ChapelOS · Your church, your website
Privacy policy — draft
Who operates ChapelOS
ChapelOS is operated by m2Dev LLC, 809 SW A St., Ste 105, Bentonville, AR 72712. Company contact details. ChapelOS support: support@chapelos.net.
Information used by the current pilot
We process church settings, public contact details, announcements, events and their public registration links, sermon titles, speaker names, dates, notes and external recording links, staff identity and role information, invitations, and an audit history to operate church websites and control access. Published church content is visible to visitors. Cloudflare provides hosting, storage, and access verification. Stripe handles sandbox payment testing; live sales are closed.
Help and demonstration data
The help widget searches our documentation on your device. It does not call an AI provider. The fictional demonstration stores edits in your browser tab for that session. Do not enter personal information in the demo. Our contact form sends your name, email address, and message through Cloudflare to our support mailbox. The form uses a short-lived network-address rate limit to reduce spam. Contacting us by email shares your message and email address with our support mailbox.
Church inquiry forms
Open church forms store answers, optional reply email, a timestamp and the accepted church privacy notice in Cloudflare storage. Only that church’s owners can access the inbox, private follow-up notes and its private export. Follow-up history records the acting staff identity, time, status and whether notes changed; it does not retain previous note text. Submitting does not enroll a visitor in newsletters or send email. A short-lived network-address rate limit helps reduce spam; addresses are not saved with responses. Forms are for general inquiries, not confidential pastoral, health, financial or child information. Churches write their own use and retention notice. No automatic deletion is configured in the pilot; contact the church or ChapelOS support for removal requests. Private inquiry data is excluded from standard content exports and software packages.
Sandbox giving and donor accounts
Giving is currently a sandbox preview, with no live donations collected. Stripe handles payment details. ChapelOS stores test gift amounts, status and provider references, recurring-gift records, and links needed to show a donor their own gifts. Optional donor accounts store a church-scoped username, a password hash, a recovery-code hash and session records. We do not store the password or recovery code in readable form. Secure cookies support sign-in and guest gift access; linking earlier guest gifts requires confirmation. Account recovery revokes existing sign-in sessions. No recovery or donation emails are sent by ChapelOS in this preview. Donor accounts, payment records and credentials are excluded from website-content backups.
Your choices
Church owners can export settings, announcements, events and sermon links/notes, and manage the newsletter preference in administration. Newsletter sending is not currently available. Contact us to request access, correction, or deletion of information associated with your church. Identity verification may be needed.
Before public launch
The owner must finalize retention and deletion schedules, support mailbox handling, regional privacy obligations, and any future analytics or AI provider disclosures. No privacy certification or legal compliance guarantee is claimed by this draft.
Church images
Photo uploads are processed by Cloudflare Images and stored as optimized files in private Cloudflare R2 storage. Images become publicly accessible when used on a published church page. Original upload files are not retained by ChapelOS. Archiving hides unused photos but retains their stored copies; contact support for permanent removal. People may retain copies of previously public images.
Website backup uploads
Owners can download unencrypted website-content archives and upload them for a private restore preview. Uploaded photos and content are staged in Cloudflare storage. Confirmation expires after one hour. Expired staged uploads are normally cleaned up automatically within about 15 minutes after that deadline. Owners can also discard staged restores; interrupted or failed cleanup may require support. This cleanup does not delete saved website content, completed library photos or downloaded backups. Restoration keeps website content private until separately published. Private inquiry answers, staff credentials and billing are excluded from these archives.