Privacy

Informational. The production privacy policy has not been finalised.

This page is not a privacy policy. ECHO’s policy will be finalised and published before public launch, and nothing on this page should be relied on as a legal commitment.

What ECHO stores today

An ECHO account holds an email address, which is used to sign in and to recover a password, and a username, which is a public identity within the platform. A church record holds its name and timezone, and a membership record links a person to a church with a role.

ECHO does not currently store financial records, documents, meeting minutes, or member directories. Those workspaces are not built.

How access is controlled

Access is enforced in the database rather than only in the application: a church’s records are readable only by people with a membership in that church. Passwords are never stored by ECHO in readable form and are handled by the authentication provider.

Questions

Until the policy is published, please raise any question about data handling through the inquiry channel and we will answer it directly.