Privacy Policy

Last Updated: February 25, 2026

SermonBuild (“we,” “us,” or “our”) is committed to protecting the privacy of pastors, church leaders, and all users of our platform. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the SermonBuild website and application (the “Service”).

By using SermonBuild, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create a SermonBuild account, we collect:

• First and last name
• Email address
• Phone number
• Password (securely hashed; we never store plaintext passwords)

1.2 Sermon Content and User-Created Data

When you use our platform, we store the content you create, including:

• Sermon text, titles, scripture references, and notes
• Sermon series and collections
• Uploaded media files (images, documents, PDFs) associated with your sermons
• Study guides, summaries, and discussion questions generated through our tools
• Presentation slides and exported documents

1.3 Payment Information

When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number. We retain only:

• Card brand (e.g., Visa, Mastercard) and last four digits
• Subscription plan, status, and billing period
• Stripe Customer ID linked to your account

1.4 Usage and Activity Data

We maintain internal logs for account security and service improvement:

• Email delivery records (type, date, and delivery status of system emails)
• Subscription lifecycle events (upgrades, cancellations, renewals)
• Sharing activity (when you share a sermon or study page)

1.5 Locally Stored Data

SermonBuild stores certain data locally on your device for performance and offline functionality:

• Authentication session tokens
• Dark mode and theme preferences
• Offline sermon drafts (stored in your browser’s IndexedDB)

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service — storing your sermons, managing your account, and delivering features you use
• Process payments — managing your subscription through Stripe
• Send transactional emails — welcome messages, password resets, sharing notifications, trial reminders, and payment confirmations
• Power AI features — processing sermon content through AI providers to generate analyses, summaries, study questions, translations, and image suggestions (see Section 3)
• Enable sharing — making sermons and study pages accessible via shared links when you choose to share them
• Provide offline access — syncing your sermon drafts between your device and our servers
• Maintain security — monitoring for unauthorized access and maintaining audit logs
• Improve the Service — understanding how features are used to make them better

3. AI Processing and Third-Party AI Providers

SermonBuild uses artificial intelligence to provide features such as sermon analysis, text enhancement, summarization, study question generation, translation, theological research assistance, and image generation. When you use these features:

• Portions of your sermon content (up to 12,000 characters) are sent to our AI providers for processing
• Theological assistant conversations include your messages and the session history for context
• Image generation requests send visual concept descriptions (not full sermon text) to the image generation provider

Our current AI providers are:

Provider	Purpose	Privacy Policy
OpenAI	Text analysis, enhancement, summaries, translations	openai.com/privacy
Anthropic	Alternative AI text processing	anthropic.com/privacy
Google (Gemini)	AI image generation	policies.google.com/privacy

We use API-level access to these providers. Under their API terms, your content is not used to train their models. These providers process your data only to fulfill your request and do not retain it beyond the processing window defined in their respective policies.

4. Third-Party Services

We use the following third-party services to operate SermonBuild:

Service	Purpose	Data Shared
Supabase	Database, authentication, file storage	All account and content data
Stripe	Payment processing	Billing and payment information
SendGrid	Transactional email delivery	Email address, email content

Each of these providers maintains their own privacy policies and security practices. We select providers that meet industry-standard security requirements.

5. Data Sharing and Public Content

We do not sell, rent, or trade your personal information to third parties.

Your sermon content is private by default. Content becomes accessible to others only when you explicitly choose to share it:

• Shared Sermons — When you create a shared sermon link, the sermon content, summary, and discussion questions are accessible to anyone with the link
• Shared Study Pages — When you create a public study page, the study guide content (summary, scripture references, discussion questions, application points, and prayer points) is accessible via the shared link
• Shared Series — When you share a sermon series, the sermons within that series become accessible via the shared link

You can revoke shared links at any time, which removes public access to that content.

6. Data Storage and Security

Your data is stored on servers managed by Supabase, which uses enterprise-grade infrastructure with encryption at rest and in transit. We implement the following security measures:

• All data transmission is encrypted using HTTPS/TLS
• Passwords are securely hashed and never stored in plaintext
• Database access is controlled through row-level security (RLS) policies, ensuring users can only access their own data
• File storage uses signed URLs with expiration for secure access
• Payment data is handled by Stripe, a PCI DSS Level 1 certified provider
• Authentication tokens are stored securely and cleared on logout

7. Data Retention

• Account data — retained for as long as your account is active
• Sermon content — retained for as long as your account is active or until you delete specific sermons
• Payment records — retained as required by applicable tax and financial regulations
• Email logs — retained for operational and troubleshooting purposes
• Audit logs — retained for security and compliance purposes

8. Account Deletion

You may delete your account at any time through your account settings. When you delete your account:

• All your sermons, series, collections, and media files are permanently deleted
• All shared links (sermons, series, and study pages) are deactivated
• All AI-generated analyses and summaries are deleted
• Your profile information is removed from our database
• Your authentication account is deleted

Account deletion is permanent and cannot be undone. Stripe may retain certain billing records independently as required by financial regulations.

9. Cookies and Local Storage

SermonBuild uses only essential cookies and local storage for functionality:

• Authentication cookies — to keep you signed in to your account
• Preference storage — to remember your theme (dark/light mode) and display preferences
• Offline data — to store sermon drafts locally for offline access and sync

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not use Google Analytics or similar tracking services.

10. Children’s Privacy

SermonBuild is designed for pastors, church leaders, and adults involved in ministry. We do not knowingly collect personal information from children under the age of 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Deletion — request deletion of your personal data (available through account settings)
• Export — export your sermon content through our PDF and Word export features
• Objection — object to certain processing of your personal data

To exercise any of these rights, please contact us at the email address below.

12. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected and how it is used
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information — we do not sell personal information
• The right to non-discrimination for exercising your CCPA rights

13. International Users

SermonBuild is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these countries.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email or through a notice within the application. The “Last Updated” date at the top of this page indicates when this policy was most recently revised.

15. Contact Us

If you have any questions about this Privacy Policy, your personal data, or our privacy practices, please contact us at:

SermonBuild
Email: admin@sermonbuild.com
Website: sermonbuild.com