Privacy Policy | IllustrateTheWord

1. Introduction

IllustrateTheWord.com (“the Service”) is operated by ChurchWiseAI LTD, an Ontario, Canada corporation (“we,” “us,” or “our”). We are committed to protecting your privacy and handling your data responsibly in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial and international privacy laws.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use IllustrateTheWord.com.

2. Information We Collect

Account Information

When you create an account, we collect:

Email address
Name (if provided)
Authentication data (password hash or OAuth provider token)
Denomination or theological tradition preference (optional) — see “Sensitive Information” below

Sensitive Information (Religious Data)

Your theological tradition or denomination preference is classified as sensitive religious information under PIPEDA. We collect this data only with your express consent (provided when you select a tradition during signup or in your profile settings). This preference is used solely to personalize illustration recommendations and search results. You may change or remove this preference at any time in your profile settings.

Subscription and Payment Data

If you subscribe to Premium, payment processing is handled entirely by Stripe. We do not store your credit card number, expiration date, or CVC on our servers. We receive and store only:

Stripe customer ID and subscription ID
Subscription status and plan type
Billing email address

Usage Data

We automatically collect:

Pages visited and illustrations viewed
Search queries
Saved favorites and collections
Browser type and device information
IP address (anonymized for analytics)

Cookies

We use the following types of cookies:

Essential cookies: Required for authentication and site functionality (Supabase session cookies). These cannot be disabled.
Analytics cookies: Help us understand how visitors use the site (PostHog analytics, only with your consent via our cookie banner).

3. How We Use Your Information

To provide and maintain the Service, including search and favorites
To authenticate your account and manage sessions
To personalize your experience (tradition-filtered results, saved illustrations)
To process Premium subscription payments via Stripe
To improve the Service through aggregated, anonymized analytics
To communicate important updates about the Service or your subscription
To respond to support inquiries

We do not sell your personal data. We do not send marketing emails without your explicit consent.

4. Data Sharing and Sub-Processors

We do not sell your personal data. We share data only with the following service providers, each of which processes data on our behalf under appropriate agreements:

Supabase

Database and authentication — hosts account data, favorites, and usage records

Stripe

Payment processing — processes Premium subscription billing

Vercel

Hosting — processes web requests and serves pages

Resend

Transactional email — sends account-related emails (confirmations, password resets)

OpenAI

AI features — if you use AI chat support, your messages are processed; no PII is included beyond message content

PostHog

Analytics — anonymized usage data, only with your cookie consent

5. Data Retention

Account data

Retained while your account is active, plus 90 days after deletion to allow for account recovery.

Favorites and preferences

Preserved while your account is active; deleted with your account.

Billing records

Retained for 7 years as required by Canadian tax law.

Analytics data

Aggregated and anonymized; not linked to individual accounts after 90 days.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and access controls on our infrastructure. No method of transmission over the Internet is 100% secure, but we strive to protect your data.

7. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data
Withdraw cookie consent at any time
Withdraw consent for sensitive data (tradition preference) at any time

8. Canadian Privacy Law (PIPEDA)

Under PIPEDA, you have the right to access, correct, and challenge the accuracy of your personal information held by us. You may also withdraw consent for the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions. To make a request, contact our Privacy Officer at privacy@churchwiseai.com. We will respond within 30 days.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@churchwiseai.com.

10. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. For material changes, we will also notify registered users by email.

Questions about your privacy?

Contact our Privacy Officer — we're here to help.

ChurchWiseAI LTD

125 Concession Street

Ingersoll, ON, Canada N5C 1G2

privacy@churchwiseai.com Help Center