Effective date: April 1, 2026
Last updated: October 27, 2026

This Privacy Policy explains how NazTrack LLC ("NazTrack," "we," "us") collects, uses, shares, and protects information when you use the NazTrack website and application (the "Service").

NazTrack is church-management software used by local churches and district offices (our "Customers"). This matters for how your information is handled:

• Information about you as a NazTrack user (your login, your account settings, how you use the Service) is handled by NazTrack under this policy.
• Records a church or district keeps in NazTrack (member directories, giving records, attendance, minister records, and similar) belong to that church or district. We store and process those records on the Customer's behalf and under its instructions, as a service provider. If you are a church member or attendee and have questions about your records, please contact your church first. We will help them respond.

1. Information we collect

1.1 Information you give us when you use NazTrack

• Account information: name, email address, password (stored only as a one-way hash we cannot read), preferred language, time zone, and the churches or districts you have access to.
• Billing information: when a church or district subscribes, payment is processed by our payment processor, Stripe. We do not receive or store full card numbers. We keep the billing contact, subscription status, and payment history.
• Support communications: messages you send us and our replies.

1.2 Records Customers store in NazTrack

Churches and districts decide what to enter. Depending on the features they use, this can include:

• People and family records: names, contact details (address, email, phone), date of birth, gender, family relationships, photos, membership status and history, baptism, dedication, and anniversary dates, and notes.
• Children's information: children's names, ages, grades, schools, family relationships, and check-in records, entered by church staff or parents and guardians.
• Giving records: contribution amounts, dates, funds, and batch information used for giving statements and church accounting.
• Attendance, group, volunteer, and event records.
• Minister and leadership records: credentials, assignments, pastoral reviews, licensing and ordination workflows, and related documents. This can include background-check status and supporting documents.
• Church financial and administrative records: accounting entries, budgets, expenses, and reports.
• Vendor tax information: for churches that use NazTrack's accounting features, vendor names, addresses, taxpayer identification numbers (which, for an individual, may be a Social Security number), and W-9 forms, used to prepare 1099 information returns.
• Form and voting responses: submissions to forms or votes that a church or district publishes, including from people who don't have a NazTrack account.

Because these are church and denominational records, they may reveal a person's religious affiliation. We treat all Customer records as confidential.

1.3 Information collected automatically

• Log and device information: IP address, browser type, pages requested, and dates and times of access. We use this for security, troubleshooting, and keeping the Service running.
• Cookies: we use only cookies needed to operate the Service: a session cookie that keeps you signed in, an optional "remember me" cookie (up to 30 days), and a security token that prevents forged requests. We do not use advertising cookies, cross-site tracking, or third-party analytics.
• Email delivery information: for emails sent through NazTrack, our email provider reports delivery status (for example, delivered, bounced, or marked as spam) so we can keep email working and honor suppression requests. We do not record whether emails are opened. We do not record if links in emails are clicked.

2. How we use information

We use information to:

• Provide, maintain, and secure the Service, including authentication, backups, and fraud and abuse prevention.
• Carry out the instructions of the church or district that controls the records, such as generating giving statements, sending emails it composes, and producing reports.
• Process subscription billing.
• Send service messages, such as password resets, security notices, and release notes (which you can unsubscribe from).
• Respond to support requests.
• Comply with law and enforce our terms.

We do not sell personal information, share it for cross-context behavioral advertising, or use Customer records for our own marketing. We do not use personal information, including Customer records, to train artificial-intelligence models, including large language models.

3. How we share information

We share information only as follows:

• Within your church or district: people your church or district has authorized can see records according to the permissions it sets. Districts may see certain records of churches in their district as part of normal denominational reporting.
• Service providers (sub-processors) that help us run NazTrack, under contracts that limit their use of the data to providing services to us:

• Legal reasons: when required by law, subpoena, or court order, or when needed to protect the rights, safety, or property of NazTrack, our users, or others. Where legally allowed, we will notify the affected Customer before disclosing its records.
• Business transfers: if NazTrack is involved in a merger, acquisition, or sale of assets, information may be transferred under the protections of this policy. We will give notice before information becomes subject to a different privacy policy.
• With consent: in any other case, only with the consent of the Customer or the individual.

4. Children's privacy

NazTrack is a tool for church administrators and is not directed to children. We do not knowingly allow children under 13 to create accounts. Information about children is entered and managed by their church, or by parents and guardians through church-provided features, and is used only to provide the church's services, such as check-in and children's ministry records. If you believe a child has created an account or that a child's information should be removed, contact the child's church or send us a privacy request. Open the privacy request form

5. Data security

We use administrative, technical, and physical safeguards designed to protect information, including:

• Encryption in transit (HTTPS/TLS) and encryption at rest for our database, its backups, and file storage
• Hashed passwords
• Role-based permissions controlled by each church and district
• Restricted internal access, with access to production systems limited to authorized personnel
• Regular backups

Social Security numbers: some churches store vendors' taxpayer identification numbers, which can be Social Security numbers, to prepare 1099 information returns. We protect the confidentiality of these numbers: they are encrypted with a separate key that is not stored in our database, and NazTrack displays only the last four digits. Access to W-9 forms is limited to people the church authorizes to manage vendors. NazTrack prohibits the unlawful disclosure of Social Security numbers, does not sell or publicly display them, and discloses them only as needed to provide the Service or as required by law.

No system is perfectly secure. If a security breach affects your personal information, we will notify affected Customers, and individuals and regulators where the law requires, without unreasonable delay.

6. Data retention

• Account information: We retain account information while your account is active and afterward unless you request deletion, subject to any legal requirements to retain it.
• Customer records: We retain Customer records indefinitely, including after a church or district ends its subscription, unless we are legally required to delete them. These records may include historical giving records needed for tax statements and membership history.
• Database backups: Our hosting provider creates daily database backups with a rolling seven-day recovery window. Records deleted from the active database may remain in backups until that window expires.
• File storage: Files stored in DigitalOcean Spaces do not receive built-in automatic backups. Their retention follows the applicable account and Customer record retention periods above.
• Server logs: We do not separately store application runtime logs or forward them to an external logging service. DigitalOcean processes runtime logs for operation and troubleshooting but does not publish a fixed retention period for them. DigitalOcean retains build and deployment logs for 90 days.

7. Your choices and rights

For records kept by your church or district: contact your church. It controls those records and can view, correct, export, or remove them. If you contact us about a church's records, we will forward your request to that church and help it respond.

For your NazTrack account: you can update your name, language, and password in your account settings. You can unsubscribe from non-essential emails using the link in each email. To request access to, correction of, or deletion of your account information, send us a privacy request. Open the privacy request form

State privacy rights: depending on where you live, you may have rights under state law to:

• Confirm whether we process your personal information, and get a copy of it
• Correct inaccurate information
• Delete your personal information
• Opt out of the sale of personal information, targeted advertising, or certain profiling. We do none of these.
• Appeal our decision on your request

To exercise these rights, send us a privacy request. We will verify your identity before acting on a request, and you may use an authorized agent. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision. If we deny your appeal, you may contact your state Attorney General. Open the privacy request form

California residents: we do not sell or share personal information as those terms are defined in California law, and we do not disclose personal information to third parties for their own direct-marketing purposes ("Shine the Light," Cal. Civ. Code § 1798.83).

Nevada residents: we do not sell covered information as defined in NRS 603A. You may still submit an opt-out request. Open the privacy request form

Health and Medical Records: NazTrack does not collect or store medical records.

Do Not Track and Global Privacy Control: because we do not track users across websites or sell personal information, our practices do not change based on these browser signals.

8. Information about the Service's location

NazTrack is operated in the United States, and information is stored in the United States. NazTrack is currently offered only to churches and districts in the United States. People outside the United States may use NazTrack only on behalf of a church or district based in the United States, such as a church that belongs to a US-based district. If you use NazTrack from outside the United States, your information is stored in the United States, where privacy laws may differ from those where you live. Apart from that use, the Service is not directed to individuals in the European Union, European Economic Area, United Kingdom, or Switzerland or anywhere else outside of the United States.

9. Changes to this policy

We may update this policy from time to time. We will post the updated policy here and change the "Last updated" date. If we make material changes, we will notify account holders by email or through the Service before the changes take effect.

10. Contact us

NazTrack LLC
113 Stoddard Street
Gallatin, TN 37066

Send us a privacy request