Data Processing Addendum
This Data Processing Addendum (“DPA”) forms part of the Prayer Tracker Terms of Use between Justin P. Harper, a Massachusetts sole proprietor operating Prayer Tracker (“Prayer Tracker”), and the church organization using Church Suite (“Church”). A person who creates or administers a Church organization represents that the person has authority to accept this DPA for the Church.
Scope and Roles
This DPA applies when Prayer Tracker processes personal information in church-owned records on the Church’s documented instructions. The Church is the controller, business, or organization determining the purposes of that processing. Prayer Tracker is the processor, service provider, or contractor for that processing.
Prayer Tracker remains independently responsible for processing it controls directly, including authentication, security, service diagnostics, support, billing administration, fraud prevention, and legal compliance, as described in the Privacy Policy.
Processing Details
The subject matter is operation of Church Suite. Processing continues while the Church uses Church Suite and during applicable recovery, export, deletion, backup, and required-record periods.
Processing may include collecting, recording, organizing, storing, retrieving, displaying, transmitting, restricting, exporting, backing up, redacting, deidentifying, and deleting church member records, assignments, invitations, public prayer submissions and contact choices, church-owned group content, administrative records, branding, reports, exports, and related technical identifiers. People may include Church users, members, invitees, public submitters, contacts, staff, volunteers, and people mentioned in content.
Instructions and Purpose Limits
Prayer Tracker will process Church personal information only to provide, secure, support, and improve the contracted Church Suite functions; follow lawful documented instructions expressed through the Services and this DPA; prevent abuse; or comply with law. Prayer Tracker will notify the Church if an instruction appears unlawful unless prohibited from doing so.
Prayer Tracker will not sell Church personal information, use it for cross-context behavioral advertising, combine it with unrelated data for advertising profiles, or use prayer content to infer or target a person’s religious or health interests.
Church Responsibilities
The Church is responsible for lawful instructions, notices, permissions, access assignments, retention choices available to it, responses to rights requests, and appropriate parent, guardian, or organizational authority concerning minors. The Church will not instruct Prayer Tracker to process information in violation of law or the Terms.
Confidentiality and Security
Prayer Tracker limits access to people and providers who need it to perform authorized work and who are subject to confidentiality obligations. Prayer Tracker maintains reasonable technical and organizational measures, including encrypted transport, role-based and group-level authorization, server-controlled sensitive actions, restricted records, logging and audit evidence, rate and payload limits, backups, and provider security controls.
Subprocessors
The Church authorizes the providers on the current Subprocessor and Service Provider List. Prayer Tracker remains responsible for requiring a subprocessor to protect Church personal information consistently with this DPA for the work delegated to it.
Prayer Tracker will provide at least 30 days’ notice before adding or replacing a material Church-data subprocessor where feasible. An urgent security or service-continuity change may receive shorter notice with an explanation. A Church may raise a reasonable data-protection objection at support@theprayertracker.app; the parties will work in good faith on a commercially reasonable solution.
International Processing
Church information may be processed in the United States and other locations where authorized providers operate. Where applicable law requires a transfer mechanism, the parties will use the applicable contractual mechanism and supplementary safeguards reasonably available for the processing.
Assistance and Individual Rights
Taking into account the nature of processing and information available, Prayer Tracker will reasonably assist the Church with requests for access, correction, export, deletion, restriction, or objection; security and breach obligations; and legally required assessments. Prayer Tracker may direct a requester to the Church when the request concerns Church-controlled information and will not independently fulfill a Church-controlled request unless instructed or legally required.
Security Incidents
Prayer Tracker will notify the Church without undue delay after confirming unauthorized access to Church personal information for which notification is required, subject to law-enforcement restrictions. Notice will include available information reasonably needed for the Church’s response. Notification is not an admission of fault or liability.
Return, Export, and Deletion
Authorized administrators may use available export tools. On an organization-deletion request, the Church becomes read-only during a 30-day recovery period before active Church data is deleted. Data may remain in recovery-only backups until their scheduled expiration and in limited content-free security, billing, tax, fraud-prevention, deletion, dispute, or legal records as described in the Privacy Policy.
Assurance Information
On reasonable written request, Prayer Tracker will provide information reasonably necessary to demonstrate compliance with this DPA. Any additional audit must be legally required, proportionate, protect other customers and system security, avoid unnecessary disruption, and be subject to confidentiality and reasonable cost allocation.
Order, Liability, and Contact
This DPA controls over the Terms only for a conflict about processing within its scope. The Terms’ limitation of liability and dispute provisions apply to this DPA to the extent permitted by law. The English version controls where lawful; Spanish is a convenience translation.
Questions or objections may be sent to support@theprayertracker.app.
Back to Prayer Tracker