Privacy policy
Privacy policy for ozzie.church
We collect as little as we can, keep it only as long as we need it, and never sell it. Here is exactly what happens to your information.
Who we are
ozzie.church and the Ozzie managed service are run by FlockConnect LLC, which makes Ozzie. In this policy, “we” and “us” mean FlockConnect LLC. For privacy requests and support, write to support@flockconnect.com. For anything else, write to hello@flockconnect.com.
This policy covers the website, the waitlist and Ozzie accounts, including the managed AI route that runs through ozzie.church. The Ozzie Mac app itself runs on your Mac and reads your church's Planning Center there; how it handles church information is described on Privacy and safety.
Your church's Planning Center data stays on your Mac
Your church controls its Planning Center data. Ozzie reads it on your Mac and keeps it there. It never comes to ozzie.church: not your rosters, not people's names or contact details, and not your Planning Center sign-in.
What we collect
If you join the waitlist
- Your email address.
- Your church's name and your role, only if you choose to give them.
- That you agreed to be emailed, which page you signed up on, and when.
If you create an account
- Your email address, so you can sign in with a one-time code.
- Your plan, and counts of how much AI help your account has used this month.
- The Macs you connect: the name “Ozzie for Mac”, when each was connected and last used, and a fingerprint of its connection key. We never keep the key itself.
- If you choose a paid plan, the customer and subscription references Stripe gives us. Stripe handles the card.
- A fingerprint (a one-way hash) of your email address without any “+” tag, so each inbox gets one free trial.
When Ozzie uses AI through ozzie.church
Your Mac sends the request with placeholders such as [Volunteer A] instead of the names Ozzie read from Planning Center. We pass it to the AI model, send the answer back to your Mac, and count one step. We never store the text of a request or an answer, and every request requires zero data retention from the AI provider.
Technical information
Like any website, ours is delivered by a hosting provider, which processes technical information such as your IP address and browser type to deliver pages and protect the site from abuse. Our hosting provider, Vercel, keeps its own records of requests to the site, including your IP address and the address of the page you asked for, for as long as its retention period lasts. To slow down repeated attempts, our server briefly keeps counts of recent requests per IP address in memory, and counts sign-in emails by fingerprints (one-way hashes) of the email address and the IP address for up to a day. When you sign in, we keep a fingerprint of the IP address you signed in from for 90 days, so your usual network can still get a sign-in email if someone else keeps asking for them. We don't store IP addresses with your waitlist or account details.
What we don't do
- We don't sell or share your information, and we don't use it for advertising.
- The site has no analytics or tracking scripts.
- The site sets no cookies unless you sign in to an account. Then it uses only the cookies that keep you signed in.
How we use it
- To tell people on the waitlist when Ozzie managed opens, and about that launch.
- To run your account: sign-in, connected Macs, your plan and your monthly allowance of AI help.
- To bill a paid plan through Stripe.
- To keep the service secure and to answer you when you write to us.
Who handles it for us
These service providers process information on our behalf, only to provide the service, in the United States:
- Vercel hosts the website and the managed AI route. Its AI Gateway carries AI requests to the model with zero data retention required.
- Anthropic provides the AI model, reached through Vercel's AI Gateway with zero data retention. It receives only placeholder text, never the names Ozzie read from Planning Center.
- Supabase stores accounts, the waitlist and usage counts, in its US East region. Only our server can write to it, and no public key can read it. A signed-in person can see only their own account.
- Stripe handles billing for paid plans.
How long we keep it
- Waitlist emails: until Ozzie managed launches and we tell you. After that, we delete them within 12 months unless you sign up, or sooner if you ask.
- Account details: while your account is active. If it lapses, we keep it for 90 days in case you come back, and delete it within 12 months of the lapse.
- Usage counts: numbers only, with no content, kept as long as we need them for billing and our records.
- The text of AI requests and answers: never stored by ozzie.church.
Your rights
You can ask to see, export, correct or delete what we hold about you by writing to support@flockconnect.com. Depending on where you live you may have further rights under local law, and we'll honor them.
California (CCPA)
We don't sell or share personal information, as those words are used in California law, and we don't use it for cross-context advertising. You have the right to know what we collect, to have it deleted or corrected, and not to be treated differently for using these rights.
European Union and United Kingdom (GDPR and UK GDPR)
FlockConnect LLC is the controller of account, billing and website information. We use it to provide the service you asked for (performing our contract with you), to send waitlist news you agreed to (your consent, which you can withdraw at any time), and to keep the service secure (our legitimate interests). Your church is the controller of its Planning Center data, which stays on your Mac. Your information is processed in the United States. You can also complain to your local data protection authority.
Security
Connections are encrypted, the database refuses anyone but our server, and we keep only fingerprints of the keys that connect Macs. To report a security problem, write to security@flockconnect.com.
Children
Accounts are for people 18 or older who work or serve in churches. We don't knowingly collect information from children. If you think a child has given us information, write to support@flockconnect.comand we'll delete it.
Changes
If we change this policy, we'll update this page and the dates above. If a change affects how we use information we already hold, we'll tell the people it affects before it takes effect.