Privacy Policy

Effective July 25, 2026

1. What this covers

This policy describes what Verhēma ("we," "us") collects and how it is used when a church signs up for and operates the Service, and when listeners use a church's listening page.

2. Information we collect

Church account information: church name, administrator name and email, optional church website, chosen plan, and branding assets (name, logo, colors) the church uploads.
Service configuration: language settings, glossary terms, admin roster, and notification preferences.
Live service audio: the audio a church streams from its sound system is processed in real time to produce translations and captions. It is processed transiently for that purpose; the Service does not offer or maintain a sermon recording library.
Operational logs: technical logs (timestamps, connection events, stream health, errors) used to run and troubleshoot the Service.
Payment information: when billing is active, payment details are collected and processed by our payment processor (Stripe). We do not store full card numbers.

Listeners do not create accounts. A listener's language choice and playback settings are kept on their own device (local storage). We do not build advertising profiles of listeners.

3. How information is used

To operate the Service: translating live audio, delivering captions and audio to listeners, and keeping each church's data separate from every other church's.
To administer accounts, trials, and (when active) billing.
To monitor reliability, investigate problems, and improve the Service.
To communicate with church administrators about their account and service status.

We do not sell personal information. We do not use sermon audio for advertising.

4. Service providers

We rely on infrastructure and processing providers to deliver the Service, including Google Cloud (hosting, speech and translation processing, authentication) and Deepgram (speech recognition), and Stripe for payments when billing is active. These providers process data on our behalf to provide the Service.

5. Retention

Account and configuration data is kept while the church's account is active. Live audio is processed in real time and is not retained as recordings by the Service. Operational logs are retained on a rolling basis for reliability and security purposes. When an account is closed, we delete the church's stored configuration data on request.

6. Security

Traffic is encrypted in transit. Administrator access is authenticated, and each church's data is scoped to that church. No internet service can guarantee absolute security, and we encourage administrators to protect their sign-in credentials.

7. Children

The Service is operated for churches and their congregations. Listener pages do not collect accounts or profiles from anyone, including children.

8. Your choices

Church administrators can review and update account information, branding, glossary terms, and admin access from their own tools, and can contact us to correct or delete account data. Listeners can clear their device's site data at any time.

9. Changes

We may update this policy as the Service evolves. Material changes will be communicated to church administrators by email and reflected on this page.

10. Contact

Privacy questions: hello@porva.church.