Church Prayer from Anywhere
Privacy Policy
Effective November 6, 2026 · 2026-11-06
Who handles your information
Shepherd Staff Resources operates this service. Your church decides which authorized people review requests and how they follow up or share them within your selected permissions. Contact your church about its records or sharing decisions. You may also contact jim@gratefulconsultinggroup.com without creating an account.
Information and sources
We receive information from submitters, church administrators and staff, uploaded contact lists, account activity, and service-provider events. It can include prayer text, audience choices, optional names and contact details, callback preferences, follow-up notes, congregation names and email addresses, communication preferences, account verification records, subscription identifiers, and delivery or suppression status. Technical data includes security/request logs, abuse-prevention identifiers, session cookies, and language or installation preferences. Prayer text may reveal religious beliefs, health concerns, or other sensitive details; provide only what is necessary.
Anonymous requests and audience settings
Choosing anonymous prevents the request from saving your entered name, email, or phone in its contact fields. Technical security information may still be processed, and the text itself may identify you. Pastors can review requests; staff access depends on audience settings. Prayer Team and Entire Church choices permit church-managed sharing, not automatic public posting or congregation-wide email. Pastor notifications include a sign-in link rather than the full request text.
Use, providers, and security
We use information for prayer delivery and follow-up, authentication, authorized account and invitation emails, delivery tracking, unsubscribe/suppression handling, billing, support, and abuse prevention. Authorized church roles and platform support may access information needed for their work. Providers include Neon for PostgreSQL storage, Vercel for hosting, Resend for email, and Stripe for payments. Stripe receives payment details; we store billing identifiers and status, not full card numbers. We may disclose information when legally required or to protect rights and security. We do not sell personal information or share it for cross-context behavioral advertising, and the public website does not use advertising trackers. Essential cookies and browser storage support sign-in, security, and preferences. We use HTTPS and server-side access checks; no system guarantees absolute security.
Retention and your choices
We retain records as needed for the church account, operations, security, legal obligations, and disputes. Cancellation does not automatically delete requests or contacts. Ask your church or us for access, correction, deletion, or information about data use. We verify requests and coordinate with the church as appropriate, honoring applicable rights without discrimination; legal and backup-retention exceptions may apply. Invitation emails include unsubscribe links. Adults administer the service; it is not directed to children under 13 for independent account creation. Churches must obtain appropriate parent/guardian permission for youth information. Providers may process information in the United States. We date updates and communicate material changes when required.
