Privacy Policy

1. Who we are

TGIF / ChurchOnSunday (“we”, “us”) operates the ChurchOnSunday streaming service, including portal.churchonsunday.org, stream.churchonsunday.org, the ChurchOnSunday mobile companion app, and related software that helps churches restream worship services to platforms such as YouTube and Facebook.

Contact: scott@tgifriday.com

2. What this policy covers

This Privacy Policy describes how we collect, use, and share information when you:

• Use the ChurchOnSunday portal or Restreamer admin tools
• Use the ChurchOnSunday mobile companion app (Android or iOS)
• Connect a Facebook Page to our Meta app (“ChurchOnSunday”) so we can create and end Facebook Live broadcasts on your behalf
• Connect a YouTube channel so we can manage Live broadcasts on your behalf
• Contact us for support

Viewers who watch a church’s Facebook or YouTube stream are subject to those platforms’ policies, not this one.

3. Information we collect

Account and access

• Portal / Restreamer username and authentication credentials (passwords are stored by our streaming software; we do not sell them)
• Session cookies needed to keep you signed in on the portal
• Mobile sign-in via Google or Sign in with Apple: email address (when provided) and a stable account identifier (sub) used to authorize church staff
• Mobile session tokens stored on your device in secure storage until you sign out or remove the account

Facebook / Meta connection

• When a Page admin uses Connect Facebook, Meta may share identifiers and tokens for the Facebook user and Pages they manage (for example Page ID and a Page access token)
• We store Page credentials on our server solely to create, update, and end Live Videos for that church
• We may receive basic profile information Meta returns during OAuth (such as name or user id)

Streaming operations

• Technical logs (timestamps, connection status, errors) used to operate and debug the service
• OBS stream keys and similar ingest secrets configured for your church

We do not intentionally collect

• Payment card data through this Meta app
• Congregation membership lists from Facebook beyond what is required to publish the Live

4. How we use information

• Authenticate church operators (including mobile Google / Apple sign-in) and protect access to streaming controls
• Create and end Facebook Live Videos when OBS starts or stops streaming
• Create and manage YouTube Live broadcasts when configured
• Forward the live media stream to destinations the church configured (e.g. Facebook, YouTube)
• Provide support and improve reliability and security
• Comply with law and Meta / Google / Apple platform terms

We do not sell personal information. We do not use Facebook Page tokens, Google sign-in data, or Apple sign-in data for advertising or unrelated marketing.

5. Sharing

We share information only as needed to run the service:

• Meta / Facebook — to authenticate, create Live Videos, and deliver the stream you requested
• Other destinations you configure (e.g. YouTube) — using credentials you provide
• Infrastructure providers that host our servers (under contractual confidentiality)
• Legal requirements if we are compelled by law

Church staff who have portal credentials can see OBS keys and connection status for their church.

6. Retention

• Page access tokens remain until you disconnect Facebook, rotate credentials, or ask us to delete them
• Operational logs are kept for a limited period for troubleshooting, then deleted or aggregated
• Account credentials remain while your church uses the service

7. Security

We use HTTPS for the portal, restrict administrative access, and keep Facebook tokens on the server (not in public git). No method of transmission or storage is 100% secure; please protect your portal password and OBS stream key.

8. Your choices and deletion

• Disconnect Facebook via a new Connect flow after we revoke stored tokens, or by removing the ChurchOnSunday app from your Facebook settings
• In the mobile app: use Sign out or Remove account to clear the local session and unlink that Google/Apple identifier from our mobile access records
• Request deletion of Page tokens, YouTube tokens, and related account data by emailing scott@tgifriday.com — see also our Data deletion page
• You may stop using the portal or mobile app at any time

9. Children

The portal, Meta app, and mobile companion are for church operators (adults), not for children under 13. We do not knowingly collect children’s data through these apps.

10. Changes

We may update this policy. The effective date at the top will change when we do. Continued use after an update means you accept the revised policy.

11. Contact

TGIF / ChurchOnSunday
scott@tgifriday.com