Privacy Policy

Last updated: 24 July 2026

1. Information We Collect

We collect the information a church admin provides when creating and managing a site — church name, contact details, admin login credentials, and the content published to the church website (text, images, events, sermons, giving records). We also collect basic technical data such as IP address, browser type, and usage logs to keep the service secure and reliable.

2. How We Use Information

Information is used solely to provision and operate each church's website, authenticate admins, process online giving, send transactional notifications, and improve the platform. We do not sell personal data, and we never use one church's data to serve another.

3. Data Isolation Between Churches

ChurchNepal is multi-tenant by design. Each church runs on its own database, its own storage folder, and its own subdomain. Members, giving, and content are fully separated with zero data crossover between congregations.

4. Payments

Online giving is processed through eSewa and Khalti. Card and wallet details are handled by those providers under their own security standards — ChurchNepal never stores full payment credentials on its servers.

5. Cookies

We use essential cookies for authentication and session management, and a preference cookie to remember your language and theme. Non-essential cookies are only set with your consent.

6. Data Security

Passwords are hashed with bcrypt, access is protected by JWT-based authentication, and administrative actions are recorded in an audit log. Automated backups are configured per tenant.

7. Your Rights

Church admins may access, correct, export, or request deletion of their church's data at any time from the admin dashboard or by contacting us. Requests are actioned within a reasonable period.

8. Contact

Questions about this policy can be sent to privacy@churchnepal.com.