Privacy Policy
Last updated: March 16, 2026
1. Introduction
Sanctuary Media ("we," "us," or "our") operates the website at sanctuarymedia.com and provides AI-powered sermon content creation services for churches. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
By creating an account or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Church or organization name
- Email address
- Password (stored securely via hashing; we never store plaintext passwords)
- Selected subscription plan
2.2 Sermon Content
When you upload a sermon for processing, we receive:
- Video files (MP4, MOV, or MKV format, up to 10 GB)
- Sermon title and date
- Audio extracted from the video for transcription
2.3 Billing Information
Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers. We retain only a Stripe customer identifier to manage your subscription.
2.4 Contact Form Submissions
If you use our contact form, we collect your first name, last name, email address, church name, and the contents of your message.
2.5 Automatically Collected Information
We use essential cookies solely for authentication and session management (provided by Supabase). We do not use third-party tracking cookies, advertising pixels, or analytics scripts. We do not collect IP addresses, browser fingerprints, or behavioral data for advertising purposes.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Process sermon videos into transcripts, summaries, blog posts, social media captions, short-form video clips, podcast audio, and other content deliverables
- Deliver processed content to your dashboard and via email notification
- Manage your subscription and billing through Stripe
- Enforce sermon upload limits based on your plan tier
- Send transactional emails (processing complete, error notifications)
- Respond to your inquiries submitted through the contact form
- Maintain, improve, and secure our platform
4. Third-Party Services
To provide our services, we share limited data with the following third-party providers. Each operates under its own privacy policy.
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication & database | Email, hashed password, church name, sermon metadata |
| Stripe | Payment processing | Email, payment method details (handled directly by Stripe) |
| Amazon Web Services (S3) | Temporary file processing | Uploaded video files, extracted audio (deleted after processing) |
| Cloudflare R2 | Long-term content storage | Original sermon video, processed output files |
| AssemblyAI | Speech-to-text transcription | Extracted sermon audio |
| Anthropic (Claude) | AI content generation | Sermon transcript text (for summaries, blog posts, captions, etc.) |
| Resend | Transactional email delivery | Email address, notification content |
We do not sell, rent, or trade your personal information or sermon content to any third party for marketing or advertising purposes.
5. Data Storage and Retention
5.1 Sermon Content Retention
Processed sermon content is stored in Cloudflare R2 and automatically deleted based on your subscription tier:
- Starter: 30 days after processing
- Growth: 90 days after processing
- Pro: 180 days after processing
Temporary processing files in AWS S3 (raw video, extracted audio, intermediate files) are deleted automatically once processing is complete.
5.2 Account Data
Your account information (email, church name, sermon metadata) is retained for as long as your account remains active. If you delete your account, we will remove your personal data and any remaining stored content within 30 days.
5.3 Billing Records
Transaction and invoice records are maintained by Stripe in accordance with their data retention policies and applicable tax/legal requirements.
6. Data Security
We implement the following measures to protect your data:
- All data transmitted between your browser and our servers is encrypted via TLS/HTTPS
- Passwords are hashed and never stored in plaintext
- Database access is protected by row-level security policies, ensuring users can only access their own church and sermon data
- File downloads use short-lived signed URLs (15-minute expiration)
- File uploads use time-limited presigned URLs (2-hour expiration)
- Payment information is handled entirely by Stripe (PCI-DSS compliant) and never touches our servers
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete information
- Delete your account and associated data
- Export your sermon content while your account is active
- Withdraw consent at any time by discontinuing use of our services
To exercise any of these rights, contact us at info@sanctuary-media.com.
8. Global Privacy Control (GPC)
We do not sell or share personal information for cross-context behavioral advertising. Because we do not engage in tracking or data sales, a GPC signal does not change how we handle your data — we already respect your privacy by default.
9. Children's Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Sanctuary Media
Email: info@sanctuary-media.com
Web: sanctuarymedia.com/contact