Last Updated: 10/27/2026
Under the Protection of Personal Information Act (POPIA) and the General Data Protection Regulation (GDPR), Ecclesia acts solely as the "Operator" (or Data Processor). The subscribing Church utilizing our platform is the "Responsible Party" (or Data Controller). We process congregation data strictly on behalf of, and under the instruction of, the Church.
We process information submitted by the Church or its members via our application, which may include:
Note on Special Personal Information: Because attendance at a religious institution inherently implies religious affiliation, this data is classified as Special Personal Information. It is the responsibility of the Church to ensure they have the lawful basis or explicit consent to collect this data from their members.
We use the data exclusively to provide the Ecclesia service to the Church. This includes generating attendance reports, triggering pastoral care alerts, and ensuring the technical stability of the platform. We will never sell, rent, or use congregation data for our own marketing purposes or third-party monetization.
We implement enterprise-grade security, including PostgreSQL Row Level Security (RLS), to ensure that each Church's data is strictly isolated. Data is stored on secure cloud infrastructure. In the event of a service termination, all congregation data associated with the Church's account will be permanently deleted or handed over to the Church upon written request.
Because Ecclesia is the Operator, congregation members who wish to view, modify, or permanently delete their personal data from the Ecclesia platform must submit their request directly to their Church leadership. We will fully assist the Church in executing these requests promptly through our dashboard tools.