Privacy Policy

Last updated November 6, 2026

Church Studio is a church-website service operated by White Oak Media (“White Oak,” “we,” “us”). This policy explains what information we collect when a church uses Church Studio, how we use it, and the choices you have. Questions? Email help@whiteoakmedia.io.

Information we collect

Account information. Your name and email address when you create an account. If you sign in with Google, Google shares your email address, name, and profile picture with us — nothing more.
Church content. The material you add to your website: sermons, events, pages, photos, staff information, service times, and similar content.
Payment information. Billing is handled by Stripe. We receive your subscription status and the last four digits / card brand for reference — we never see or store full card numbers.
Website analytics. Aggregate visitor data for your own website (visits, pages, referral source) via Google Analytics, shown to you in Church Studio.
Visit counts on church websites. Church websites built with Church Studio count their own visits so the church can see how its site is doing. For each visit we record the pages viewed and roughly how long, where the visitor came from (for example a search engine or social media), the type of device (phone or computer), and an approximate city and region derived from the visitor’s IP address by our hosting provider. We don’t use cookies for this, don’t store IP addresses, don’t try to identify anyone, and don’t share it; it’s shown only to that church, as totals. Signed-in church editors aren’t counted.
Visitor submissions. When someone contacts your church through your website (for example, a “plan a visit” form), we process the name and contact details they provide on your behalf so your church can follow up.
Usage & device data. Basic logs (IP address, browser, timestamps) needed to operate and secure the service.

The Church Studio app

The Church Studio app for iPhone uses the same account and the same information as Church Studio on the web. In addition:

Sign-in. The app keeps your sign-in in your phone’s secure keychain so you stay signed in. It never stores your password.
Notifications. If you allow notifications, we store your phone’s notification token with your login so we can tell you when a guest reaches out. Signing out, or turning notifications off, stops them; deleting your login removes the token.
Photos and files. The app reads only the photos and files you choose to upload to your website. It doesn’t browse your library.
No tracking. The app has no advertising, no third-party analytics, and doesn’t track you across other apps or websites.
Deleting your login. You can delete your login from the app (More → Delete my login). This removes your email, password and notification tokens. Your church’s website and the rest of its account stay as they are; to close the website, email us.

How we use information

To provide, operate, and improve Church Studio and your website.
To send you service and account emails (welcome, billing, and occasional product updates you can opt out of).
To provide support when you reach out.
To process payments and manage your subscription.

Google user data

When you sign in with Google, we use the email, name, and profile information you approve only to create and access your Church Studio account. Church Studio’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell this data or use it for advertising.

How information is shared

We do not sell your information. We share it only with service providers who help us run Church Studio, under agreements that limit them to that purpose:

Google (sign-in and analytics), Stripe (payments), Resend (email delivery), Vercel and Neon (hosting and database), Expo and Apple (app notifications), and Google Cloud / Firebase (backend services).
When required by law, or to protect the rights and safety of our users and the public.

Data retention & your choices

We keep your information for as long as your account is active. If you close your website, your content is kept during the grace period and then removed. You may request a copy of your data, corrections, or deletion at any time by emailing help@whiteoakmedia.io.

Security

We use industry-standard measures — encryption in transit, access controls, and reputable infrastructure providers — to protect your information. No system is perfectly secure, but we work to keep your data safe.

Children

Church Studio is a tool for churches and their staff; it is not directed to children, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above, and significant changes will be communicated by email.