs the following measures:

• All data is encrypted in transit using TLS/HTTPS
• Data at rest is encrypted by our hosting and database providers
• Row-level security (RLS) policies ensure ministries can only access their own data
• Authentication is handled via Supabase Auth with hashed password storage
• Access to production systems is limited to authorized personnel only

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. Data Retention

We retain your data for as long as your account is active and for a period thereafter as needed to fulfill legal obligations, resolve disputes, or enforce agreements.

• Active accounts: All data is retained and accessible while your subscription is active
• Cancelled accounts: Data is retained for 30 days after cancellation to allow export, then deleted
• Guest data: Retained within the ministry's account per the above schedule; the ministry controls deletion
• Payment records: Retained as required by financial regulations (typically 7 years)

You may request early deletion of your account data by contacting us at privacy@stewardreach.com.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request an export of your data in a machine-readable format
• Opt-out: Opt out of non-transactional marketing emails at any time by clicking "Unsubscribe" or contacting us directly
• Restriction: Request that we limit how we process your data in certain circumstances

To exercise any of these rights, contact us at privacy@stewardreach.com. We will respond within 30 days. Please note that if you are a Guest, your primary rights are held with respect to the ministry that collected your data — we will direct your request accordingly.

10. Cookies and Tracking

StewardReach uses essential cookies to maintain your login session and remember your preferences. We do not currently use third-party advertising cookies or cross-site tracking technologies.

We may use anonymous usage analytics to understand how the platform is used and to improve features. This data does not identify individual users and is not sold or shared with third parties.

11. Children's Privacy

StewardReach is intended for use by churches and ministry organizations and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at privacy@stewardreach.com and we will delete that information promptly.

Ministries that collect information from minors (for example, through youth event RSVPs) are responsible for obtaining appropriate parental consent under applicable laws including COPPA.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information.

We do not sell personal information. To exercise your California rights, contact us at privacy@stewardreach.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will notify you via email or prominent in-app notice at least 14 days before the changes take effect.

We encourage you to review this policy periodically. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: