Data Processing Addendum

This Addendum applies when a church uses Sunday Slip to publish bulletins that contain personal data. It supplements our Terms and Privacy Policy.

Roles

The church is the data controller for the content it publishes (including any names or personal details in a bulletin). Sunday Slip is the processor, processing that content only to provide the service and only on the church's documented instructions (its use of the app).

Nature & purpose of processing

Hosting and serving bulletin content behind a link/QR code, authenticating church staff, and storing uploaded images. Processing lasts for the term of the account.

Categories of data & data subjects

Church staff (email, user ID). Any personal data the church chooses to include in a bulletin about congregants and others (for example names in a prayer list or order of service). Some of this may be special-category data (e.g. health implied by a prayer request, or religious belief). The church is responsible for having a lawful basis and any required consent before publishing it, and attests to this at publish time; we log that attestation.

Our obligations as processor

We: process personal data only on the church's instructions; keep it confidential; apply appropriate technical and organizational measures (encryption in transit, row-level security isolating each church's data, least-privilege access, and configuring bulletin pages to discourage search-engine indexing); assist the church with data subject requests and security obligations; notify the church without undue delay after becoming aware of a personal-data breach; and delete or return personal data on termination.

Sub-processors

We use: Supabase (database, authentication, file storage), Vercel (application hosting and delivery), Stripe (subscription billing), Google Cloud / Vertex AI (optional AI drafting and photo-to-bulletin import), and Cloudflare (DNS). The current list, with purpose and location, is on our sub-processors page. We will give notice of new sub-processors and remain responsible for their performance.

International transfers

Our sub-processors may process data outside your country. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Deletion

Deleting a bulletin or church removes the associated content (sections, items, view counts, uploaded images). On account closure we delete personal data except minimal records we must keep for legal or accounting reasons.

Contact

Data protection questions: Roscommon Group LLC, Bellevue, Washington, USA, at matt@roscommon-group.com.