Privacy Policy

PraisePro is a product of Orlov Digital, operated by David Orlov in Sedalia, Missouri. This Privacy Policy explains what information we collect when you use PraisePro, how we use it, and what choices you have. We believe in being straightforward, so this is written in plain language.

1. Information We Collect

Account Information: When you sign up, we collect your name, email address, and a password. Your password is never stored in plain text. It is hashed using bcrypt before being saved.

Organization Information: Your church or organization name, slug (used in your unique URL), and settings you configure (such as SMTP email settings, service preferences, and team structure).

Service and Schedule Data: The services you create, schedule items, team assignments, roles, and any notes or content you add to your services.

Uploaded Audio Files: If your congregation or team members submit audio files (such as backing tracks) through the music submission feature, those files are stored on our servers.

Payment Information: Payments are processed entirely by Stripe. We do not store your credit card number, CVC, or full billing details. We receive and store only your Stripe customer ID and subscription ID so we can manage your account status.

Usage Data: Basic server logs that include IP addresses, browser type, and pages visited. This is standard web server logging used for troubleshooting and security.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the PraisePro service
• Manage your account and subscription
• Send you service-related notifications (such as assignment confirmations, service reminders, and billing updates)
• Process payments through Stripe
• Respond to support requests
• Maintain security and prevent abuse

We do not use your information for advertising. We do not build profiles on you. We do not sell your data.

3. Data Sharing

We only share your data with third parties when it is necessary to provide the service:

• Stripe: For processing payments and managing subscriptions. Stripe has its own Privacy Policy.
• SMTP Email Provider: When we send you emails (notifications, password resets, billing alerts), they are routed through an email server. The email content and your email address are shared with the SMTP provider for delivery.

That is it. We do not sell, rent, or trade your personal information to anyone. We do not share your data with advertisers. We do not use third-party analytics or tracking services.

4. Cookies

PraisePro uses session cookies for one purpose: keeping you logged in. These are essential cookies required for the service to function.

We do not use tracking cookies. We do not use advertising cookies. We do not use third-party analytics cookies.

5. Data Retention

Your data is kept for as long as your account is active. If you decide to close your account, contact us and we will delete your data within 30 days of your request. This includes your account information, organization data, service schedules, and uploaded audio files.

Server logs are retained for up to 90 days for security and troubleshooting purposes, then automatically deleted.

6. Data Security

We take security seriously. Here is what we do to protect your data:

• Encryption in transit: All connections use HTTPS (TLS encryption). Your data is encrypted between your browser and our servers.
• Password hashing: Passwords are hashed using bcrypt. We never store or have access to your plain text password.
• Payment security: Stripe handles all payment processing. Card data never touches our servers.
• SMTP credential encryption: Tenant SMTP passwords are encrypted at the application level before storage.
• Rate limiting: Login attempts, PIN verification, and form submissions are rate-limited to prevent brute force attacks.
• Session security: Session cookies use secure flags, SameSite protection, and session IDs are regenerated on login.

No system is 100% secure. We do our best to protect your data, and we are transparent about the measures we take.

7. Children's Privacy

PraisePro is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

8. Your Rights

You have the right to:

• Access your data: Request a copy of the personal information we hold about you.
• Correct your data: Update or fix any inaccurate information in your account.
• Delete your data: Request that we delete your account and all associated data.

To exercise any of these rights, contact us at the email below. We will respond within 30 days.

9. Changes to This Policy

If we make changes to this Privacy Policy, we will notify you at least 30 days in advance via the email address associated with your account. The updated policy will also be posted on this page with a new effective date.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, reach out: