Privacy Policy

This Privacy Policy describes how IwasuBrief ("we," "us," or "our") collects, uses, stores, and shares information when you use any of our products and services, including:

• IwasuBrief — our core sermon intelligence platform (web application at iwasubrief.ai)
• IwasuAssist — our WhatsApp and web chat assistant for congregation members
• IwasuStudio / Media Studio — our sermon processing and content generation tools

By accessing or using any of these services, you agree to the practices described in this policy. If you do not agree, please discontinue use.

1. Who We Are

IwasuBrief is a faith-tech platform that helps churches and ministries preserve, structure, and extend their sermon content through AI-powered transcription, summarization, and engagement tools. Our services are offered to church organizations ("Organizations") and, through IwasuAssist, to their congregation members ("End Users").

2. Information We Collect

2.1 Information You Provide

• Account information: name, email address, and password when you register an Organization account.
• Sermon content: audio files, video files, YouTube URLs, or transcript files you upload for processing.
• Profile and organization data: church name, speaker names, sermon metadata (date, title, series), and template preferences.
• Template files: custom document templates you upload for sermon output formatting.
• Communications: messages you send through IwasuAssist (WhatsApp or web chat widget) and any feedback or support requests.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, job status events, and timestamps — collected via server logs.
• Device and browser data: IP address, browser type, operating system, and referring URL.
• Session tokens: authentication tokens stored in browser memory (not persistent cookies) to maintain your login session.
• WhatsApp metadata: phone numbers and message timestamps when you interact with IwasuAssist via WhatsApp, as provided by the Meta WhatsApp Business API.

2.3 Information from Third Parties

• YouTube: when you provide a YouTube URL, we retrieve publicly available captions or pass the URL to Google's AI infrastructure for transcription. No YouTube account credentials are collected.
• Meta / WhatsApp: when you message IwasuAssist via WhatsApp, Meta transmits your message content and sender phone number to us via their Cloud API webhook.
• Google Firebase: we use Firebase Authentication to manage Organization account sign-in and verify identity tokens.

3. How We Use Your Information

• To transcribe, summarize, and generate sermon content outputs on your behalf.
• To operate and maintain IwasuAssist chat functionality for your congregation.
• To authenticate users and maintain secure sessions.
• To deliver processed sermon materials and notifications by email (via SendGrid).
• To store sermon transcripts and documents in your organization's knowledge corpus for AI-powered search and retrieval (Vertex AI RAG).
• To provide customer support and respond to inquiries.
• To improve our services through aggregated, de-identified usage analytics.
• To comply with legal obligations.

We do not use your sermon content to train AI models or share it with third parties for their own commercial purposes.

4. IwasuAssist — WhatsApp & Chat

IwasuAssist enables congregation members to interact with your church's sermon content through conversational AI. When using IwasuAssist:

• Messages sent via WhatsApp are received through the Meta WhatsApp Business API and processed by our AI agent to generate responses. Message content is not retained beyond what is needed to produce a reply, unless required for session continuity.
• Phone numbers are used only to route replies back to the sender and are not shared with other parties.
• Web widget interactions are scoped to the embedding organization's knowledge base. No personally identifiable information is required to use the widget.
• IwasuAssist is deployed by individual churches. If you have questions about how your church uses the assistant, contact them directly.

5. IwasuStudio / Media Studio

IwasuStudio (also referred to as Media Studio) is our internal content generation module. It processes uploaded or downloaded sermon media to produce:

• Full transcripts and timestamped versions
• Summaries, sermon points, scripture references, and devotional content
• Auto-generated video clips (for video uploads)

Uploaded media files are stored temporarily in Google Cloud Storage for processing, then retained in your organization's private cloud storage bucket. We do not access or analyze your sermon content beyond what is necessary to perform the requested processing.

6. Data Storage and Security

• All data is stored on Google Cloud Platform infrastructure (Cloud Storage, Firestore, Vertex AI) in secure, access-controlled environments.
• Data in transit is encrypted using TLS. Data at rest is encrypted using AES-256 via Google's default encryption.
• Organization accounts are protected by Firebase Authentication. We recommend strong passwords and two-factor authentication where available.
• Access to sermon data is restricted to the Organization that uploaded it. We do not share data between organizations.
• While we implement reasonable security measures, no system is completely secure. We encourage you to report any suspected vulnerabilities to policy@iwasubrief.org.

7. Data Sharing and Disclosure

We share information only in these circumstances:

• Service providers: Google Cloud Platform (hosting, AI, storage), Firebase (authentication), SendGrid (email), Meta (WhatsApp Business API). Each is bound by their own data processing agreements.
• Legal requirements: if required by law, court order, or to protect the rights, safety, and property of IwasuBrief or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, in which case users will be notified in advance.

We do not sell, rent, or trade your personal information to third parties.

8. Data Retention

• Organization account data is retained for as long as the account is active. Upon account deletion, we will delete or de-identify your data within 30 days, subject to legal hold obligations.
• Sermon media files uploaded for processing are retained in cloud storage until explicitly deleted by the Organization.
• Processed outputs (transcripts, summaries, clips) are retained in your organization's corpus until you delete them through the platform.
• WhatsApp message content is not retained beyond the session needed to process a reply.
• Server logs may be retained for up to 90 days for security and debugging purposes.

9. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data. Note that some data may be retained for legal or audit purposes.
• Portability: request a machine-readable export of your data.
• Objection / restriction: object to or request restriction of certain processing activities.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, email policy@iwasubrief.org or visit our Data Deletion Request page for step-by-step instructions. We will respond within 30 days.

10. Children's Privacy

IwasuBrief's services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Third-Party Links and Integrations

Our platform may link to or integrate with third-party services (e.g., YouTube, WhatsApp/Meta). This policy does not cover the privacy practices of those services. We encourage you to review the privacy policies of any third-party services you use in connection with IwasuBrief.

12. Meta Platform Compliance

IwasuAssist uses the Meta WhatsApp Business API. Our use of this platform complies with WhatsApp's Business Policy and Meta's Platform Terms. Specifically:

• We only message users who have initiated contact or explicitly opted in to receive messages from the church through IwasuAssist.
• We do not use WhatsApp data to target advertising or engage in unauthorized data collection.
• Users may opt out of WhatsApp communications at any time by replying "STOP" or contacting their church administrator.

13. International Data Transfers

Our services are operated from the United States using Google Cloud infrastructure. If you are accessing our services from outside the United States, your information may be transferred to and processed in the United States or other countries where Google Cloud has data centers. By using our services, you consent to this transfer.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify Organization account holders by email. Continued use of our services after the effective date constitutes acceptance of the revised policy.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:

• Email: policy@iwasubrief.org
• Website: https://iwasubrief.ai