Privacy Policy
1. Introduction
Ruah Hope Center, operated by Restoration Ministries ("we", "our", or "us"), operates the Ruah Hope Center - Worship platform (accessible atdavidconqueror.comor equivalent). This Privacy Policy explains how we collect, use, and protect personal information when you use our service. By accessing or using Ruah Hope Center - Worship, you agree to the practices described in this policy.
2. Information We Collect
Account Information
When you register or sign in, we collect your email address, full name, and profile image (if provided via Google SSO or manually uploaded).
Church Affiliation & Membership Data
Under our multi-church architecture, you select or request to join a specific church congregation. We store your selected church ID, membership status ('pending', 'approved', or 'rejected'), membership request timestamps, approval timestamps, and your assigned organizational role (e.g. Standard Member, Worship Leader Admin, or Church Manager).
Permanent Church OBS Stream Tokens
For live stream graphics and lower-third overlays, churches are provisioned cryptographically random permanent stream tokens (e.g., ch_live_...). These tokens authenticate browser source overlays in streaming software (such as OBS Studio or vMix) without requiring account sign-in on the broadcast workstation. Tokens are stored securely with the church profile and can be regenerated or revoked at any time by authorized Church Managers or Super Admins.
Authentication Data
Passwords are stored as bcrypt hashes — we never store your plaintext password. Google OAuth tokens are used transiently during sign-in and are not persisted in our database.
Usage & Session Data
We record sign-in counts, current and last sign-in timestamps, and current and last sign-in IP addresses. This data is used for security monitoring and to track active sessions.
Stage Sync & Live Presentation Data
When hosting or joining a live presentation or Stage Sync broadcast, we store: ephemeral 6-digit session PINs, host and connected device tokens, device user-agent strings, and heartbeat timestamps. Sanctuary projector displays and stage prompters receive real-time slide and lyric state events scoped to your active church service. All Stage Sync broadcast sessions expire automatically and are periodically purged.
Presenter Display Preferences
Per-user settings including font size, text alignment, transition style, transition duration, font family, shadow preference, uppercase preference, logo size, and logo URL.
User-Generated Content & Church Data
Songs, custom slides (faith confessions, announcements, sermon notes, liturgy, and custom farewell screens), and church service setlists. Worship setlists, custom slides, and church-specific assets are logically partitioned and scoped to your affiliated congregation.
Device Information
Standard HTTP header data such as browser user-agent string. We do not use browser fingerprinting.
3. How We Use Your Information
- Authenticate and authorise your account access and organizational permissions.
- Manage church affiliation, allowing Church Managers to review and approve membership join requests for their congregation.
- Provide church-isolated worship management: scoped song setlists, Bible projection, Sanctuary displays, and Presenter Console.
- Serve permanent OBS lower-third overlays securely authenticated via your church's unique stream token.
- Display and persist your Presenter Console display preferences.
- Manage Stage Sync broadcast sessions — matching hosts to connected prompter devices via ephemeral 6-digit PINs.
- Security and fraud prevention, including IP-based anomaly detection and unauthorized cross-church access prevention.
- Send transactional emails only (e.g., password reset, account verification). We do not send marketing or promotional emails.
- Aggregate, anonymised platform analytics for operational improvements. No third-party analytics tracking cookies are enabled.
4. Google Single Sign-On
We offer sign-in via Google OAuth 2.0, implemented through NextAuth.js. When you choose this option, Google shares your email address, display name, and profile photo URL with us. We store only these three data points — we do not persist your Google access tokens or refresh tokens. Your continued use of Google services is governed by Google's Privacy Policy.
5. Data Storage, Isolation & Security
Your data is stored in a structured relational database (libsql/Turso or local equivalent) with strict multi-tenant isolation. All church services, custom slides, rosters, and live broadcast states are keyed to specific church tenants, preventing cross-church data leakage or unauthorized access.
Passwords are hashed using bcrypt and are never stored in plaintext. User sessions are managed as signed JSON Web Tokens (JWTs) by NextAuth.js. Permanent OBS stream tokens are stored as dedicated cryptographic hashes and transmitted via encrypted HTTPS URLs.
Stage Sync host tokens and connected device tokens are ephemeral — they expire with the service session and are purged from database records.
We implement reasonable technical and organisational measures to protect your data. However, no system can guarantee absolute security, and we cannot warrant that unauthorised access will never occur.
6. Data Sharing & Church Visibility
We do not sell, rent, or trade your personal data. Data sharing within the platform is governed by organizational tenancy:
- Church Leadership Visibility: Authorized Church Managers and Worship Leader Admins within your affiliated church can view your name, email, join request status, and assigned church role for congregation administration. Church leadership cannot view data or members from other church congregations.
- Infrastructure Providers: (Vercel, NextAuth.js, Turso) — bound by strict confidentiality and data processing security standards.
- Google: — only for the purpose of OAuth 2.0 authentication when chosen.
- Law Enforcement or Courts: — only when required by a valid court order or applicable Indian law.
7. Data Retention & Account Deactivation
Account data is retained for as long as your account remains active. You can review your profile information, change your display name, update your password, or voluntarily deactivate your account at any time via the User Profile page (/profile).
When you deactivate (soft delete) your account through your profile:
- Your account is marked with an immediate deactivation timestamp (
deleted_at) and cannot be logged into. - Your email address is unlinked and anonymized so that the original email address is freed for any future registration.
- Stored password hashes are permanently erased from the database.
- Active live stage broadcasts and pending church join requests are immediately terminated.
- Church worship services and lyrics created under congregation rosters remain preserved for ministry continuity without displaying active member credentials.
Stage Sync session data expires automatically per the session's expiresAt timestamp and is periodically purged. You may also contact us at ruahhopecenterbodi@gmail.com for complete data erasure inquiries.
8. Children's Privacy
Ruah Hope Center - Worship is a platform designed for church leaders, musicians, and authorised worship staff. We do not knowingly collect personal data from persons under the age of 13. If we discover that a user under 13 has created an account, we will immediately delete that account and all associated data.
Persons aged 13 to 17 may use the platform only with verifiable parental or guardian consent. If you believe a minor has registered without consent, please contact us at ruahhopecenterbodi@gmail.com.
9. Your Rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023 (India), you have the following rights with respect to your personal data:
- Right to Access — request a copy of the personal data we hold about you.
- Right to Correction — request correction of inaccurate or incomplete data.
- Right to Erasure — request deletion of your personal data and account.
- Right to Grievance Redressal — we commit to responding to grievances within 72 hours of receipt.
- Right to Nominate — you may nominate another individual to exercise these rights on your behalf.
To exercise any of these rights, contact us at ruahhopecenterbodi@gmail.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page will be updated to reflect any changes. Your continued use of the platform after a change is published constitutes your acceptance of the updated policy.
12. Contact Us
For privacy-related questions, requests, or grievances, please contact us at:
© 2026 Ruah Hope Center · Restoration Ministries