Privacy Policy

1. Scope

This Privacy Policy explains how Steepley (“Steepley,” “we,” “us,” or “our”) handles personal information when you visit steepley.com, contact us, become a customer, use our website-management services, or communicate with us about a church website (collectively, the “Services”).

Churches may use Steepley to publish their own websites and receive messages through those websites. For information a visitor submits directly to a church, the church decides why the information is collected and Steepley processes it on the church’s behalf. Questions about a church’s use of that information should be directed to the church.

2. Information we collect

Information you provide

• Contact and organization details, such as your name, email address, mobile number, church name, role, and current website.
• Service communications, including emails, website-change requests, support messages, approvals, and feedback.
• Content and files supplied for a church website, such as copy, event details, photographs, documents, staff information, and links.
• Account and billing information needed to administer a subscription. Payment card information may be collected directly by a payment processor rather than by Steepley.

Information collected automatically

Our hosting and security providers may automatically receive technical information such as IP address, browser and device type, requested pages, timestamps, referring pages, and diagnostic or security logs. We may also use essential cookies or similar technologies to keep the Services secure and functioning.

3. How we use information

We use personal information to:

• respond to inquiries and evaluate get-started requests;
• create, host, maintain, secure, and update church websites;
• authenticate authorized contacts and confirm requested changes;
• communicate about projects, support, billing, and the Services;
• process transactions and administer subscriptions;
• detect abuse, prevent fraud, troubleshoot, and protect the Services;
• improve our workflows, reliability, and customer experience; and
• comply with law and enforce our agreements.

4. AI-assisted website operations

Steepley uses AI-assisted tools to help interpret change requests, organize church-provided content, and prepare website updates. Requests and relevant website content may be processed by service providers that supply these tools. We use human review and operational safeguards where appropriate, but customers should not send sensitive personal information that is unnecessary for a website update.

5. How we share information

We may share personal information with:

• service providers supporting hosting, email delivery, authentication, databases, file storage, source control, AI-assisted operations, billing, monitoring, and security;
• the church customer connected to a request, form submission, or website;
• professional advisers such as attorneys, accountants, and insurers;
• authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security; and
• a buyer, successor, or other party involved in a merger, financing, reorganization, or sale of all or part of the business.

Providers used in operating the Services may include Netlify, Resend, Amazon Web Services, GitHub, Cursor, authentication providers, database providers, and payment processors. Their services are governed by their own terms and privacy practices.

We do not sell personal information or share it for targeted advertising.

6. Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain business and security records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by the type of information and why it was collected. Website content and change history may be retained for backup, audit, and recovery purposes after a subscription ends.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No system or transmission is completely secure, so we cannot guarantee absolute security.

8. Your choices and rights

You may ask to access, correct, or delete personal information that Steepley controls, or object to or restrict certain uses, where applicable. You may also opt out of non-essential marketing email by using the unsubscribe instructions in the message or contacting us.

To make a request, email hello@steepley.com. We may need to verify your identity and authority. If the information was submitted to a church through its website, contact that church first.

9. Children’s privacy

Steepley’s Services are offered to churches and their authorized adult representatives, not directly to children under 13. We do not knowingly collect personal information from children under 13 through steepley.com. Church customers are responsible for obtaining any permissions required before asking Steepley to publish or process information about minors.

10. International processing

Steepley and its providers may process information in the United States and other countries. Those locations may have data-protection laws different from the laws where you live. Where required, we use appropriate safeguards for cross-border processing.

11. Changes to this policy

We may update this Privacy Policy as our Services or legal obligations change. We will post the revised policy here and change the “Last updated” date. If a change is material, we may provide additional notice where appropriate.

12. Contact us

Questions or requests about this Privacy Policy may be sent to hello@steepley.com.