What we collect, and why

Sign-in runs on Clerk. We keep your email address and whether it is verified. We use your email to run your account and to send transactional email — receipts, gift invitations, and replies to reports. We do not sell your email or use it for third-party advertising.

Card payments run on Stripe Checkout. Your card number goes to Stripe, never to us. We keep a record of what you bought, when, and for how much — that record is what puts the files in your library and what pays the church that made them, so it is kept as long as the financial records require.

When you buy a listing for someone else, you give us their email address. We use it for exactly one thing: delivering that purchase — an invitation if they have no account yet, the files in their library once they do. We do not add gift recipients to any mailing list, and they are never charged.

Churches and pastors who sell on the platform connect a payout account through Stripe Connect. Legal names, tax details, and bank information go to Stripe for identity verification and payouts. We store the connection, not the bank details.

The studio's AI features can run on an OpenAI API key you supply. We hold that key in custody for you: it is encrypted at rest with AES-256-GCM under a separate application-held secret — database disk encryption alone is not enough for a third-party credential — and it is decrypted only on the server, only to make AI requests you start. You can remove it at any time, and requests made with it are governed by OpenAI's terms as well as ours.

When you use AI features, your prompts and the responses go to OpenAI, and we keep a log of the request. A scheduled job deletes AI logs older than 90 days.

When you report a listing, we keep the report and your contact email so we can reply within the promised deadlines. No account is needed to report.

These companies run parts of the platform on our behalf:

• Clerk — sign-in and account management
• Stripe — payments, payouts, and identity verification
• Neon — the database (Postgres)
• Vercel — hosting and file storage
• Resend — transactional email
• OpenAI — AI features, under your key or ours
• Sentry — error monitoring

Each processes only what its job requires, under its own terms and security controls.

You can remove your stored OpenAI key at any time. To access, correct, or delete the data we hold on you — including closing your account — email complaints@readytopreach.com. Purchase and payout records that the law requires us to keep are kept; everything else goes.