Privacy Policy

Nehemiah LLC ("Nehemiah", "we", "us") provides Nehemiah, project-management software for churches, at nehemiahos.com and app.nehemiahos.com. This policy explains what information we handle, why, and the choices you have.

Who this covers

• Churches that subscribe to Nehemiah ("customers"), and the staff, volunteers and other people they add ("users").
• Visitors to our website, including anyone who sends us a free-trial request.

For the information a church puts into Nehemiah, the church decides what to add and who can see it; we process it on the church's behalf. If you have a question about information your church added, please ask your church first. We'll help them answer it.

Information we collect

From churches and users

• Account details: names, email addresses and, if added, phone numbers; sign-in details (passwords are stored only as secure hashes by our sign-in provider).
• Church work: ministries, projects, to-dos, notes, requests, docs, files, pages, calendar items and similar content people create in Nehemiah.
• Connected services: if a church or person connects Planning Center or Google, we receive the information those connections allow (for example, people, services, calendar events, check-in and giving totals, or Drive file names). Connection keys are stored encrypted on our servers.
• Settings and activity: notification choices, and an audit log of important changes and of any support visits by our team.
• Billing: the plan, billing status and the church's Stripe customer and subscription identifiers. Card details are handled by Stripe; we never see or store card numbers.

From website visitors

• Free-trial requests: what you enter in the form (church, name, role, email, phone, city, size, software and note). It is emailed to our team and not stored on the website.
• Technical data: our hosting and security providers process IP addresses and basic request details to deliver the site and stop abuse. The website uses no advertising or tracking cookies.

How we use information

• To provide, secure and support Nehemiah for your church.
• To send the emails Nehemiah is set up to send (invites, sign-in links, notifications, reminders and summaries).
• To bill subscriptions through Stripe.
• To find and fix errors, and to keep the service reliable and safe.
• To reply to trial requests and questions.

We don't sell personal information, and we don't use church content for advertising.

Service providers

We use these providers to run Nehemiah. Each handles information only to provide its service to us.

Provider	What it does
Supabase	Database, sign-in, file storage and server functions
Netlify	Hosting for the Nehemiah app
Cloudflare	Website hosting, DNS, encrypted off-site backups and bot protection (Turnstile)
Resend	Sending email
Stripe	Payments and billing
Sentry	Error reports from the app, with personal details removed in your browser first
GitHub	Runs our backups and automated tests
Planning Center, Google	Only when a church or person chooses to connect them

We may also share information if the law requires it, to protect people's safety, or as part of a sale or reorganization of our business (in which case this policy continues to apply).

Google user data

When you connect a Google account, Nehemiah uses Google data only to provide the features you turn on (Drive search and links, and Calendar sync). Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We don't use Google data for advertising, and we don't let people read it except as needed for security, support you ask for, or the law.

Keeping and deleting information

• We keep a church's information while it uses Nehemiah. If a church cancels, its information is kept so it can come back; a church can ask us to export or delete it.
• Deleted files go to a trash for 30 days, then are removed.
• Backups are kept for a limited time and then replaced.
• Trial-request emails are kept only as long as needed to follow up.

Security

Each church's data is kept separate by the database itself, all traffic is encrypted, and data is encrypted at rest by our database provider. See our Security page for more. No system is perfectly secure, and we'll tell affected churches promptly if a breach affects their information.

Your choices and rights

• You can update your own name, email and notification settings in Nehemiah.
• You can ask your church, or us, to access, correct or delete your information. Depending on where you live, you may have additional rights; we'll honor them as the law requires.
• You can disconnect Planning Center or Google at any time in Nehemiah's settings, or from your Google account.

Children

Nehemiah is for church staff and adult volunteers. It isn't directed to children under 13, and we don't knowingly collect their information as users. Churches should take care with any information they add about minors.

Changes

If we make important changes, we'll update this page and the date above, and tell churches in the app or by email.

Contact

Questions or requests: privacy@nehemiahos.com.