This summary is for convenience only. The numbered sections below are the full policy.
This Privacy Policy explains how QStone Network, LLC, a North Carolina limited liability company located in Cornelius, North Carolina ("QStone," "we," "us"), handles personal information in connection with the Parish Operations Platform ("POP" or the "Software"), including our web applications, administrative portals, APIs, and the POP mobile applications we publish on the Apple App Store and Google Play. This Policy works together with the QStone Master Services Agreement and Terms of Use.
2.1 Church data (we are a processor). When a church uses the Software to manage its members, donations, records, calendar, and communications, the church decides what information to collect and how it is used. The church is the controller of that information, and QStone processes it on the church's behalf and under the church's instructions to provide the Software.
2.2 Our own data (we are a controller). For information we collect to run our business, such as a church's account and administrator details, billing information, support requests, and visitors to our public websites, QStone is the controller.
2.3 Parishioners. If you are a parishioner or member, your church is your primary point of contact for your personal records. Requests about that information are best directed to your church, and we will support the church in responding.
Church name and identity, location and contact details, administrator and main-contact names, email addresses, phone numbers, roles, and onboarding preferences.
Records the church creates or uploads in the Software, which may include member and household records, donation and giving records, sacramental records, prayer requests, volunteer information, calendar entries, communications, and uploaded files. Some of this content may relate to minors. The church controls this content and is responsible for obtaining any consents required to collect and process it.
Donations are processed by our payment processor (currently Stripe, Inc.). Card numbers and bank credentials are provided to and handled by the payment processor; QStone does not store full card numbers or the church's payment-processor secret credentials. We retain donation records such as amount, date, designation, and donor name or contact where the donor or church provides it.
Transactional and operational email we send on a church's behalf, and messages sent through the Software, along with related delivery information.
Limited technical information needed to operate, secure, and improve the Software, such as log data, device and app information, and error-diagnostic reports. Our error-diagnostics tooling is configured to minimize personal data, and the mobile app lets you turn diagnostics off.
Our web applications use cookies and similar technologies that are necessary to sign you in, keep your session secure, and remember basic preferences. We do not use them to sell your information or to build cross-site advertising profiles.
5.1 We do not sell personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising.
5.2 Service providers (subprocessors). We share information with a limited set of trusted providers who process it on our behalf to run the Software, under contracts that require appropriate protection:
| Provider | Purpose |
|---|---|
| Stripe, Inc. | Donation and payment processing |
| SendGrid (Twilio Inc.) — email delivery | Sending transactional and operational email on a church's behalf |
| Error-diagnostics provider | Application error and stability monitoring (configured to minimize personal data) |
| Hosting and infrastructure provider | Hosting, storage, and delivery of the Software |
| Apple and Google | Mobile app distribution and push notifications |
5.3 The church. Information a parishioner provides through the Software is shared with, and controlled by, that parishioner's church.
5.4 Legal and protection. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, safety, and security of users, the public, QStone, or others.
5.5 Business transfers. If QStone is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
The Software is provided to churches, not marketed directly to children, and is not intended for a child to sign up on their own. A church may, under its own authority and responsibility, enter records that relate to minors (for example, sacramental records). The church is the controller of that information and is responsible for obtaining any consents the law requires, including consents related to minors, and for limiting access to its authorized users. If you believe a child's information has been provided to us improperly, contact the relevant church, or contact us and we will assist the church.
We retain personal information for as long as needed to provide the Software and for legitimate business or legal purposes. As described in the Master Services Agreement, during the term and for thirty (30) days after termination a church may request an export of its Customer Content in a commonly used format; after that period, QStone may delete Customer Content, subject to retention required by law and to reasonable backup cycles. The mobile app also offers an account-deletion option for parishioner accounts.
We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and configuring our diagnostics tooling to reduce the personal data it captures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, or to object to or restrict certain processing. Because much of the information in the Software is controlled by your church, please direct requests about parishioner records to your church; QStone will support the church in responding. For information QStone controls, or to reach us about any request, contact us at the address in Section 12. You may also opt out of in-app diagnostics in the mobile app's settings, and decline non-essential cookies where offered.
QStone is based in the United States, and information is processed and stored in the United States. If you access the Software from outside the United States, you understand that your information will be processed in the United States, where data-protection laws may differ from those in your location.
We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Software after an update takes effect means you accept the updated Policy.
Questions or requests about this Policy or your information can be sent to QStone Network, LLC at info@qstonenetwork.com. If you are a parishioner, your church is also a primary contact for your records.