Legal Documentation
At Stablish Solutions Inc., a Delaware Corporation (“we,” “us,” “our,” or the “Company”), we prioritize your privacy. This Privacy Policy details the information we collect from users of our websites, how we gather, use, and protect your information, and explains your rights concerning our collection, use, and disclosure of your data.
This Privacy Policy applies to our websites and web applications accessed via stablish.church , www.stablish.io , www.stablish.ai and all related domains and subdomains. These websites are operated by Stablish Solutions Inc. and provide information about our company and access to our online platforms designed to support churches or non-profit organizations. Our services include web building, form building, content management, donation platforms, communications, and other related services (collectively, the “Services”).
By using any part of our Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.
If you are in Europe:
For the purposes of the EU General Data Protection Regulation 2016/679 (the “GDPR”), the data controller of information you submit, or we otherwise collect when you use our Services, is Stablish Solutions Inc., and we can be reached at the address under the section “How to Contact Us” below.
“Information” covers all personal data processed by us, which means information that (either in isolation or in combination with other information) enables you to be identified directly or indirectly.
Please note that Stablish Solutions Inc. shall not be the controller of any third-party data you may submit to our Service, such as personal data you process within your church, CRMs, email communication, etc., which may be integrated or shared with our Service upon your decision and subject to the Terms of Service. We process such information solely as a processor, and depending on the scope of your activity, you may be the data controller.
Congregant Privacy
Your church has chosen to use our Website and Services to facilitate the operation of its website, web-based software, and/or fundraising platform. This privacy policy explains how we protect the security and privacy of your information. Please note that both we and your church collect personal information about you. The specifics of what we collect and how we use it are detailed in this Privacy Policy. However, your church owns the data collected about you, not us, and our role concerning such data is limited.
Data Ownership and Rights for Congregants
Our customers, such as your church, retain all rights to the data they store in our Services. We act as a “Service Provider” as defined by the California Consumer Privacy Act (CCPA) or a “Subprocessor” as defined by the General Data Protection Regulation (GDPR).
The data stored in our databases by users of our Services is entrusted to us for safekeeping but is not our data. We are legally and contractually obligated to uphold certain standards regarding the data we process, including:
Never retaining, disclosing, or using your church’s data for any purpose other than providing our Services.
Providing appropriate levels of technical and organizational measures to ensure the security of the data we process.
Assisting our customers in fulfilling their legal obligations concerning the data we process on their behalf.
You may have legal rights regarding how your church uses your personal information. These rights vary depending on where you live but generally include the right to:
Access, correct, or request deletion of your personal data.
Object to the processing of your personal data.
File a complaint with an applicable data protection authority.
Where the processing of personal data is based on your consent, withdraw consent at any time for future processing.
To exercise these rights, contact your church. We will take all necessary steps to assist your church in satisfying your requests.
II. Changes to the Privacy Policy
At Stablish Solutions Inc., our Services and business may evolve over time. Consequently, we may need to update this Privacy Policy periodically. Stablish Solutions Inc. reserves the right to modify or update this Privacy Policy at any time. If you disagree with any changes, you may deactivate your account or discontinue using our Services. Please review this policy periodically, especially before providing us with any information through the Services. This Privacy Policy was last updated on the date indicated above. Continued use of the Services after any changes indicates your acceptance of the revised Privacy Policy.
III. Information We Collect
a. Personal Information and Business Information
We collect information that you voluntarily provide via email, web forms, our products, or other direct interactions. This information helps us respond to your inquiries and assist you in using our products and services. We do not sell your information to third parties.
We avoid disclosing or sharing your information with affiliates or third parties. However, in rare cases, some basic information about you or your church (e.g., email, name, or other identifying information) may be used in third-party tools to help us recognize you or your account for customer service purposes. Unless you request otherwise, we may contact you via email to inform you about our services, new products, changes to this Privacy Policy, or to provide informational or educational newsletters.
You may provide us with sensitive data under the GDPR (e.g., health information). Such information will never be shared unless explicitly requested or authorized by you.
Our Services allow you to invite others to manage your account or provide information. Do not provide personal information about others unless authorized or required by applicable law or contract. Before supplying personal information about others, ensure you and the person consent to our Terms of Use and Privacy Policy. By submitting such information, you warrant that you have obtained the person's consent and agree to indemnify Stablish Solutions Inc. and its affiliates for any failure to comply with this requirement.
b. Information Collected Automatically
When you interact with our Services, we may automatically collect certain information from your devices, such as browser type, operating system, IP address, and location data. This information helps us improve our Services and provide a better user experience.
c. Aggregated Data
Unlike many service providers, we do not conduct detailed research or analytics on our customer demographics, interests, or behavior. We also do not aggregate data for the purpose of selling or sharing it with third parties. Any information you provide is used solely by our team to serve our customers' needs directly.
d. Registration Information
To access certain Services, you may need to register with Stablish Solutions Inc. During registration, you will be required to provide information such as your name and email address. This information is used to contact you about the Services you have expressed interest in and to provide access to protected areas of our Services.
e. Cookies and Other Electronic Technologies
We use cookies and similar technologies to enhance your experience with our Services. Cookies are small pieces of information stored on your device that help us remember your preferences and understand how you use our Services. You can manage your cookie preferences through your browser settings. Please note that blocking cookies may affect your access to certain features of our Services.
f. Social Media Data
If you interact with us on social media platforms (e.g., Facebook, Twitter, Instagram, LinkedIn), we may receive additional information about you, such as profile details, contact lists, and communications. This information is not actively aggregated or appended to your customer profile. Please refer to the privacy policies of the respective social media platforms for more details.
g. Third-Party Analytics
We do not use third-party analytics or behavior-tracking tools in our Services to collect data on our customers, ensuring the privacy and security of your church and congregation's information.
IV. How We Use the Information We Collect
Stablish Solutions Inc. uses the information collected through our Services in accordance with this Privacy Policy. If you provide information for a specific reason, we use it for that reason. For example, if you contact us via email, we will use your information to respond to your query or resolve your issue. If you provide information about yourself or third parties, we will use it to offer and monitor the services you access. Under the GDPR, we may use your information as necessary to fulfill our contractual obligations or to take steps at your request before entering into a contract.
a. Email Communication
Each marketing or promotional email will include instructions on how to unsubscribe. If you opt-out of promotional emails, we may still communicate with you via mail, phone, or social media. It may take up to 10 business days to be removed from our promotional email list.
We send notification and transactional emails about the Website and Services periodically. Generally, you cannot opt-out of these non-promotional communications, though you can manage some notification preferences in your account settings or by deactivating your account.
b. Information Collected through the Services
We use the information collected through our Services to provide and support our Services, process transactions, fulfill information requests, send and receive communications, update email lists, comply with laws, and enforce our Terms of Service and this Privacy Policy. Under the GDPR, this use is necessary to fulfill our contractual obligations, protect against fraud, or comply with legal requirements.
We may send communications related to the Services, such as updates about donations, completing forms, or providing churches with updated information. If you use features that allow communication with third parties, such as referrals, you confirm that you have the authority to provide their information and have informed them of our Privacy Policy. We reserve the right to identify you as the referrer in any communications sent to them. These third parties can opt-out of receiving further communications.
V. How We Share Data
Without your permission, we do not share data we collect from you with third parties, except as described below:
a. Third-Party Service Providers or Consultants
We may share data with limited third-party service providers to communicate with you about your account. These providers are restricted to using your data only to provide their services and must ensure they safeguard your data appropriately.
b. Compliance with Laws
We may disclose your data to third parties if we believe it's necessary to comply with laws, regulations, legal processes, or government requests; to enforce our agreements and policies; to protect the security or integrity of our site or services; or to protect ourselves, our customers, or the public from harm or illegal activities.
c. Affiliates
We may share data collected through our Services with our affiliates, who will use the data as described in this policy.
d. Business Transfers
In the event of a corporate sale, merger, reorganization, dissolution, or similar event, or during steps taken in anticipation of such events, user information may be part of the transferred assets.
e. Church Organizers
If you donate to a church’s fundraising campaign or submit information to a church through our Services, we may share your name, email address, and other provided information with the church, which may contact you. By participating in these activities, you consent to our sharing your information and to the church contacting you.
f. Aggregated or De-Identified Information
We may aggregate or de-identify your information so that it no longer relates to you individually. Our use and disclosure of such aggregated or de-identified information is not subject to this Privacy Policy and may be shared with others without limitation.We do not share your data (including the personal data of your end users or congregants) with third parties for their direct marketing purposes.
VI. Unsolicited Information
Certain information you provide may be publicly accessible, such as posts in forums or comment sections. We may also collect information through customer support communications, suggestions for new products or modifications, and other unsolicited submissions (collectively referred to as "Unsolicited Information"). By providing Unsolicited Information, you agree that:
We have no obligation of confidentiality regarding the Unsolicited Information.
We may already have similar information under consideration or development.
You grant us an irrevocable, non-exclusive, royalty-free, perpetual, worldwide license to use, modify, create derivative works, publish, distribute, and sublicense the Unsolicited Information.
You irrevocably waive any claims and assertions of moral rights against Stablish Solutions Inc. and its users related to such Unsolicited Information.
This section remains effective even after the termination of your account or use of our Services. This Privacy Policy does not apply to information collected by Stablish Solutions Inc. outside of the Services.
VII. Children
Our Services are not intended for individuals under the age of 16. If you are under 16, do not use the Services or provide any information through them. If you believe a child under 16 has provided personal information to Stablish Solutions Inc. through the Services, please contact us at support@stablish.io and we will take steps to delete such information as required by law.
VIII. Links to Other Websites
This Privacy Policy applies solely to our Services. The Services may contain links to other websites not operated or controlled by Stablish Solutions Inc. ("Third-Party Sites"). This Privacy Policy does not govern Third-Party Sites. We suggest reviewing the privacy policies of those sites directly for information on their practices.
IX. Your Privacy Rights and Retention of Your Information
We retain your information for a period consistent with the original purpose of collection. For example, we may retain your information while your account is active and for a reasonable period afterward. We may also retain your information as necessary to pursue legitimate business interests, conduct audits, comply with legal obligations, resolve disputes, and enforce agreements.
You may opt out of future communications from us at any time. If your personal data collection was based on consent, you have the right to revoke that consent at any time, which may affect your access to the Services.
You can request to review, correct, delete, or otherwise modify any personal information you have provided to us through the Website or Services. You can access and update certain information via the "Control Center" or "Dashboard" on our Services.
X. California Residents' Privacy Rights
Under Section 1798.83 of the California Civil Code, California residents can request information about personal data shared with third parties for direct marketing purposes during the previous calendar year. To request this information, contact us as described in the “How to Contact Us” section, and we will respond within 30 days as required by law.
XI. Additional GDPR Matters for Users in Europe
Access: You can request a copy of the information we process about you.
Rectification: You can request the correction of incomplete or inaccurate information.
Deletion: You can request the deletion of your information, except where retention is necessary to comply with legal obligations or to establish, exercise, or defend legal claims.
Restriction: You can restrict the processing of your information if the data is inaccurate, processing is unlawful, or we no longer need it for the intended purpose.
Portability: You can obtain and transmit information we hold about you in a structured, electronic format.
Objection: You can object to processing based on our legitimate interest unless we have compelling grounds or need to process the data for legal claims.
Withdrawing consent: You can withdraw your consent to our processing at any time, including opting out of marketing messages.
To exercise any of these rights, send a request to the email or mailing address in the “How to Contact Us” section. For privacy and security reasons, we may require you to verify your identity before fulfilling the request. Stablish Solutions Inc. may take up to 30 days to fulfill such requests.You can lodge a complaint with the local data protection authority if you believe we have not complied with applicable data protection laws. A list of local data protection authorities in European countries is available here.