Privacy Policy
Last Updated: January 13, 2025
Welcome to Unbound Worship (the “Site”), operated and hosted by Algorix LLC and available at https://unboundworship.com. Please read this Privacy Policy carefully. While we endeavor to comply with applicable privacy laws (including the California Consumer Privacy Act, “CCPA”), we cannot guarantee that this Policy will address every possible scenario. By using our Site, you acknowledge that you have read, understood, and agree to the practices described herein, subject to applicable legal requirements.
Our services and events are intended solely for residents of California. If you are located outside California, you are not permitted to create an account or use our services. We disclaim any liability arising from unauthorized use by non-California residents.
1. Information We Collect
1.1 Phone Number (Required)
- We collect your phone number to register your account and authenticate your login via SMS (one-time passcode or similar).
- We also use this number for essential event communications (e.g., concert updates, scheduling changes, confirmations).
1.2 Guardian’s Email Address (For Minors 13–17)
- If you are 13 to 17 years old, you must provide your guardian’s email address during registration.
- Guardian Approval (Not Stored Birthdate Check): Before sending a verification email to the guardian, we may prompt you (the minor) to enter your guardian’s birthdate to confirm the guardian is likely of legal age. We do not store this birthdate; it is only used momentarily for validation.
- We send a verification email to your guardian with instructions to approve your account. Minors will not be able to use our service until the guardian approves the request.
- We do not collect or require the guardian’s name—only the email address (and the temporary, non-stored birthdate check) is needed to verify consent.
- Guardian Removal Requests: If a guardian later wishes to remove their email address or the minor’s account, they may contact us as described in Section 11.
1.3 Under 13 Prohibition
We do not allow children under 13 to create an account. If we become aware that a child under 13 has registered, we will promptly remove the associated personal information from our systems and deactivate the account.
1.4 Optional Information
- Name
- Email Address
- Job Title
These optional details may be provided during registration, volunteering, or vendor applications to facilitate communication and record-keeping.
1.5 Payment Information
We do not directly collect or store your billing address or credit card information. When you purchase T-shirts or register for paid events, all payment transactions are processed securely by Stripe, which is owned and operated by The Prayer Inc. (See Stripe’s Privacy Policy at https://stripe.com/privacy.) The Prayer Inc. may earn revenue from these transactions.
1.6 Data Storage (Supabase)
We use Supabase for authentication and data storage. Your personal information (phone number, guardian’s email address, optional name/email, etc.) is stored on Supabase servers located in the U.S. (us-west-1).
2. How We Use Your Information
2.1 Account Creation & Verification
We use your phone number to create your account and send SMS passcodes for secure access. For minors (13–17), we verify the guardian’s consent via an email sent to the guardian, preceded by a birthdate check if applicable.
2.2 Event Communication
We use your phone number and optional email to send essential notifications about events, volunteering, or vendor logistics.
2.3 Sharing with The Prayer Inc.
The Prayer Inc. hosts the concert/events and owns the Stripe account through which event payments are processed. We share collected information (phone number, name, email, job title, and Stripe purchase details) with The Prayer Inc. to fulfill event services (e.g., ticketing, volunteer coordination).
2.4 Internal Operations
We may use optional information such as your name or job title to manage volunteer or vendor assignments, coordinate logistics, and enhance your overall user experience.
2.5 Future Newsletter
We currently do not send any promotional newsletters. If we introduce such communications, we will update this Privacy Policy and provide an opt-in or opt-out mechanism in compliance with the CCPA and other applicable regulations.
3. California Consumer Privacy Act (CCPA) Disclosures
Because our services are intended solely for California residents, we strive to comply with the CCPA. Below is a summary of your rights under the CCPA.
3.1 Categories of Personal Information
We collect the following categories of personal information for the business purposes described above:
- Identifiers: Phone number, guardian’s email address, name, email address (optional).
- Commercial Information: Payment confirmation details (processed by Stripe, but we see partial transaction data such as transaction ID or purchase type).
- Internet or Other Electronic Activity: Log information automatically collected when you use the Site (e.g., server logs).
- Sensitive Personal Information: We do not collect SSNs, government IDs, or other highly sensitive data.
We do not sell your personal information, nor do we share it with third parties for their own marketing or advertising.
3.2 Right to Know and Access
You have the right to request that we disclose what personal information we have collected, used, or shared about you over the past 12 months.
3.3 Right to Delete
You may request the deletion of your personal information, including your guardian’s email address if you are a minor. We will comply with verified deletion requests within 30 days unless we need to retain certain information for legal or operational reasons (e.g., dispute resolution, tax/accounting obligations).
3.4 Right to Correct
You may request that we correct any inaccurate personal information we hold about you.
3.5 Non-Discrimination
We will not discriminate against you for exercising any of your rights under the CCPA (e.g., denying service or charging different prices).
4. Retention of Personal Information
We retain your personal information (including guardian’s email address for minors) in Supabase for as long as you maintain an active account or as needed for the purposes described in this Policy. If you request deletion or account removal, we will remove your data from our active systems within 30 days of a verified request, subject to any legal or operational retention requirements.
5. Data Sharing and Disclosure
5.1 With The Prayer Inc.
We share your information (phone number, name, email, job title, and Stripe purchase details) with The Prayer Inc. to coordinate and fulfill concert/event services (e.g., ticketing, volunteer management). Because The Prayer Inc. owns the Stripe payment account, they also collect and process payments, thereby earning revenue from purchases.
5.2 With Stripe (Payment Processor)
All payment transactions are processed by Stripe, which is owned by The Prayer Inc. We do not store full payment details or billing addresses. For more details, see Stripe’s Privacy Policy.
5.3 With Supabase (Data Storage Provider)
Your personal data is stored in Supabase servers in the U.S. (us-west-1). We rely on their industry-standard security practices to protect your information.
5.4 Legal Requirements
We may disclose your information if required by law, subpoena, or other legal processes, or if we believe such disclosure is necessary to protect our rights or comply with a legal obligation.
6. Data Security Measures
- We use HTTPS to encrypt data transmitted between your device and our Site.
- We rely on Supabase Auth services and secure server infrastructure to protect data at rest and in transit.
- No Third-Party Ad Tracking: We do not allow third-party advertisers or trackers to collect data on our Site. Cookies are used only for authentication and session management by Supabase Auth.
While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure, and we cannot guarantee its absolute security.
In the event of a data incident or breach, we will comply with applicable California laws regarding notification and remediation.
7. User Rights & Choices
7.1 Access & Correction
You may view or update certain personal information by logging into your account. To request any additional corrections or updates, please contact us as outlined in Section 11.
7.2 Deletion Requests
You or your guardian (if you are a minor) may request account or data deletion at any time. We will respond to verified requests within 30 days.
7.3 Opt-Out of Communications
We do not offer a stand-alone opt-out of essential event communications. If you no longer wish to receive such communications, you may delete your account.
8. Service Scope & International Use
Our Site and services are intended solely for users in California. We do not offer services outside the United States.
If you are visiting from outside the U.S. or otherwise providing us with information from outside the U.S., your information may still be transferred to, stored, and processed in the United States. We disclaim any liability from such unauthorized usage by non-California residents.
9. Children’s Privacy & Guardian Controls
Under 13: Prohibited
We do not allow children under 13 to create an account. We will delete any under-13 data if discovered.
13–17: Guardian Consent
Requires guardian consent via email verification and a birthdate check (not stored) to confirm legal responsibility. By approving the verification email, the guardian acknowledges and consents to the minor’s account creation. Minors will not be able to use our service until approval is granted.
Guardian Rights
Guardians may contact us to delete or correct the minor’s information (including the guardian’s email address) at any time.
10. Changes to This Privacy Policy
We may update or modify this Privacy Policy from time to time. If we make material changes, we will:
- Post the revised policy on this page with an updated “Last Updated” date.
- Provide a toast notification or banner on the Site notifying users of significant changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. If you continue to use the Site following a posted update, you will be deemed to have accepted the changes, unless otherwise required by law.
11. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy, or if you wish to exercise any of your CCPA rights, please reach out to us through one of the following methods:
- Contact Form: Available on our homepage at https://unboundworship.com
- Email: henryk@algorix.io
We will respond to your inquiries in compliance with applicable legal requirements and within a reasonable timeframe.