Privacy Policy

This Privacy Policy explains how JOTBAH handles information when people visit the public website, create or use an account, receive support, or use JOTBAH through a church, ministry, or other organization. It applies to JOTBAH-operated services that link to this policy.

Organizations using JOTBAH control the ministry and member information they upload and determine why and how their authorized users use it. Their own privacy notices and obligations may also apply.

The information JOTBAH processes depends on the features an organization enables and how the service is used.

At an organization's direction, JOTBAH may connect with services such as Meta/Facebook/Instagram, Google/YouTube, TikTok, X, Twilio, and other providers. JOTBAH uses provider account identifiers, permissions, and authentication tokens to provide the integration requested by the organization—for example, to confirm a destination, submit approved content, deliver a communication, or retrieve a status.

Connected providers process information under their own privacy policies. Provider tokens and credentials are handled as service credentials and are not displayed publicly. An integration may require reauthorization when permissions expire or provider policies change.

JOTBAH uses information to provide and operate requested features; authenticate users and enforce permissions; create and manage organization workspaces; support ministry, people, scheduling, communication, and content workflows; publish approved content; deliver authorized communications; maintain records and audit trails; provide support; secure and troubleshoot the service; improve product reliability and usability; administer subscriptions; and comply with legal obligations.

JOTBAH may use aggregated or de-identified information to understand service performance and improve features where the information no longer reasonably identifies a person or organization.

JOTBAH may share information with service providers and connected platforms only as reasonably necessary to provide, secure, maintain, and support the requested service. These recipients may include hosting, database, security, communications, social-platform, payment, analytics, and support providers.

Information may also be disclosed when required by law, to protect rights and safety, to investigate misuse, in connection with a business transaction subject to appropriate safeguards, or with the direction or consent of the relevant organization or user. JOTBAH does not represent that information is never shared, because delivering integrations and hosted services requires service providers.

Churches, ministries, and other customers are responsible for the records they upload, the permissions they grant, the purposes for which they process information, and the notices, authorizations, and consents required by law. Requests concerning an organization's member or ministry records should ordinarily be directed first to that organization.

JOTBAH does not use organization-controlled member records to make ministry membership, pastoral, employment, or eligibility decisions on the organization's behalf.

When an organization uses email, SMS, WhatsApp, or other communication features, JOTBAH may process contact details, channel-specific consent and suppression records, message content, schedules, delivery attempts, provider identifiers, and status events. Communications may be processed through providers such as Twilio or other enabled delivery services.

Organizations are responsible for establishing appropriate consent and honoring opt-outs. Consent for SMS, membership, or possession of a phone number does not automatically establish consent for WhatsApp or another channel.

JOTBAH may process connected-account identity, authorization scopes and tokens, approved content and media, publishing choices, schedules, provider object identifiers, links, and status or error information. This information is used to verify destinations, submit content requested by authorized users, prevent duplicate publication, and reconcile provider outcomes.

JOTBAH retains information for as long as reasonably necessary to provide the service, maintain security and audit records, comply with legal and contractual obligations, resolve disputes, and support the organization's legitimate recordkeeping needs. Retention varies by data category, workspace configuration, provider behavior, account status, and applicable requirements.

Deletion or disconnection may not immediately remove information from backups, audit records, provider systems, or records that must be retained for security, legal, or dispute-resolution purposes. JOTBAH does not publish a fixed universal retention period where none applies across all records.

We use administrative, technical, and organizational safeguards designed to protect information. Safeguards may include access controls, authentication, tenant separation, encryption or protected service credentials, logging, monitoring, and change controls appropriate to the service. No method of storage or transmission is completely secure, and JOTBAH cannot guarantee absolute security.

Account users may be able to review or update profile and workspace information through JOTBAH. For organization-controlled records, contact the organization that collected or uploaded the information. JOTBAH may assist an organization with a verified request where appropriate.

You may contact JOTBAH to ask about access, correction, deletion, disconnection, or another privacy concern. JOTBAH may need to verify identity and authority, and some information may be retained where required or permitted by law. Communication opt-outs should also be submitted through the method provided in the message or to the sending organization.

JOTBAH accounts are intended for authorized organizational and ministry users, not for children to independently create consumer accounts. Churches and ministries may use their workspaces to maintain records concerning children or families as part of their ministry activities.

The organization is responsible for determining when information about a child may lawfully be collected, who may access it, and what parent, guardian, or other authorization is appropriate. JOTBAH processes those organization-controlled records to provide the requested service.

JOTBAH and its service providers or connected platforms may process information in locations outside the user's or organization's region. Laws in those locations may differ. Where required, JOTBAH uses appropriate contractual, technical, or organizational measures for the processing it controls.

JOTBAH may update this Privacy Policy as the service, providers, or legal requirements change. The updated policy will show its effective date. Material changes may also be communicated through the service or another appropriate channel.