Privacy Notice

Sanctum is operated by Fastfaith LLC ("Fastfaith", "we"), 3092 Pittston Court, Columbus, OH 43231, United States. For the account data of church leaders and for the operation of the platform, Fastfaith LLC is the data controller. For the congregational information a church puts into its own app — members, children's records, prayer requests, giving records — the church is the controller and Fastfaith LLC acts as its processor, handling that data only to provide the service.

• Account data (name, email, login credentials, church name and role) — to create and secure your account and provide the service. Legal basis: performance of our contract.
• Church content (events, announcements, sermon notes, worship songs, prayer requests, small groups, volunteer signups, children's ministry records including allergies, accommodations and emergency contacts) — to operate your church's app. Legal basis: performance of our contract with the church; the church is responsible for the consents it needs from its members and families.
• Support messages — to answer your questions. Legal basis: legitimate interests.
• Usage and technical data (pages visited, device identifiers, IP address, error logs) — to keep the service secure, diagnose faults and improve the product. Legal basis: legitimate interests.
• Marketing contact details where you ask for a trial or updates — legal basis: consent, which you may withdraw at any time.

Card and billing details are collected and processed by Paddle at checkout; we never see or store full payment card numbers.

• Service providers — hosting, database, storage, email and error-monitoring providers that operate the platform on our behalf under contract.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where we are required to disclose by law.

We do not sell personal data.

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We keep account and church data for as long as the subscription is active, and for up to 30 days after cancellation so you can export it — after which it is deleted or anonymised. Billing records are kept for as long as tax and accounting law requires. Security and error logs are kept for a limited period, normally up to 12 months.

We use appropriate technical and organisational measures: encryption in transit, row-level access controls so one church can never see another's data, role-based permissions separating pastors, staff and members, restricted staff access, and private storage with time-limited links for uploaded media.

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent. UK and EEA residents may also complain to their supervisory authority. Email privacy@fastfaith.app and we will respond within one month. If your request concerns data held by a particular church, we will pass it to that church.

We use essential cookies and local storage to keep you signed in and remember your theme preference; these are required for the service to work. We do not use advertising cookies. You can clear or block cookies in your browser, but signing in will stop working.

Fastfaith LLC, 3092 Pittston Court, Columbus, OH 43231, United States — privacy@fastfaith.app. See also our Terms & Conditions and Refund Policy.