Privacy Policy

1. Who We Are

JAC Collective Co., LLC ("JAC", "we", "us", "our") is a Nevada limited liability company headquartered in Henderson, Nevada. We provide short-form content production, paid ads management, and white-label church technology services to client churches and ministries.

This Privacy Policy explains how we collect, use, and protect information across our website (jaccollectiveco.com), our client portal, our white-label mobile applications, our SMS notifications system, and any other JAC-operated service (collectively, the "Services").

Contact: alex@jaccollectiveco.com

2. Who This Policy Covers

Different users interact with us in different ways:

• Visitors to our website
• Clients (churches and ministries) that subscribe to our services
• Members (individual end-users of a JAC-built white-label church app)
• Affiliates in our referral program
• Prospects we are in sales conversations with

This Policy covers all of them. Where different rules apply to different groups, we say so.

3. Information We Collect

3.1 — Information You Provide

• Name, email address, phone number, organization name, role
• Account credentials and authentication tokens
• Billing information (processed via Stripe; we do not store full card numbers)
• Content you upload to us (sermon recordings, brand assets, photos)
• SMS opt-in confirmations and consent records
• Survey responses, support requests, and communications with us

3.2 — Information Collected Automatically

• Device and browser information (IP address, OS, browser type)
• Usage data (pages visited, features used, timestamps)
• Cookies and similar technologies (see Section 9)
• App analytics (sessions, screens viewed, crashes) in our white-label apps

3.3 — Information from Third Parties

• Stripe (subscription and payment status)
• Twilio (SMS delivery status)
• Social ad platforms (Meta, TikTok, YouTube, Google) for client ad performance
• Identity verification providers, where required

4. How We Use Information

We use information to:

• Provide and operate the Services
• Process payments and manage subscriptions
• Deliver SMS notifications to opted-in recipients
• Personalize content (e.g., AI weekly devotionals)
• Communicate with you about your account, billing, and updates
• Improve the Services and develop new features
• Detect, prevent, and respond to fraud or security incidents
• Comply with legal obligations and enforce our Terms of Service

5. Legal Bases

Where required (e.g., for users in GDPR-applicable jurisdictions), we process personal data on the basis of:

• Performance of a contract with you
• Your consent (which you can withdraw at any time)
• Our legitimate interests in operating and improving the Services
• Compliance with legal obligations

6. How We Share Information

We do not sell personal information. We share information only as follows:

• Service providers who process data on our behalf under contracts — Stripe, Twilio, Firebase, Supabase, Claude/Anthropic, AWS, Netlify, Google, Apple, Meta, AgencyAnalytics, and similar vendors.
• Client churches, where you are a Member of their app. Member data is provided to the church that operates the app for legitimate ministry purposes (attendance, follow-up, communications).
• Legal and safety, where disclosure is required by law, court order, or to protect rights or safety.
• Business transfers, in connection with a merger, sale of assets, or financing.
• With your consent, for any other purpose disclosed at the time of collection.

7. SMS and A2P 10DLC

You will only receive SMS from us or our Client Apps if you opt in. Opt-in confirmation is timestamped and retained as long as you remain subscribed plus the period required by applicable law.

To stop messages, reply STOP to any text. To get help, reply HELP. Message and data rates may apply. Frequency varies. Carriers are not liable for delayed or undelivered messages.

See our SMS Consent Notice for full details.

8. Children's Privacy and Member-Added Minor Numbers

The Services are not directed to children under thirteen (13). We do not knowingly collect personal information directly from children under thirteen.

Our white-label Client App allows a parent or legal guardian Member to add their minor child's phone number to receive notifications. By doing so, the Member affirms they are the child's parent or guardian and consents on the child's behalf. JAC processes minor phone numbers only for the notification purposes the parent enabled, retains them under stricter access controls, and does not use minor data for advertising.

See our Minor-Data and Parental Consent Policy for full details.

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential site and app functionality (authentication, security)
• Analytics (understanding usage patterns)
• Limited marketing (retargeting on our own site visitors only)

You can control cookies via your browser. Some features may not work if you block essential cookies. We honor Global Privacy Control (GPC) signals where required by law.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your information (subject to legal retention requirements)
• Restrict or object to certain processing
• Portability — a copy of your data in a machine-readable format
• Opt out of sales or sharing of personal information (we do not sell)
• Withdraw consent at any time

To exercise any of these, email alex@jaccollectiveco.com. We respond within thirty (30) days where required by law. We will not discriminate against you for exercising your rights.

California Residents: Under the CCPA/CPRA, you have the rights above. We do not sell or share personal information for cross-context behavioral advertising. We do not knowingly collect personal information of minors for sale.

Nevada Residents: Under NRS 603A, you may opt out of the sale of certain covered information. We do not sell covered information.

11. Data Retention

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes after the Services end. Specifically:

• Account and billing records: 7 years after account closure (tax/legal)
• Content uploaded by Clients: 90 days after termination, then deleted
• SMS opt-in consent records: duration of subscription plus 5 years
• Analytics in aggregate, non-identifiable form: indefinite

12. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, restricted access, multi-factor authentication on admin accounts, and vendor due diligence. No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at alex@jaccollectiveco.com.

13. International Transfers

We are based in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S. By using the Services, you consent to this transfer.

14. Third-Party Links

The Services may contain links to third-party websites or services. Their privacy practices are governed by their own policies. We are not responsible for third-party privacy practices.

15. Changes to This Policy

We may update this Policy. Material changes will be announced via the website and (where applicable) email or in-app notice. The "Last Updated" date at the top reflects the most recent revision.

16. Contact

This Policy describes JAC's practices. Specific Client Apps operated for client churches may have supplemental practices documented within the app itself.