Privacy Policy

1. Who We Are

Taratone Corporation (“Taratone”, “we”, “us”) is a Canadian company that builds Tara.OS, an operating platform for churches, along with the Church Operations Health Check (health.tara-platform.com) and this website (www.tara-platform.com).

We handle personal information in two different roles, and this policy explains both. When a church uses Tara.OS, the church decides what records it keeps about its people, and we process those records only on the church’s behalf. For our own accounts, billing, website, Health Check and marketing, we decide how information is used and we are responsible for it.

In short: we never sell personal information, we do not use church records to train AI models, and church data belongs to the church.

2. A Note for Church Members, Donors and Volunteers

If your church uses Tara.OS, your church is responsible for the information it keeps about you, such as your contact details, household, attendance, groups, volunteering and giving. We store and process that information for your church under contract, and we only use it to provide the service to your church.

To see, correct or delete your information, or to ask how it is used, please contact your church directly. If you contact us instead, we will pass your request to your church and help it respond.

3. Information We Collect

Account information. When church staff are invited to Tara.OS, we collect their name, email address, role, campus access and sign-in details. Passwords are handled by our authentication provider and are never stored in readable form. If you sign in with Google, we receive your name and email address from Google. If you turn on two-step verification, we store the information needed to check your authenticator codes.

Billing information. We collect the church’s name, billing contact and subscription details. Card payments are handled by our payment processor, Stripe; we do not store card numbers or security codes.

Church data in Tara.OS. Churches may enter or import records about their people: names, contact details, birth dates, households and family relationships (including children and their guardians), attendance, groups and ministries, volunteer roles and schedules, gifts, pledges and tax receipts, notes (including pastoral and care notes, which no role can see by default), custom fields and uploaded documents. Churches also enter their own financial records, such as accounts, budgets, transactions, bank reconciliations and payroll figures. We process this church data only on the church’s instructions (see “Church data we process for churches”).

Church Operations Health Check. The Health Check does not require an account. We collect the church’s name, country, and optionally its city and province or state; optional rough figures chosen on sliders (weekly attendance, annual revenue, operating expenses, months of reserves, staff numbers and staff compensation); your answers to the 20 questions and the optional open question; and, if you choose, an email address so we can send your report. It never asks for donor names, bank details or transaction records.

Website and demo requests. When you book a demo, we collect your name, email address, church, role, attendance band, the areas you are interested in and any note you add. The contact page opens your own email app, so we only receive what you choose to send.

Information collected automatically. Like most online services, our hosting and security systems record technical information such as IP address, browser type, pages visited and the time of each request. Tara.OS keeps an audit log of important changes (for example, changes to people records, finances, imports and invitations) showing who made each change and when. We use error monitoring to find and fix problems; error reports are designed not to include record contents.

Cookies and analytics. Tara.OS uses cookies that are needed to keep you signed in. This website uses Google Analytics to understand which pages are useful, and the Health Check uses PostHog product analytics, which may store an identifier in your browser. You can block or delete these cookies in your browser without affecting how the site works.

4. How We Use Information

We use the information we are responsible for to: create and secure accounts; provide, support and improve Tara.OS; bill churches and keep financial records; produce and email Health Check results and benchmarks; respond to demo requests and questions; detect and prevent fraud, abuse and security incidents; and meet our legal obligations.

Health Check figures are compared against public charity filings published by the Canada Revenue Agency to show how a church compares with its peers. Your figures are not added to those benchmarks or shown to other churches. We may study answers in anonymized, aggregated form to understand what church leaders find hard, for example to write about it or decide what to build next.

We send marketing email only to people who have given us permission or where Canada’s Anti-Spam Legislation otherwise allows it. Every marketing email includes a working unsubscribe link, and we act on unsubscribe requests within 10 business days. Service messages, such as sign-in emails, invitations, billing notices and the Health Check report you asked for, are sent regardless of marketing preferences.

5. Church Data We Process for Churches

For church data, the church is responsible for the information and for having a lawful basis and any consents needed to collect it, including parental consent for children’s records. We act as the church’s service provider: we use church data only to provide, secure and support Tara.OS for that church, as the church instructs, or where the law requires.

We do not sell church data, use it for advertising, combine it across churches, or use it to train artificial intelligence models. Our staff access church data only when needed to support the church, keep the service secure, or meet a legal obligation.

Some church records can be sensitive, such as information that reveals religious affiliation, health or allergy notes, pastoral and care notes, giving history and children’s records. Tara.OS keeps each church’s data separate at the database level, lets churches limit who sees what by role, campus and field sensitivity, and hides pastoral and care notes from every role unless the church grants access.

6. Ask Tara and Artificial Intelligence

Ask Tara answers questions about a church’s own figures. It can only read information the person asking is already allowed to see, it shows the sources behind each answer, and it cannot change any record.

To answer a question, Ask Tara sends the question and the relevant figures to an AI model provider (currently Anthropic and OpenAI, which process data in the United States). Our agreements with these providers do not allow them to use church data, questions or answers to train their models, and neither do we.

AI answers can be wrong. Ask Tara is not financial, legal, tax or pastoral advice, and should not be used to make decisions about an individual. The Health Check score is calculated by a fixed formula and does not use AI.

7. Who We Share It With

We share personal information only with service providers that help us run our services, under contracts that require them to protect it and use it only for the work we ask of them. These include: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Anthropic and OpenAI (Ask Tara), Postmark and Resend (email delivery), Sentry (error monitoring), Google (Google sign-in, Google Analytics and the Google Workspace tools that receive demo requests) and PostHog (Health Check analytics). We will update this list when it changes; you can ask us for the current list at any time.

We may also disclose information if the law requires it, such as in response to a valid court order. Where we are allowed to, we will tell the affected church first so it can respond. If Taratone is involved in a merger, acquisition or sale of assets, information may transfer to the new owner, who must continue to protect it as this policy describes.

We do not sell or rent personal information.

8. Where Information Is Stored

We and our service providers store and process information in Canada and the United States, and some providers may process it in other countries. Information stored outside Canada, or outside Quebec for Quebec residents, is protected by contract but may be accessible to courts, law enforcement and national security authorities of those countries under their laws.

9. How Long We Keep It

Church data is kept for as long as the church keeps it in Tara.OS. Churches can archive and restore people, and delete or export their records. When a church cancels, it can export its data for 60 days, after which we delete it from our active systems. Backups are overwritten on their normal schedule, usually within a further 90 days.

Account and billing records are kept while the account is open and afterwards for as long as tax and accounting law requires, generally up to seven years. Health Check results and demo requests are kept for up to three years after your last interaction with us unless you ask us to delete them sooner. Security and audit logs are kept for as long as needed to protect the service and investigate incidents.

10. How We Protect It

We use safeguards suited to the sensitivity of the information, including encryption in transit, database-level separation between churches, role-based permissions, optional two-step verification, an audit log of important changes, and limited, need-to-know staff access. No system is perfectly secure, but we work to keep risk low. More detail is on our Security page.

If a security breach involving personal information creates a real risk of significant harm, we will notify affected churches without undue delay, notify individuals and the Office of the Privacy Commissioner of Canada (and Quebec’s Commission d’accès à l’information where required), and keep a record of every breach as the law requires.

11. Children

Our services are meant for adults who work or volunteer for churches. We do not knowingly collect personal information directly from children, and children may not have Tara.OS accounts. Churches may store records about children in their ministries; the church is responsible for obtaining a parent or guardian’s consent, and we process those records only on the church’s instructions.

12. Your Rights and Choices

Subject to the law, you can ask to see the personal information we hold about you, ask us to correct it, withdraw your consent to optional uses (such as marketing), or ask us to delete it. Quebec residents can also ask for their information in a structured, commonly used format. We will respond within 30 days, and we may need to confirm your identity first.

For information a church keeps in Tara.OS, please contact your church, which controls those records. We will help it respond.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or to your provincial privacy commissioner, such as Quebec’s Commission d’accès à l’information.

13. Contacting Us

Our Privacy Officer is responsible for how Taratone handles personal information. To make a request or ask a question, email hello@tara-platform.com with “Privacy” in the subject line.

14. Changes to This Policy

We may update this policy as our services change. If we make a significant change, we will tell churches by email or in Tara.OS at least 30 days before it takes effect, and ask for consent where the law requires it. The date at the top shows when the policy was last updated.