Privacy Policy

When you create an EvangelIT account, we collect:

• Identity data — first name, last name, email address, password (hashed)
• Contact data — phone number (optional, only if you opt in to SMS)
• Faith affirmation — your agreement to our Statement of Faith
• Account type — individual believer or church/organisation admin
• Organisation data — if you sign up as a church admin, the church or ministry name

When you use the service, we collect:

• Contacts you add — names, phone numbers, emails of people you choose to reach out to
• Messages you send and receive — content of outreach conversations and pastoral check-ins
• Usage data — pages visited, features used, message counts
• Consent records — for any SMS recipient, we store the consent date and method

• To provide the EvangelIT service — sending outreach messages on your behalf, generating devotional content, and tracking contact journeys
• To send SMS messages to you (only if you explicitly opted in by checking the consent box during signup)
• To improve the platform — analysing aggregated usage patterns
• To comply with legal obligations and respond to lawful requests
• To detect and prevent fraud, abuse, or misuse

Consent is required. We will only send SMS to your phone number if you ticked the SMS consent checkbox during signup. Without that consent, we will never SMS you.

What you'll receive. If you opt in, you may receive SMS messages including ministry outreach, pastoral check-ins, devotional content, and care messages. Message frequency varies.

How to opt out. Reply STOP to any SMS to immediately unsubscribe. You can also reply UNSUBSCRIBE, CANCEL, END, QUIT, or REVOKE. We will stop sending immediately. Reply HELP to any SMS for support.

Costs. Message and data rates may apply. EvangelIT does not charge for receiving or sending messages.

Carrier delivery. Mobile carriers are not liable for delayed or undelivered messages.

When you add a contact to your EvangelIT account (for outreach or check-in purposes), you represent that you have either obtained the contact's consent to communicate with them, or you have a pre-existing relationship that reasonably permits such communication. You are responsible for the lawful use of the platform when reaching out to others.

EvangelIT records the consent status, date, and notes for each contact added by you, helping you maintain compliance with applicable communications laws (TCPA in the United States, GDPR in Europe, similar laws elsewhere).

We share data only with the service providers necessary to operate the platform:

• Twilio — for SMS and WhatsApp message delivery
• SendGrid — for email delivery
• Anthropic — for AI-assisted message drafting (no contact personal data is stored by Anthropic beyond the request lifecycle)
• Vercel — for hosting and infrastructure
• Railway — for database hosting

These service providers process data only on our instructions to operate the service; they are not permitted to use it for their own marketing.

We do not sell your personal information, and we do not share it with third parties or affiliates for their marketing or promotional purposes. In particular, mobile information and SMS opt-in consent are never shared with, sold to, or transferred to third parties or affiliates for marketing or promotional purposes.

We may disclose information if required by law, court order, or to protect the rights, safety, or property of EvangelIT, our users, or the public.

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g. fraud prevention, dispute resolution).

SMS opt-out records are retained indefinitely so that we never re-contact someone who has unsubscribed.

We use industry-standard security measures including encryption in transit (TLS), bcrypt password hashing, and access controls. No system is perfectly secure, but we take reasonable precautions to protect your data.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and personal data
• Opt out of SMS at any time by replying STOP
• Withdraw consent for any data processing you previously consented to
• Export your data in a portable format

To exercise any of these rights, contact us at outreach@evangelit.app.

EvangelIT is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us immediately.

EvangelIT is operated from the United States. If you use the service from outside the US, your information may be transferred to, stored, and processed in the US. By using EvangelIT you consent to this transfer.

EvangelIT is operated from the United States, but we serve users worldwide. We comply with applicable privacy laws including:

• EU General Data Protection Regulation (GDPR) for users in the European Economic Area
• UK GDPR + Data Protection Act 2018 for users in the United Kingdom
• Lei Geral de Proteção de Dados (LGPD) for users in Brazil
• Nigeria Data Protection Act 2023 (NDPA) for users in Nigeria
• Digital Personal Data Protection Act 2023 for users in India
• California Consumer Privacy Act (CCPA/CPRA) for California residents
• Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian users

Lawful basis for processing (GDPR Article 6):

• Contract performance: account creation, billing, providing the service
• Consent: SMS/WhatsApp messages to your contacts, marketing emails, voice features
• Legitimate interest: security monitoring, abuse prevention, service improvement
• Legal obligation: financial records, regulatory reporting

Special category data (GDPR Article 9): Religious beliefs, spiritual condition, and pastoral care information are “special category data” under GDPR. Our lawful basis for processing this data is your explicit consent when you create an EvangelIT account. You may withdraw consent at any time by deleting your account at Data & Privacy settings.

Your rights (varies by jurisdiction):

• Right of access: Get a copy of your data — use the export tool at /account/data-and-privacy
• Right to rectification: Correct inaccurate data through your account settings
• Right to erasure (right to be forgotten): Delete your account — use the deletion tool at /account/data-and-privacy (30-day grace window before permanent deletion)
• Right to data portability: Export your data in JSON format (machine-readable)
• Right to restrict processing: Email outreach@evangelit.app
• Right to object: Withdraw consent for marketing or AI processing
• Right to lodge a complaint: Contact your local data protection authority (e.g., your national supervisory authority for EU users, ICO for UK, ANPD for Brazil)

We respond to all data subject requests within 30 days per GDPR Article 12(3).

International data transfers: Personal data is processed on infrastructure located in the United States (Vercel, Railway, Twilio, SendGrid, Anthropic, Stripe). For EU/UK users, we rely on the European Commission's Standard Contractual Clauses (SCCs) and equivalent UK International Data Transfer Agreement as the lawful transfer mechanism. The full list of subprocessors is available at /subprocessors.

Age requirement: You must be at least 13 to use EvangelIT (16 if you are an EU resident, unless your member state sets a lower age). Parental consent is required below these thresholds.

Data Protection Officer: EvangelIT is not currently required to appoint a Data Protection Officer under GDPR Article 37. Privacy inquiries are handled by outreach@evangelit.app.

For church administrators using EvangelIT to process congregation members' data: you are the data controller under GDPR, EvangelIT is the processor. Our Data Processing Agreement governs that relationship.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification. Your continued use of EvangelIT after changes take effect constitutes acceptance of the updated policy.

For questions about this Privacy Policy or our data practices:

EvangelIT (Gooverio Labs LLC)
Email: outreach@evangelit.app
Website: www.evangelit.app
SMS Terms: https://www.evangelit.app/sms-terms