Privacy Policy
Nov 6, 2026 ·
This Privacy Policy explains how Anise, also known as Christ Xclectic Church ("Anise," "we," "us") collects, uses, shares and protects personal information when you use our online giving and subscription services (the "Services").
Effective date: November 6, 2026
1. Information we collect
We collect only what we need to receive your gifts, run your subscription, and keep the records the law requires.
Account and contact
Name, email, phone number, mailing address, username, password (stored hashed)
Donation amounts and dates, one-time or recurring, designated fund or ministry, in-honor or memorial notes, anonymity
Plan, billing cycle, start, renewal and cancellation dates, payment status
You and your use of the site
Payment
Card or bank account details (tokenized by our processor), billing address (For customer service as returns and payments
You and our payment processor
Device and usage
IP address, browser and device type, pages viewed, login times, approximate location
Automatically, via cookies and logs
Communications
Messages, emails, prayer requests or support questions you send us
You
Card and bank data. Payments are handled by our PCI DSS-compliant payment processor, Stripe. We never see or store full card or bank account numbers — only a token and limited details such as card brand, last four digits and expiration date.
Religious affiliation. Giving to or subscribing with a church can reveal religious beliefs, which some laws treat as sensitive information. We use it only to provide the Services, limit access to authorized staff, and never use it for advertising.
2. How we use and share information
We use your information to receive gifts, run subscriptions and serve our community. We never sell, rent or trade donor or subscriber lists.
Purpose
Legal basis (EU/UK users)
Process one-time and recurring donations and subscription payments
Performance of a contract
Send gift receipts and annual giving statements for tax purposes
Legal obligation
Manage your subscription: renewal reminders, failed-payment notices, plan changes and cancellations
Performance of a contract
Prevent fraud and unauthorized charges
Legitimate interests
Answer your questions and prayer requests
Legitimate interests
Send ministry updates, newsletters and giving opportunities
Consent (you can withdraw at any time)
Improve and secure the website
Legitimate interests
Who we share it with:
• Our payment processor — Stripe, to complete donations and subscription charges.
• Service providers — website hosting, email, and church or donor-management software [name, e.g., Planning Center], bound by contract to use the data only on our instructions.
• Authorized church staff and leaders — only those who need giving or subscription records to do their role, such as finance staff preparing receipts.
• Legal authorities — when required by law, subpoena or court order.
• With your consent — any other sharing you approve.
Tax receipts. Anise is [a 501(c)(3) nonprofit / a church under IRC section 508(c)(1)(A)]. Receipts for gifts of $250 or more include the details the IRS requires. Subscription fees paid for goods or services are generally not tax-deductible, and receipts will say so.
3. Security, retention and international transfers
Security. We protect information with administrative, technical and physical safeguards, including:
• Encryption in transit (TLS 1.2 or higher) and at rest (AES-256)
• Tokenization of card data and PCI DSS-compliant processing
• Multi-factor authentication and role-based access controls for staff
• Continuous monitoring, logging and regular security testing
No system is completely secure. If a breach affects your information, we will notify you and regulators as the law requires. Protect your password and tell us right away at [security email] if you suspect unauthorized access.
Retention. We keep giving and payment records for [7] years after the gift or charge to support tax receipts, audits and legal requirements. Account and subscription details are kept while your account is open and deleted or anonymized within [90 days] after you close it, unless the law requires longer.
International transfers. We are based in [Country] and may process data in other countries. When we transfer personal information out of the EU, UK or other regions with transfer rules, we use approved safeguards such as Standard Contractual Clauses.
4. Your rights and choices
Depending on where you live, you may have the right to:
• Access the personal information we hold about you and get a portable copy
• Correct inaccurate information
• Delete your information, subject to legal retention duties
• Object to or restrict certain processing
• Withdraw consent where we rely on it, such as for marketing
• Opt out of the sale or sharing of personal information and of targeted advertising (we do neither)
• Appeal a decision we make about your request
To make a request, email [privacy email] or use [in-app privacy settings link]. We will verify your identity before acting and respond within the time the law requires (for example, 30 days under the GDPR or 45 days under the CCPA). We will not discriminate against you for exercising your rights. EU and UK users may also complain to their local data protection authority.
Recurring gifts and subscriptions. You can change, pause or cancel a recurring donation or subscription at any time at [account page link] or by contacting us. Cancellation stops future charges; it does not refund past ones except as described in our [Refund Policy link].
State privacy laws. Some state privacy laws exempt nonprofit and religious organizations. We honor the rights above for everyone, wherever you live.
Marketing. Unsubscribe from marketing emails using the link in any message. Service and security notices cannot be turned off while your account is open.
Cookies. We use strictly necessary cookies for login, security and fraud prevention, plus optional analytics cookies set only with your consent where required. Manage your choices in [cookie settings link] or your browser. We honor Global Privacy Control signals.
Children. The Services are not intended for anyone under 18. We do not knowingly collect information from children; if we learn we have, we will delete it.
5. Changes and contact
We may update this policy as our Services or the law change. We will post the new version here with a new effective date and, for material changes, notify you by email or in the Services before they take effect.
Questions or requests:
• Email: gilbertd2174@gmail.com
• Mail: Anise (Christ Xclectic Church), Attn: Privacy, [street address, city, state, ZIP, country]
• Phone: 6784958342