The short version
Promo Engine holds what a church needs to plan its promotion: the events you're promoting, the work each one generates, and the names and email addresses of the people doing it. That's the lot.
We don't hold your congregation's details, we don't sell anything to anybody, and there are no advertising trackers on this site.
What we hold
- Your church — its name, and the channels you say you communicate on.
- People — the name, email address and role of anyone invited into your church. Nobody else.
- Your plan — campaigns, series, the work each one generates, who it's assigned to, briefs, and any copy written.
- Sign-in — your email address and a password we never see, because it's hashed before it reaches us.
- Payment — handled entirely by Stripe. We're told whether a subscription is active. We never see a card number.
What we don't hold
No congregation records, no giving data, no attendance, no children's details. Where Promo Engine connects to Planning Center it asks only for the calendar and the teaching schedule, and never for the people database.
There is no advertising on this site and no third-party analytics or tracking scripts.
Who else sees it
Only the services needed to run the product, each doing one job:
- Supabase — stores the database and handles sign-in.
- Cloudflare — serves the site and runs the code behind it.
- Resend — sends invitations and assignment emails.
- Stripe — takes payment.
- Anthropic — powers the assistant and the copy writing. Prompts aren't used to train models.
We don't sell data, and we don't share it with anybody not on that list.
Things you connect
Connecting Planning Center, a calendar or Slack is always your choice, and each one can be disconnected at any time from Settings.
- Planning Center — read-only. We read your calendar and teaching schedule to suggest what's worth promoting. Nothing is ever written back.
- Calendar links — a read-only address you paste in. We fetch it to read what's coming up, and nothing else.
- Slack — we read your workspace directory once, to match people by email, then send direct messages when work is assigned. We never post in a channel and never read your messages.
Disconnecting removes the stored access tokens immediately.
Deleting your data
You can delete anything you like from inside the app at any time — a person, a campaign, a connection, or the whole church.
To have everything removed, email contact@promoengine.church from the address you signed up with and ask. We'll delete your church, its plan and every account attached to it within 30 days, and confirm when it's done. Deletion is permanent — there's no archive to restore from.
How long we keep it
While your church has an account, and for 30 days afterwards so an accidental cancellation can be undone. After that it's deleted. Backups roll off within 90 days.
Getting in touch
Questions about any of this, or about what we hold on you, go to contact@promoengine.church and a person will answer.
If this policy changes in a way that matters, we'll say so by email rather than quietly editing this page.