Terms of Service

gr8mart churches ("the Service") is a website and church-management service at churches.gr8mart.ai, operated by gr8mart ("we", "us"). "You" means the church or ministry that creates an account, and the people it invites to manage that account ("staff").

By creating an account or using the Service, you agree to these terms on behalf of your church. If you do not have authority to do that, please do not sign up.

• You must be at least 18 years old and able to act for your church.
• Keep your sign-in details secure and tell us at once if you think someone else has used your account.
• You choose who joins your account as staff and which role they have (admin, editor or viewer). You are responsible for what your staff do in the Service.
• Give us accurate information, and keep your contact email current so we can reach you about your account.

The Service lets you build and publish a church website and manage pages, events, sermons, groups, messages, member accounts and related records.

We improve the Service over time, so features may change. If we remove a feature that is an important part of a paid plan, we will tell you in advance. We may offer early ("beta") features that are clearly marked and may not always work as expected.

• The Free plan costs nothing. Paid plans (currently Pro and Premium) are billed monthly in advance through our payment provider, Stripe, and renew automatically until cancelled.
• You can cancel at any time from your dashboard. Cancellation takes effect at the end of the current billing period, after which your account returns to the Free plan and features beyond it stop working.
• Fees are non-refundable except where the law requires otherwise.
• We will give you at least 30 days' notice of any price change, which applies from your next billing period after the notice.
• Prices do not include taxes, which may be added where required.

Your church owns everything it puts into the Service: text, photos, logos, sermons, events and records ("your content").

You give us permission to store, copy, display and transmit your content only as needed to run the Service for you (for example, to show your website to visitors and to send the emails you ask us to send). This permission ends when your content is deleted, except for copies kept for a short time in backups.

You confirm that you have the right to publish your content, including photos of people and any music, video or images you use.

You agree not to use the Service to:

• break the law, or help anyone else to;
• publish content that is hateful, harassing, threatening, sexually explicit, or that encourages violence or self-harm;
• impersonate another church, organization or person, or mislead people about who you are;
• raise money deceptively, or for purposes other than those you describe;
• send spam, or collect people's personal information without a lawful basis;
• upload malware, try to break into the Service or other accounts, or interfere with its operation;
• infringe anyone's copyright, trademark or other rights.

If we believe an account breaks these rules, we may remove content or suspend the account. Where reasonable, we will tell you why and give you a chance to put it right first.

Your church decides what information it collects about the people it serves and why: for example contact forms, prayer requests, RSVPs, member accounts, household and children's details, small group rosters and attendance ("congregation data"). For congregation data, your church is the controller and we are your processor. These data processing terms apply:

• Instructions. We process congregation data only to provide the Service and on your documented instructions, which are these terms and your use of the Service's settings and features, unless the law requires otherwise (in which case we will tell you, if allowed).
• Confidentiality. Everyone at gr8mart who can access congregation data is bound by confidentiality, and access is limited to what is needed to run and support the Service.
• Security. We use appropriate technical and organizational measures, described in our Privacy Policy, including encryption in transit, hashed passwords, access controls and two-factor sign-in for our own staff.
• Sub-processors. You authorize the service providers listed in our Privacy Policy. We will give notice of any new sub-processor at least 14 days before it starts, and you may object; if we cannot reasonably address the objection, you may close your account. We remain responsible for our sub-processors.
• Helping you. The Service gives you tools to find, correct, export and delete people's information, and members can download or delete their own data. We will help you respond to requests from individuals and to meet your security, breach-notification and assessment obligations, as far as is reasonable.
• Breaches. We will tell you without undue delay, and in any event within 72 hours, after becoming aware of a personal data breach affecting your congregation data, with the information you need to meet your own obligations.
• Deletion. When your account is closed, we delete congregation data within 30 days, apart from copies in backups that are overwritten within a further 30 days. You can export your data before closing.
• Audit. We will make available the information reasonably needed to show that we meet these terms, and allow for reasonable audits, normally by providing answers to written questions or relevant security documentation.
• International transfers. Where congregation data from the UK, EU or other regions with transfer rules is processed in the United States, we rely on the appropriate safeguards, such as the EU Standard Contractual Clauses and the UK Addendum, which are incorporated into these terms by reference where needed.

Your church is responsible for having a lawful basis to collect congregation data, for telling people how it is used (the Service provides an editable privacy notice for your website), and for any consent required, including a parent or guardian's consent before recording information about children.

Members who sign in on your website do so as part of your church. You decide whether to approve their accounts. Visitors who use your forms are sharing their information with your church. We do not contact your members or visitors for our own purposes, except to send the emails the Service needs (such as sign-in links and RSVP confirmations).

The Service works with other services, such as Stripe for payments and YouTube, Vimeo and Google Maps for videos and maps you choose to show. Their own terms and privacy policies apply to how they work, and we are not responsible for them.

We work to keep the Service available and secure, but we cannot promise it will always be available or free of errors. We may need to pause it for maintenance; where we can, we will do that at quiet times. You can contact us at adr@gr8mart.ai for help.

• You can close your account at any time by contacting us. Please export anything you want to keep first.
• We may suspend or close an account that seriously or repeatedly breaks these terms, puts others at risk, or where the law requires us to. Except in urgent cases, we will give notice and a reasonable chance to export your data.
• While an account is suspended, its website, forms and member sign-in are offline, and its staff can still sign in to see the reason.
• Sections 5, 7 (deletion), 12, 13, 14 and 15 continue to apply after an account closes.

The Service is provided "as is" and "as available". To the fullest extent the law allows, we disclaim all warranties, express or implied, including fitness for a particular purpose and non-infringement. Nothing in these terms limits rights you have under consumer law that cannot be limited.

To the fullest extent the law allows, we are not liable for indirect, incidental, special or consequential losses, or for lost profits, revenue, donations or data. Our total liability for all claims relating to the Service is limited to the greater of the fees your church paid us in the 12 months before the claim, or US $100. These limits do not apply to liability that cannot be limited by law, such as for fraud.

Your church agrees to cover reasonable losses and costs we incur from a claim by a third party arising from your content, or from your breach of these terms or of the law (including privacy law) in your use of the Service.

These terms are governed by the laws of the United States and of the state in which gr8mart is registered, without regard to conflict-of-law rules. Disputes will be heard in the courts of that state, unless the law where your church is based gives you the right to bring a claim locally. Before bringing a claim, please contact us so we can try to resolve it informally.

We may update these terms. For changes that materially affect you, we will give at least 30 days' notice by email and in your dashboard before they take effect. If you do not agree, you may close your account before then. The version you accepted is recorded with your account.

Questions about these terms: adr@gr8mart.ai.