Privacy & Cookie Policy

Last updated: May 2026

This policy covers both songstack.church and app.songstack.church (together, “the Service”), operated by ninefootone creative ltd, a company registered in England and Wales.

1. What data we collect

When you create an account we collect your name and email address via Clerk, our authentication provider. If you are part of a church organisation on the Service, we also store the songs, plans, and files you upload.

We collect anonymised usage data (pages visited, features used) via Google Analytics to help us improve the Service. No personally identifiable information is sent to Google Analytics.

If you opt in during sign-up or via the feedback form, we may send you occasional product updates by email. You can unsubscribe at any time via your settings page or the unsubscribe link in any email.

2. How we use your data

We do not sell your data to third parties.

3. Data storage & security

Your account data is stored securely by Clerk. Song and plan data is stored in a PostgreSQL database hosted on Railway. Uploaded files are stored in Cloudflare R2. All data is encrypted in transit via HTTPS.

4. Data retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data by emailing hello@songstack.church. We will process deletion requests within 30 days.

5. Your rights (UK GDPR)

As a UK resident you have the right to access, correct, or erase your personal data; to restrict or object to its processing; and to data portability. To exercise any of these rights, contact us at hello@songstack.church.

6. Cookies

We use the following cookies:

You can withdraw analytics cookie consent at any time by clicking “Cookie settings” in the footer.

7. Third-party services

8. Contact

For any privacy-related questions, contact us at hello@songstack.church or write to ninefootone creative ltd, England, UK.