Privacy policy

The controller is ND Strupler, Cambodia, who also runs AfterPreach and is its controller too. For anything in this policy, write to info@afterpreach.com.

BeforePreach and AfterPreach share one account. AfterPreach holds it, and AfterPreach's privacy policy covers what it keeps and how long. In short:

There is no advertising, no tracking pixel and no third-party cookie anywhere on this site. Nothing about you or your visit is sold or shared for marketing.

Where the EU or UK General Data Protection Regulation applies, the bases are: performing the contract (Art. 6(1)(b)) for the account, plan, usage, screens, seats and files; a legal obligation (Art. 6(1)(c)) for payment records; and legitimate interests (Art. 6(1)(f)) for limiting abuse, counting visits, and the copies of emails described in clause 5. You can object to anything based on legitimate interests. Nothing here relies on your consent, so there is nothing to withdraw.

If you are in Switzerland, the revised Federal Act on Data Protection (revFADP) applies. Your data is processed only for the purposes in this policy and only as far as they need, and this policy is the information that law requires.

BeforePreach sends these emails: confirming your address, password resets, team invitations, account hand-overs and the note to the previous owner, and trial reminders three days and one day before a trial ends. Replies go to info@afterpreach.com.

A blind copy of every email the service sends goes to the operator's own inbox (info@afterpreach.com), the confirmation, reset, invitation and hand-over links included, so the operator can help when a link does not arrive. Those links work for whoever holds them until they expire. The copies stay in that mailbox like any other mail; ask, and the ones about you are deleted.

Nothing else is sent: no newsletter, no mailing list, and nothing on anyone else's behalf.

This applies when the Series Pack generator is available. To propose a pack, the service sends the sermon series outline you paste, and nothing else, to Anthropic in the United States. Your name, your email and your church are not sent with it.

Under Anthropic's commercial terms, material sent through their API is not used to train their models. It is retained by them for a limited period for abuse monitoring.

The model proposes verse references only. Where licensed verse text is used, API.Bible receives the reference and the translation, never the outline.

The practical consequence: do not paste anything into the outline that a person told you in confidence. A pastoral conversation, a named person's illness, a marriage in trouble. Preach it if you must, but do not send it here.

Most of the providers above are in the United States, so your data goes there. Transfers rest on the European Commission's standard contractual clauses, and where the provider is certified, on the EU-US Data Privacy Framework and its Swiss extension. Paddle is in the United Kingdom, which the EU and Switzerland recognise as protecting data adequately.

The operator works from Cambodia, which has no comprehensive data protection law, and reads support requests and the email copies there.

This is a real consequence rather than a formality: authorities in those countries have powers over data held there that your own country's authorities do not. Clause 6 is the practical answer.

BeforePreach's records of your church are kept until you ask for them to be deleted or the account is closed, then deleted. Payment records are the exception below.

Creations and rendered files, when the Studio is available, are kept to the number your plan allows. Making one more removes the oldest, with a warning first.

Your IP address lives in memory only, for an hour at most, and is gone on every restart.

Payment records are kept by Paddle and by the operator for as long as tax law requires, which is commonly ten years.

The database keeps a short rolling history at Neon so it can be restored after a fault. A deleted record stays in that history until the restore window has passed.

What AfterPreach holds is kept as AfterPreach's privacy policy says.

You can ask for a copy of your data, for it to be corrected, for it to be deleted, for its use to be restricted, for it in a portable form, and you can object to processing based on legitimate interest. The same operator answers for BeforePreach and AfterPreach, so one request covers both. Write to info@afterpreach.com and you will get an answer within a month.

You can also complain to a regulator without asking the operator first. Cambodia has no data protection authority to complain to. If you are in the EU, the EEA, the United Kingdom or Switzerland, you can complain to the authority where you live, and that right is unaffected by where this service is run from.

Your password never passes through BeforePreach's server. Your session is a signed token in an http-only cookie, sent over HTTPS only. The two servers talk to each other with a shared secret, and that secret and every other key stay on the servers and never reach a browser. Card details stay with Paddle.

Being straight about the weak points, because a policy that only lists strengths is not worth reading:

Your email address controls the account in both products. A password reset is sent by email, and an account can be handed to another address the same way.

Signing in depends on AfterPreach. If AfterPreach cannot be reached, nobody can sign in to BeforePreach until it is back, though people already signed in stay signed in.

The sign-in cookie is signed, not encrypted. It cannot be altered, and page scripts cannot read it, but it carries your name and email address in readable form for anyone with access to your browser.

The operator's inbox holds working links until they expire, as clause 5 says.

The service is for churches and their staff and is not directed at children. Do not create an account if you are under 18, and do not paste material that identifies a child.

This policy may change. The version and date at the top of the page say which one you are reading, and a material change will be notified before it takes effect.