Privacy Policy

1. About this policy

This Privacy Policy explains how Welland Collective LLC ("Welland Collective," "we," "us," or "our") handles information in connection with Communified, our websites, applications, and related services (collectively, the "Services").

Organizations that subscribe to Communified decide which people may use their workspace and what information is managed there. For information an organization places in Communified, that organization is generally the data controller or business and Welland Collective acts as its service provider or processor. Questions about an organization's records should usually be directed to that organization first.

2. Information we process

Depending on how the Services are used, we may process:

• Account and identity information, such as name, email address, profile image, role, organization membership, and authentication details.
• Organization-managed people records, such as contact information, household relationships, groups, teams, assignments, participation history, and other records an organization chooses to synchronize from Planning Center or enter into Communified.
• Care and collaboration information, including notes, follow-up assignments, scheduled contacts, messages, files, meeting participation, course progress, and related activity.
• Calendar information, when a user connects Google Calendar, as described in the Google Calendar section below.
• Technical information, such as browser and device details, IP address, timestamps, diagnostic logs, security events, and approximate location derived from an IP address.
• Billing and subscription information, which may be processed by our payment provider. We do not store complete payment card numbers.
• Inquiry information, when someone contacts us, requests access, or asks for support.

3. Google Calendar data

Communified requests Google account identity information and permission to view and manage calendar events only when a user deliberately connects Google Calendar. We use this access to show relevant calendar information in Communified and to create, update, or delete calendar events in response to actions the user takes in the platform.

Communified does not use Google Calendar data for advertising, sell it, allow humans to read it except when necessary to provide support or protect the Services, or use it to train general-purpose artificial intelligence models. Google data is shared only with the connected user's organization as needed to provide the requested features, with service providers acting on our behalf, when the user directs us to share it, or when required by law.

Connection tokens are protected and access is limited to the relevant organization and user. A user can disconnect Google Calendar in Communified or revoke access through their Google Account. After disconnection, Communified stops requesting new Google Calendar data and removes the stored connection credentials, subject to short-lived backups and security records.

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

4. Planning Center data

When an organization connects Planning Center, Communified may read the Planning Center records that the organization authorizes so the Services can provide people, care, scheduling, reporting, group, serving, check-in, registration, giving, and related features. The exact information available depends on the organization's Planning Center products and permissions.

Communified does not reclassify or modify Planning Center records unless an authorized user deliberately uses a feature that clearly states it will write information back. Read-only reporting and analysis remain separate from operational Planning Center activity.

5. How we use information

We use information to provide, secure, maintain, and improve the Services; authenticate users; apply organization permissions; synchronize authorized integrations; deliver requested communications; provide support; monitor reliability; prevent abuse; comply with law; and manage subscriptions.

We do not sell personal information or share it for cross-context behavioral advertising.

6. How information is shared

Information may be shared with:

• the organization that manages the relevant Communified workspace and its authorized users;
• service providers that host, secure, support, communicate, analyze reliability, or process payments for the Services under contractual restrictions;
• third-party services a user or organization chooses to connect, subject to their own privacy terms;
• professional advisers, regulators, courts, or law enforcement when reasonably necessary to comply with law or protect rights and safety; and
• a successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality protections.

7. Retention and deletion

We retain information while it is needed to provide the Services, meet an organization's instructions, resolve disputes, maintain security, and satisfy legal obligations. Retention periods vary by the type of record and customer configuration. Organizations can request export or deletion of their workspace data, subject to contractual, legal, security, and backup requirements.

Individuals may request access, correction, or deletion through their organization or by contacting us. We may need to verify identity and consult the organization responsible for the record before completing a request.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including tenant separation, role-based access controls, encrypted network connections, protected integration credentials, logging, and restricted administrative access. No system can guarantee absolute security, and users should protect their accounts and promptly report suspected unauthorized access.

9. Children's information

Communified is provided to organizations and is not directed to children for independent consumer use. An organization may manage records about children or households as part of its legitimate activities. That organization is responsible for providing required notices, obtaining appropriate permission, and limiting access to those records. We do not knowingly invite children to create independent accounts through the public Communified website.

10. International processing

Information may be processed in the United States and other locations where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

11. Changes and contact

We may update this policy as the Services and applicable laws change. We will post the updated version here and revise the date above. Material changes may also be communicated through the Services or directly to customer administrators.

Questions or privacy requests may be sent to contact@wellandcollective.com.