1. Who we are
Ministrio is a digital knowledge and resource platform for churches and ministries. In this policy, “Ministrio”, “we”, “us” and “our” refer to the provider of the Ministrio service.
Questions or requests about privacy can be sent to hello@ministrio.com.
2. Our role and your organisation’s role
Ministrio acts as a controller when we decide why and how personal information is used for account administration, service security, billing, customer support and operation of our website.
A church, ministry or other subscribing organisation generally acts as controller for the member details, invitations, resources and other content it places in its Ministrio space. For that information, Ministrio acts as a processor on the organisation’s instructions. Questions about an organisation’s content or membership decisions should normally be directed to that organisation first.
3. Information we process
- Account information: name, email address, authentication identifiers, profile image and account status.
- Organisation information: organisation and campus membership, roles, invitations, branding, settings and subscription plan.
- Content and activity: resources, collections, announcements, resource views and completions, saved resources, shared comments and questions, private reflections, search terms and communication preferences.
- Billing information: subscription status, plan, customer and subscription identifiers, and transaction-related information received from our payment provider. Ministrio does not store full payment-card details.
- Technical information: IP address, browser and device information, request and security logs, cookie identifiers and diagnostic information.
- Communications: messages and information you provide when contacting us or requesting support.
We receive this information from you, your organisation, other authorised users, your use of the service and providers used to operate Ministrio.
4. Why we use information
Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.
5. Organisation content
Resources and organisation content remain associated with the organisation that provides them. The organisation determines who may access public, member-only and leader-only material. Administrators should avoid uploading unnecessary personal information, confidential pastoral records, health information or other sensitive data unless they have a lawful basis and appropriate safeguards.
Ministrio does not claim ownership of organisation content and does not use private organisation content to train general-purpose artificial intelligence models.
5A. Engagement analytics and reflections
An organisation may enable engagement analytics to understand how its members use resources. Leaders receive aggregate statistics by default. Named-member activity is available only to specifically authorised users, may be restricted to a campus, and directory views, member drill-downs and exports are recorded in an audit log.
Private reflections are visible only to their author and are excluded from aggregate and named-member analytics. Visible shared comments and questions may contribute to engagement totals. Organisations are responsible for informing members and managing analytics permissions appropriately.
6. How we share information
We disclose information only as needed to provide the service, follow an organisation’s instructions, complete a transaction, protect the service or comply with law. Recipients may include:
- authorised members and administrators of your organisation;
- Supabase for database, authentication and storage infrastructure;
- Vercel for application hosting and delivery;
- Resend for transactional email;
- Stripe for subscription billing and payment services;
- professional advisers, authorities or counterparties where reasonably necessary for legal, security or corporate purposes.
We do not sell personal information.
7. International transfers
Our providers may process information outside Norway or the European Economic Area. Where required, we use a lawful transfer mechanism such as an adequacy decision or approved standard contractual clauses, together with supplementary safeguards where appropriate.
8. Retention
We keep personal information only for as long as necessary for the purposes described in this policy. The period depends on the type of information, an organisation’s instructions, account status, security needs and legal requirements. Account and organisation data is generally kept while the relevant account or subscription is active. Some billing, security, backup and audit records may be retained longer where required by law or reasonably necessary to establish, exercise or defend legal claims.
Deletion or departure from an organisation may remove or anonymise personal account activity while preserving organisation-owned resources and necessary audit records.
9. Security
We use organisational and technical measures intended to protect information, including access controls, tenant separation, database row-level security, encrypted network transport and restricted administrative access. No online service can guarantee absolute security. You must protect your sign-in details and tell us promptly if you suspect unauthorised access.
10. Your rights
Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, receive portable information, and withdraw consent. You may also complain to the Norwegian Data Protection Authority (Datatilsynet) or the supervisory authority where you live or work.
You can manage certain details, preferences, exports and account-lifecycle requests inside Ministrio. You may also contact hello@ministrio.com. We may need to verify your identity and, where an organisation controls the information, refer the request to that organisation.
11. Children
Ministrio is provided to organisations and is not directed at children for independent account creation. Organisations that provide access to children are responsible for establishing an appropriate lawful basis, supplying required notices and obtaining parental authorisation where applicable.
12. Cookies
Ministrio uses cookies and similar local storage that are necessary for authentication, security and requested service functions. See our Cookie Policy. We will request valid consent before introducing non-essential analytics, advertising or tracking technologies where consent is required.
13. Changes
We may update this policy as Ministrio or applicable law changes. We will post the revised version here, update the date above and provide additional notice when a change materially affects your rights or our use of personal information.