Privacy Notice

Ministerium LLC (“Ministerium,” “we,” “us,” or “our”) operates the Ministerium.ai website, parish administration portal, donation pages, NFC-enabled links, and related services (collectively, the “Service”). Ministerium helps approved Catholic parishes and related eligible nonprofit religious organizations (“Parishes”) present donation opportunities, receive one-time and recurring donations through their connected payment accounts, administer donation records, and provide donor acknowledgments.

This Privacy Notice explains how personal information is collected, used, disclosed, retained, and protected when you visit the Service, donate to a Parish, create or use a Parish account, submit an onboarding or support request, or otherwise interact with Ministerium.

This Notice does not govern a Parish’s use of personal information outside the Service. Each Parish is responsible for its own privacy practices, communications, legal obligations, and any information it exports from Ministerium.

The party responsible for personal information depends on how you use the Service:

• When you donate to a Parish or interact with a Parish donation page: the identified Parish generally determines why your donation and donor information is processed. The Parish is generally the controller or business responsible for that information, and Ministerium processes it as a service provider or processor on the Parish’s behalf, except where Ministerium uses information for its own legal, security, fraud-prevention, billing, or service-administration purposes.
• When you create or administer a Parish account, request onboarding, contact Ministerium, or browse the Ministerium marketing site: Ministerium generally determines the purposes and means of processing and acts as the controller or business for that information.
• Payment processing: payments are processed by Stripe and, when selected, related wallet providers such as Apple Pay or Google Pay. Those providers process information under their own terms and privacy notices and may act as independent controllers for some purposes.

If you submit a privacy request concerning a donation, Ministerium may need to refer the request to, or coordinate with, the applicable Parish.

We may use personal information to:

• present Parish donation pages and process one-time and recurring donation instructions;
• connect a donation with the selected Parish and cause;
• send requested receipts, acknowledgments, payment notices, recurring-donation management links, cancellation confirmations, security notices, and other transactional communications;
• create, authenticate, and administer Parish accounts, roles, settings, subscriptions, and connected payment accounts;
• provide customer service, onboarding, technical support, and requested information;
• process Ministerium subscription fees and maintain billing records;
• maintain transaction, acknowledgment, audit, tax-support, and compliance records;
• detect, investigate, and prevent fraud, abuse, security incidents, unauthorized access, and violations of our Terms;
• determine whether the donation and Parish services are available in a location and enforce geographic restrictions;
• debug, measure reliability, improve accessibility and performance, and develop the Service;
• comply with law, legal process, regulatory obligations, and enforceable requests;
• establish, exercise, or defend legal claims and enforce agreements; and
• send marketing communications only when permitted by law and, where required, with the recipient’s separate consent. Transactional donation or account messages are not marketing messages.

Ministerium does not decide how a Parish uses information after the Parish lawfully exports it from the Service. Parishes must provide any required notices, obtain any required consent, honor applicable opt-outs, and use exported information lawfully.

Where a law requires a legal basis for processing, we rely on one or more of the following, as applicable:

• performance of a contract or steps requested before entering a contract;
• your affirmative direction or consent, including your direction to process a donation to the selected religious organization;
• the legitimate interests of Ministerium or a Parish in providing, securing, maintaining, and improving the Service, provided those interests are not overridden by your rights;
• compliance with legal obligations; and
• establishment, exercise, or defense of legal claims.

Where consent is the legal basis, you may withdraw consent for future processing, but withdrawal does not affect processing already lawfully completed and may not require deletion of records that must be retained by law or for legitimate legal purposes.

We may disclose personal information as follows:

• To the selected Parish: donation details, optional donor information, receipt information, recurring-donation status, refunds, disputes, and related records are available to authorized users of the Parish receiving the donation.
• To service providers and processors: companies that provide payment processing, cloud hosting, databases, authentication, email delivery, security, bot prevention, monitoring, customer support, and professional services may process information for us under contractual or legal restrictions. Key providers may include Stripe, Vercel, Supabase, Resend, and Cloudflare, subject to the actual production configuration.
• To payment and wallet providers: as needed to process, authenticate, refund, dispute, or manage a payment or recurring donation.
• For legal and safety reasons: to comply with law or legal process; respond to lawful requests; protect donors, Parishes, Ministerium, or others; investigate fraud or security incidents; enforce agreements; or establish, exercise, or defend legal claims.
• In a business transaction: in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections.
• At your direction or with your consent: when you ask us to disclose information or otherwise consent.

Authorized Parish users may export donation records. A Parish’s handling of exported data is governed by its own obligations and is outside Ministerium’s direct control.

Ministerium does not sell personal information for money. Ministerium does not share personal information for cross-context behavioral advertising or process personal information for targeted advertising based on activity across unrelated businesses. Ministerium does not use or disclose sensitive personal information to infer characteristics about individuals for advertising purposes.

If these practices change, we will update this Notice and provide any choices required by law before applying the new practice.

Ministerium currently uses only technologies reasonably necessary to operate and secure the Service. These may include an authentication cookie for Parish accounts; a secure cookie that remembers the selected Parish or session; and security, fraud-prevention, and payment technologies used by providers such as Stripe and Cloudflare Turnstile. Ministerium does not currently use advertising cookies, cross-site behavioral tracking, or non-essential analytics cookies, and its application does not currently use browser local storage to profile visitors.

Because the currently described technologies are essential rather than optional advertising or analytics technologies, Ministerium does not currently display a general cookie-consent banner. A visitor may still block cookies through browser settings, but doing so can prevent authentication, security, payment, or other core features from working. Before adding any non-essential analytics, advertising, or similar technology, Ministerium will update this Notice and obtain prior consent where applicable, including for visitors in the European Economic Area or United Kingdom when required.

We retain information only for as long as reasonably necessary for the purposes described in this Notice, including legal, accounting, security, dispute, and compliance needs.

• Donation, payment-status, receipt, acknowledgment, refund, dispute, and related financial records are generally retained for seven years from the transaction or the end of the related relationship, unless a longer period is required for a dispute, legal hold, investigation, or applicable law.
• Routine operational, diagnostic, and security logs are generally retained for approximately 90 days, unless needed longer to investigate an incident, prevent abuse, comply with law, or support a legal claim.
• Parish account and configuration data are generally retained while the account is active and for a reasonable period afterward for offboarding, backup cycling, legal obligations, fraud prevention, and dispute resolution.
• Onboarding, support, and legal-request records are retained as reasonably necessary to respond, maintain business records, and protect legal rights.
• Backups may retain information for a limited period after deletion until they are overwritten through the normal backup cycle.

Deletion or account closure does not require us or a Parish to erase records that must lawfully be retained. When retention ends, we delete, deidentify, or securely dispose of information in accordance with our processes.

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, encrypted transmission, role-based authorization, audit logging, and vendor security controls where appropriate. No system is completely secure, and we cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur.

You are responsible for protecting your credentials, using a secure device, and promptly notifying us through https://www.ministerium.ai/contact if you suspect unauthorized access to a Parish account.

Depending on where you live and subject to legal exceptions, you may have the right to:

• know or confirm whether we process your personal information;
• access or receive a copy of personal information;
• correct inaccurate personal information;
• delete personal information;
• obtain a portable copy of information you provided;
• opt out of sale, targeted advertising, sharing for cross-context behavioral advertising, or certain profiling;
• limit certain uses or disclosures of sensitive personal information;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing; and
• appeal a denial of a privacy request.

Ministerium does not discriminate against you for exercising an applicable privacy right.

To submit a request, use https://www.ministerium.ai/privacy-request. Please identify the Parish and donation, account, or interaction involved when possible. We may need to verify your identity and authority before acting. You may use an authorized agent where law permits, but we may request proof of authorization and identity. If Ministerium processes the information only on behalf of a Parish, we may direct the request to that Parish and assist it as required.

To appeal a denied request, reply through the request channel and state that you are appealing the decision. We will respond within the period required by applicable law.

Although Ministerium does not currently sell or share personal information for targeted advertising, you may contact us if you believe our practices are inconsistent with this statement.

In the preceding 12 months, Ministerium may have collected the categories described in Section 3, including identifiers; customer-record information; commercial and donation transaction information; internet or electronic-network activity; approximate geolocation; professional or employment-related information for Parish administrators; account credentials; and sensitive information that may reveal religious association through the selected Parish. We collect these categories from the sources in Section 3, use them for the purposes in Section 4, and disclose them to the categories of recipients in Section 6.

We do not sell these categories or share them for cross-context behavioral advertising. We do not knowingly sell or share the personal information of people under 18. We retain each category according to the criteria in Section 9 rather than indefinitely.

Ministerium is operated from Texas, United States, and initially accepts only manually approved Texas Parish Customers. At launch, Ministerium does not offer Parish accounts, display Parish donation solicitations, or accept donation transactions through the Service for persons whom our systems identify as located in California. California visitors may view general marketing, Privacy Notice, Terms, and support pages. We use coarse IP-derived country and state or regional signals and authoritative Parish addresses to apply these restrictions without asking a donor to provide a residential address solely for location screening. We do not use this coarse location decision for advertising. Location signals can be inaccurate; if you believe access was blocked incorrectly, contact us through https://www.ministerium.ai/contact.

If you access the Service from another country, your information may be processed in the United States or other countries where our providers operate. Those countries may have different data-protection laws. Where required, we use an approved legal mechanism for restricted international transfers.

The availability of the Service in a language other than English does not mean that Ministerium offers or targets the Service in every country.

The Service is not directed to children under 13, and Ministerium does not knowingly collect personal information online from a child under 13 without legally sufficient parental consent. Parish administrative accounts are limited to adults with authority to act for the Parish. A person who has not reached the age of legal majority may donate only with the involvement and permission of a parent or legal guardian and as permitted by law.

If you believe a child has provided personal information improperly, contact us through https://www.ministerium.ai/privacy-request.

The Service may link to Parish websites and third-party services. Their privacy practices are governed by their own notices. Ministerium is not responsible for third-party practices outside the Service.

We may update this Notice to reflect changes in the Service, law, or our practices. We will post the updated Notice with a revised “Last updated” date and provide additional notice when required by law. Material changes apply prospectively from the stated effective date unless law permits otherwise.

For privacy questions or requests, use https://www.ministerium.ai/privacy-request.

For general support, use https://www.ministerium.ai/contact or call (713) 351-9003.

Legal notices may be mailed to:

Ministerium LLCAttn: Privacy and Legal14 E. New Avery PlThe Woodlands, TX 77382United StatesTelephone: (713) 351-9003