Privacy Policy

Introduction

IllustrateTheWord.com ("the Service") is operated by ChurchWiseAI LTD, an Ontario, Canada corporation ("we," "us," or "our"). We are committed to protecting your privacy and handling your data responsibly in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial and international privacy laws.

This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use IllustrateTheWord.com.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Authentication data (password hash or OAuth provider token)
• Denomination or theological tradition preference (optional) — see "Sensitive Information" below

Sensitive Information (Religious Data)

Your theological tradition or denomination preference is classified as sensitive religious information under PIPEDA. We collect this data only with your express consent (provided when you select a tradition during signup or in your profile settings). This preference is used solely to personalize illustration recommendations and search results. You may change or remove this preference at any time in your profile settings.

Subscription and Payment Data

If you subscribe to Premium, payment processing is handled entirely by Stripe. We do not store your credit card number, expiration date, or CVC on our servers. We receive and store only:

• Stripe customer ID and subscription ID
• Subscription status and plan type
• Billing email address

Usage Data

We automatically collect:

• Pages visited and illustrations viewed
• Search queries
• Saved favorites and collections
• Browser type and device information
• IP address (anonymized for analytics)

Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication and site functionality (Supabase session cookies). These cannot be disabled.
• Analytics cookies: Help us understand how visitors use the site (PostHog analytics, only with your consent via our cookie banner).

How We Use Your Information

• To provide and maintain the Service, including search and favorites
• To authenticate your account and manage sessions
• To personalize your experience (tradition-filtered results, saved illustrations)
• To process Premium subscription payments via Stripe
• To improve the Service through aggregated, anonymized analytics
• To communicate important updates about the Service or your subscription
• To respond to support inquiries

Data Sharing and Sub-Processors

We do not sell your personal data. We share data only with the following service providers, each of which processes data on our behalf under appropriate agreements:

• Supabase (database and authentication) — hosts account data, favorites, and usage records
• Stripe (payment processing) — processes Premium subscription billing
• Vercel (hosting) — processes web requests and serves pages
• Resend (transactional email) — sends account-related emails (confirmations, password resets)
• OpenAI (AI features) — if you use our AI chat support, your messages are sent to OpenAI for processing; no personally identifiable information is included beyond the message content
• PostHog (analytics) — anonymized usage data, only with your cookie consent

Data Retention

• Account data: Retained while your account is active, plus 90 days after deletion to allow for account recovery
• Favorites and preferences: Preserved while your account is active; deleted with your account
• Billing records: Retained for 7 years as required by Canadian tax law
• Analytics data: Aggregated and anonymized; not linked to individual accounts after 90 days

Your Rights

All Users

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Withdraw cookie consent at any time
• Withdraw consent for sensitive data (tradition preference) at any time

PIPEDA (Canadian Users)

Under PIPEDA, you have the right to access, correct, and challenge the accuracy of your personal information held by us. You may also withdraw consent for the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions. To make a request, contact our Privacy Officer at privacy@churchwiseai.com. We will respond within 30 days.

CCPA (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact privacy@churchwiseai.com.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase, and access controls on our infrastructure. No method of transmission over the Internet is 100% secure, but we strive to protect your data.

Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected such data, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. For material changes, we will also notify registered users by email.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact our Privacy Officer: privacy@churchwiseai.com

ChurchWiseAI LTD
125 Concession Street
Ingersoll, ON, Canada N5C 1G2
churchwiseai.com