Privacy Policy
1. Who we are
Atlas Church Solutions [legal entity name] ("Atlas," "we") provides a church operations platform at app.atlaschurchsolutions.com and a website at atlaschurchsolutions.com (together, the "Services"). This policy explains what we collect, why, who helps us process it, how long we keep it, and your choices.
2. Our two roles
- For church data, the church is in charge. When a church uses Atlas, the church decides what goes in: staff profiles, member records, events, tasks, files, huddle notes and recordings. The church is the data controller; Atlas processes that data on the church's behalf and only to provide the Services (see our Data Processing Agreement).
- For our own business data, Atlas is in charge. This covers church admin account and billing details, website visitors, and people who contact us.
3. What we collect
- Account and billing: name, email, church name, role, password (stored hashed by our authentication provider), and billing details. Card numbers are collected and stored by Stripe; Atlas never sees the full number.
- Church content: anything your church adds, including people records, departments, calendars, announcements, tasks, project boards, files, and huddles (agendas, notes, decisions, action items).
- Huddle recordings and AI output (only if your church turns on Atlas AI): audio recordings, transcripts, AI-drafted summaries, suggested decisions and action items, and follow-up flags. See section 5.
- Usage and device data: standard server logs kept by our hosting and database providers (such as IP address, browser type and the pages requested), used to keep the Services running and secure. Atlas does not use analytics, advertising or error-monitoring tools, and the app sets only the essential cookies needed to keep you signed in.
- Website and inquiries: information you submit through our website forms (name, email, church, role, staff size, and any message you write). Our website does not use analytics or tracking cookies.
4. How we use it
To provide and secure the Services; to process subscriptions and payments; to send account, security, invitation and notification emails; to respond to support requests; to follow up on website inquiries; and to improve the Services using aggregated information that doesn't identify individuals or churches. We do not sell personal data, and we do not use church content to train AI models.
5. Atlas AI and huddle recordings
Atlas AI is off unless a church admin accepts the Atlas AI Terms. When it's on:
- Transcription: huddle audio is sent to OpenAI to be transcribed.
- Summaries: transcripts and huddle notes are sent to Anthropic to draft a summary, decisions, action items and follow-up flags. Huddle summaries are only ever processed by Anthropic.
- Backup processing for some features: for certain other AI features, if Anthropic can't be used (for example, when a church's AI allowance runs out), Atlas may send the request to OpenAI instead. Features that can surface sensitive pastoral content, including huddle summaries, never do this; they stop instead.
- Provider terms: both providers process this data under their business/API terms. As of October 14, 2026, both state that they do not train their models on API data by default, and that they keep API inputs and outputs for a limited period (generally up to 30 days) to provide the service and detect abuse, longer only where required by law or, for Anthropic, where content is flagged under its usage policy.
- Who sees it inside the church: recordings, transcripts and draft summaries are visible to the huddle organizer and church admins. Other attendees see a summary only after the organizer accepts it. Follow-up flags are visible to the huddle organizer only. Church admins can export all of the church's data, including transcripts and accepted summaries from every huddle, private ones included. Exports don't include audio recordings or follow-up flags.
- Follow-up flags are prompts for pastoral attention, not a diagnosis, a crisis service, or a guarantee that anything concerning will be noticed.
- Consent: the person who starts a recording is responsible for telling those present. Atlas shows a recording indicator while recording.
- Turning it off: an admin can turn AI off at any time; after that, nothing new is sent to AI providers.
6. Who we share it with
We share personal data only with service providers that help us run Atlas ("subprocessors"), under contracts that limit their use to providing their service to us; when required by law; to protect the safety of people or the Services; or as part of a merger or sale of the business, with notice. Our current subprocessors are:
- Supabase: database, authentication, file and recording storage. All Service data. United States (AWS us-west-2).
- Vercel: application and website hosting. Requests and logs. United States.
- Stripe: payments and subscriptions. Billing contact and payment details. United States.
- OpenAI: huddle audio transcription, and backup text processing for some AI features (AI on only). United States.
- Anthropic: huddle summaries (AI on only). Transcripts, huddle notes, attendee names. United States.
- Resend: transactional and notification email. Name, email, message content. United States.
- HubSpot: website inquiry and contact forms (marketing website only, not the app). Form submissions. United States.
The full list, with links to each provider's privacy policy, lives on our sub-processors page. We'll give churches notice before adding a new one, as described in the Data Processing Agreement.
7. How long we keep it
- Huddle recordings: deleted automatically after the plan's retention period (30 days on Workspace), or sooner if the organizer or an admin deletes them.
- Transcripts: deleted together with their recording, on the same schedule.
- Accepted summaries, decisions and action items: kept until the church deletes them.
- Follow-up flags: deleted 90 days after the huddle.
- Other church content: kept while the church's account is active. After an account closes, the church has 30 days to export its data; after that it is permanently deleted from our systems, and from backups within 30 days.
- Billing records: kept as long as tax and accounting law requires.
- AI providers: see section 5.
8. Security
We encrypt data in transit (TLS) and at rest, keep recordings in private storage reachable only through our servers, restrict access by role, and limit Atlas staff access to what's needed to support you. No system is perfectly secure. If a breach affects your data, we'll notify affected churches without undue delay and as the law requires.
9. Children
Atlas is for church staff and isn't directed to children. Churches may store information about children in their ministries; the church is responsible for having the right to do so, including any parental consent the law requires. We use that information only to provide the Services to the church. Churches should avoid recording huddles in ways that capture children's sensitive information unless they have a clear need and the appropriate consent.
10. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or limit certain processing. We don't sell or "share" personal data for cross-context advertising.
- Church admins and website visitors: email privacy@atlaschurchsolutions.com. We'll respond within 45 days.
- Church members and staff: your church controls your data. Ask your church first; we'll help them respond.
Admins can export the church's data from Settings at any time.
11. Where data is processed
Atlas and its subprocessors process data in the United States. If you use Atlas from outside the U.S., your data will be transferred to the U.S.
12. Changes
We'll post updates here and change the date above. For material changes, we'll email church admins at least 30 days before they take effect. Changes to how Atlas AI handles data also require an admin to accept the updated AI Terms before AI continues.
13. Contact
privacy@atlaschurchsolutions.com · [mailing address]
Terms of Service
1. Agreement
These Terms are a contract between Atlas Church Solutions [legal entity name] ("Atlas," "we") and the church or organization that creates an Atlas account ("Church," "you"). The person who signs up confirms they're authorized to accept these Terms for the Church. These Terms include our Privacy Policy, Acceptable Use Policy, Cookie Policy, Data Processing Agreement and, if the Church turns on Atlas AI, the Atlas AI Terms shown in the app. If you don't agree, don't use the Services.
2. Accounts and users
The Church's admins control who has access and what role each person has. Each user needs their own login; don't share passwords. You're responsible for activity under your Church's accounts and must tell us right away at security@atlaschurchsolutions.com about any unauthorized use. Users must be at least 18 years old.
3. Data roles
The Church is the data controller for the content it puts into Atlas, and Atlas processes it on the Church's behalf. The Church is responsible for having the right to add that content, including consent from members, staff and, for minors, parents or guardians where the law requires.
4. Plans, trials and billing
- Card required. A payment card is collected to start every trial.
- Free trial. New churches get a 30-day free trial of Workspace. When the trial ends, the card is charged $49.99 per month unless the Church cancels before the trial ends. Canceling before the trial ends costs nothing. One free trial per church.
- Founding church code. A valid founding code gives 90 days free instead of 30, and then 40% off Workspace ($29.99 per month) for as long as the Church's subscription stays active. The founding price applies to the Workspace plan and continues as long as your subscription stays active. It ends if you cancel, and isn't available on a new subscription. Founding codes can't be combined with other offers and have no cash value.
- Renewal. Subscriptions renew automatically each month until canceled. You authorize us (through Stripe) to charge the card on file.
- Cancellation. Cancel any time in Settings. Access continues to the end of the paid month; we don't give refunds or credits for partial months, except where the law requires.
- Failed payments. If a payment fails, we'll retry and notify you. If it still fails, we may limit the account to read-only and later cancel the subscription.
- Price changes. We'll give at least 30 days' notice by email before a price change takes effect.
- Taxes. Prices don't include taxes; you're responsible for any that apply.
- AI allowance. Plans include an AI usage allowance. When it runs out, AI features pause, or for some features switch to a backup model, until the next billing period. Unused allowance doesn't roll over.
5. Your content
You keep ownership of everything your Church puts into Atlas. You give us a limited license to host, copy, process and display it only as needed to provide, secure and support the Services, including sending it to the subprocessors listed in our Privacy Policy. We don't sell it and don't use it to train AI models.
6. Atlas AI
Atlas AI is optional and off until a Church admin accepts the Atlas AI Terms. AI output can be inaccurate or incomplete, and the Church is responsible for reviewing it before relying on it. Follow-up flags are prompts for pastoral attention, not a substitute for pastoral care, professional counseling or emergency services, and Atlas doesn't guarantee that any concern will be flagged. The person who records a huddle is responsible for notifying those present and for complying with recording-consent laws. An admin can turn AI off at any time.
7. Acceptable use
Use of the Services must follow the Acceptable Use Policy.
8. License and restrictions
We give the Church a non-exclusive, non-transferable right to use the Services for its own ministry operations during its subscription. You may not copy, resell or reverse-engineer the Services, use them to run services for unaffiliated organizations, or try to get around usage limits or security, except for security research that follows our Security Policy.
9. Availability and changes
We work to keep the Services available but don't guarantee uninterrupted service. We'll give reasonable notice of planned maintenance when we can. We may improve or change features; if we remove a core feature you pay for, we'll tell you in advance.
10. Data export and deletion
Admins can export the Church's data at any time. After a subscription ends, the account may become read-only, and the Church has 30 days to export. After that we permanently delete the Church's data, as described in the Privacy Policy.
11. Suspension and termination
We may suspend access, after notice where practical, for a serious or repeated breach of these Terms or the Acceptable Use Policy, for non-payment, or to prevent harm. You may close your account at any time.
12. Disclaimers
THE SERVICES, INCLUDING AI OUTPUT, ARE PROVIDED "AS IS" AND "AS AVAILABLE." TO THE EXTENT THE LAW ALLOWS, WE DISCLAIM ALL IMPLIED WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT.
13. Limitation of liability
To the extent the law allows, Atlas isn't liable for indirect, incidental, special or consequential damages, or lost data or profits. Our total liability for all claims is limited to the amount the Church paid us in the 12 months before the claim.
14. Indemnification
You'll defend and indemnify Atlas against third-party claims arising from your content, your recordings (including lack of consent), or your breach of these Terms. We'll defend you against third-party claims that the Services, used as permitted, infringe their intellectual property.
15. Changes to these Terms
We'll email Church admins at least 30 days before material changes take effect. Continuing to use the Services after that means you accept them.
16. Governing law and disputes
Florida law governs. Disputes go first to 30 days of informal resolution, then to binding arbitration under the AAA Commercial Arbitration Rules, held remotely or in Florida. Atlas pays filing fees for claims under $10,000 unless the claim is frivolous. Claims are brought individually, not as a class.
17. General
These Terms are the whole agreement on this subject. If a part is unenforceable, the rest stands. Sections 5, 10, 12, 13, 14 and 16 survive termination.
18. Contact
support@atlaschurchsolutions.com · [mailing address]
Acceptable Use Policy
1. Purpose
This Acceptable Use Policy ("AUP") applies to everyone who uses Atlas Church Solutions and is part of our Terms of Service. It exists so the Services are used in a responsible, legal and ethical way that doesn't harm Atlas, other churches, or anyone else.
2. Prohibited activities and content
You agree not to use the Services for:
- Any unlawful purpose or activity that violates local, state, national, or international law.
- Harassment, threats, intimidation, abusive behavior, or discriminatory practices directed at any individual or group.
- Spam, unsolicited commercial communications, mass mailings, phishing, social engineering, or fraud.
- Hacking, cracking, or attempting to gain unauthorized access to the Services or other systems, or sharing login credentials with people who aren't authorized.
- Uploading third-party copyrighted content (such as sermon videos, licensed music, or curriculum materials) without the appropriate licenses or permissions.
- Uploading content that is illegal, obscene, defamatory, or that contains child sexual abuse material.
- Uploading content that contains malware or other malicious code, or that violates anyone's privacy or confidentiality.
3. Church and member data
Because church data is sensitive, you also agree not to:
- Use member data for commercial purposes outside the church's own ministry operations (for example, using a congregation list to market a personal business).
- Share, sell, or distribute member data or congregation lists to third parties without the members' consent.
- Export member data from Atlas into AI tools or automated systems outside Atlas without your church's authorization. Using Atlas AI features after a church admin accepts the Atlas AI Terms is authorized.
4. Recording
You agree not to record a huddle without telling the people present, or to record conversations people reasonably expect to be confidential (such as counseling) without their clear agreement. The person who starts a recording is responsible for complying with recording-consent laws where the participants are.
5. Infrastructure protection
You agree not to:
- Scrape, crawl, or systematically access the Services without our written permission.
- Use automated tools or bots to access the Services in a way that strains our infrastructure.
- Conduct denial-of-service attacks or reverse-engineer any part of the Services.
Security research that follows our Security Policy is authorized and isn't a violation of this Acceptable Use Policy.
6. Enforcement
If we find a violation of this AUP, we'll generally give written notice and a reasonable time to fix it. We may suspend or end access immediately, without notice, if a violation poses an immediate threat to the platform, other users, or the public. To report behavior that violates this AUP, email security@atlaschurchsolutions.com.
Data Processing Agreement
1. Scope and purpose
This Data Processing Agreement ("DPA") is between Atlas Church Solutions ("Atlas") and the church or organization using the Services ("Customer"). It applies whenever the Customer is a controller of personal data and Atlas processes that data on the Customer's behalf to provide the Services. By accepting the Terms of Service, the Customer enters into this DPA. "Personal Data" has the meaning given in applicable data protection laws, including the CCPA and GDPR.
2. Description of the processing
- Subject matter: providing the Atlas church operations platform to the Customer.
- Duration: the Customer's subscription, plus the 30-day export window after it ends.
- Nature and purpose: storing, organizing, displaying and backing up the Customer's content so its staff can use it; sending notification emails; and, when the Customer turns on Atlas AI, transcribing huddle recordings and drafting summaries.
- Types of data: names, contact details, roles and departments; events, tasks, announcements, project boards and files; huddle agendas, notes, decisions and action items; and, with Atlas AI on, huddle audio recordings, transcripts, AI-drafted summaries and follow-up flags.
- Categories of people: the Customer's staff, volunteers, members, attendees and others the Customer chooses to record in Atlas.
3. Subprocessors
Atlas uses the subprocessors listed on our sub-processors page, and the Customer authorizes them by accepting these terms. Atlas will tell Customers at least 30 days before a new or replacement subprocessor begins processing Personal Data, so they can object. Customers may object in writing to privacy@atlaschurchsolutions.com within 30 days of the notice. If Atlas can't accommodate an objection, the Customer may end the affected Services and receive a pro-rated refund of any prepaid, unused fees.
4. Atlas's obligations and confidentiality
Atlas processes Personal Data only on the Customer's documented instructions, which include the Terms of Service, this DPA and the Customer's use of the Services. Everyone at Atlas who can access Personal Data is bound by confidentiality obligations.
5. Helping with data subject requests
Atlas will help the Customer respond to requests from individuals to access, correct, delete, restrict or export their Personal Data, using the tools in the Services (including admin export) and reasonable additional help. If an individual contacts Atlas directly, we'll pass the request to the Customer and follow the Customer's instructions.
6. Security
Atlas encrypts Personal Data in transit (TLS) and at rest, keeps huddle recordings in private storage reachable only through Atlas's servers, restricts access by role inside the Services, and limits Atlas staff access to what's needed to operate and support the Services. Atlas will keep these measures in place and improve them over time.
7. Breach notification
If Atlas becomes aware of a Personal Data breach affecting the Customer's data, Atlas will notify the Customer without undue delay and no later than 72 hours after becoming aware of it, with enough information for the Customer to notify authorities and affected individuals as required.
8. Where data is processed
Atlas and its subprocessors process Personal Data in the United States. Where the law requires safeguards for transferring Personal Data from another country to the U.S., Atlas will rely on appropriate mechanisms such as Standard Contractual Clauses.
9. Return or deletion of data
When the Services end, the Customer has 30 days to export its content. After that, Atlas permanently deletes the Customer's Personal Data from its systems, and from backups within a further 30 days, unless the law requires Atlas to keep it. Atlas will confirm deletion in writing on request.
10. Showing compliance
Atlas will give the Customer the information reasonably needed to show that it is meeting this DPA, including answers to a security questionnaire. Where the law gives the Customer a right to audit, Atlas will cooperate with reasonable, pre-arranged audits that don't disrupt the Services or expose other customers' data.