StewardMAX
Sign In

Privacy Policy

Last updated: July 24, 2026

1. Introduction

StewardMAX LLC ("we," "us," or "our") is committed to protecting your privacy and the privacy of your congregation members. This Privacy Policy explains how we collect, use, store, and protect information when you use the StewardMAX platform ("the Service").

2. Information We Collect

Information you provide directly:

  • Account registration details (name, email, password)
  • Ministry profile information (church name, address, logo)
  • Congregation member records you enter into the system
  • Giving and financial records
  • Communications, notes, and files you upload
  • Billing and payment information (processed securely via Stripe)
  • Social media account credentials and page access tokens when you connect social accounts via StewardScheduler
  • Background check requests and results submitted through the platform

Information collected automatically:

  • Log data (IP address, browser type, pages visited, timestamps)
  • Device information
  • Usage analytics to improve the Service (via PostHog, with anonymization options)
  • Cookies and session tokens for authentication

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process transactions and send billing-related communications
  • Send account notifications, product updates, and support responses
  • Improve and personalize the Service
  • Monitor for security threats and prevent fraud
  • Publish social media content on your behalf when you schedule posts through StewardScheduler
  • Process AI-assisted features using anonymized or ministry-scoped data
  • Comply with legal obligations

We do not sell your data or your congregation members' data to third parties. We do not use congregation member data for advertising.

4. Data Sharing

We may share information with:

  • Infrastructure providers: Supabase (database and authentication), Stripe (payments), Vercel (hosting), PostHog (analytics), Resend (transactional email), and Twilio (SMS messaging) — all bound by data processing agreements
  • Background check provider: Checkr, Inc. — when you initiate a background check on an individual through the platform. Checkr's own privacy policy governs their handling of that data
  • Social media platforms: Meta (Facebook, Instagram), X (Twitter/Threads), TikTok, and others — when you connect your ministry's social accounts via StewardScheduler and authorize us to publish content on your behalf. Each platform's own privacy policy applies to data shared with them
  • AI service providers: Anthropic (Claude) — for AI-assisted features. Inputs are processed per Anthropic's data usage policies and are not used to train models
  • Law enforcement: When required by law, court order, or to protect the rights and safety of our users
  • Business transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to you

5. Social Media Account Connections

StewardScheduler allows your ministry to connect social media accounts (Facebook Pages, Instagram Business Accounts, X/Twitter, Threads, TikTok, and others) in order to schedule and publish posts on your behalf. When you connect a social account:

  • We store OAuth access tokens necessary to publish content on your behalf
  • These tokens are encrypted at rest and never shared with other ministries
  • You may disconnect any social account at any time from within the Scheduler settings
  • Each social platform's own terms of service and privacy policy govern your relationship with that platform
  • You are solely responsible for the content published through connected accounts

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, secure authentication, and regular security reviews. However, no system is completely secure and we cannot guarantee absolute security.

You are responsible for maintaining the security of your account credentials and for restricting access to your account.

7. Data Retention

We retain your account data for as long as your account is active. Upon account cancellation, data is retained for 90 days to allow for export, then permanently deleted. Certain records may be retained longer as required by law (e.g., financial records).

8. Your Rights

Depending on your location, you may have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a portable format
  • Withdraw consent for certain processing
  • Lodge a complaint with a data protection authority
  • California residents (CCPA): You have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information.
  • EEA/UK residents (GDPR): You have the right to data portability, the right to restrict processing, and the right to object to processing based on legitimate interests.

To exercise these rights, contact us at privacy@stewardmax.com.

9. Cookies

We use cookies and similar technologies for authentication sessions, remembering your preferences, and analytics. Session cookies are essential for the Service to function. You can configure your browser to reject cookies, but this may affect Service functionality.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data directly from children. Congregation members who are minors may have records entered by authorized ministry staff. These records are subject to all protections described in this policy.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through a notice in the Service before they take effect.

12. Contact Us

For privacy-related questions or requests, contact us at privacy@stewardmax.com or hello@stewardmax.com.