Privacy Policy

Rebirth in Christ ("we," "our," or "us") is a Texas-recognized 501(c)(3) non-profit organization. We built this service to help believers celebrate the anniversary of their baptism with a single, personal email each year. Your privacy matters to us, and this policy explains in plain language what information we collect, why, who helps us deliver the service, and the rights you have over your data.

If anything here is unclear, please reach us at legal@rebirthinchrist.com. We respond personally, not through an automated system.

1. Information We Collect

We collect only what we need to send your annual rebirthday card. That includes:

• First name and last name - so we can address the card to you personally.
• Email address - the one place we send your card each year.
• Phone number (optional) - provided only if you choose to share it; never required to use the service.
• Church affiliation (optional) - the name of the church you attend or were baptized at.
• Baptism date - the anniversary we send your card on.
• Card style preference - so the card you receive reflects your taste.

Sensitive religious data. Your baptism date and church affiliation are information about your religious beliefs and practice. Under the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code Ch. 541) and comparable state laws, this is classified as sensitive personal data. We treat it with enhanced care, we do not share it with third parties for any purpose other than delivering your card, and we never use it for profiling or advertising.

2. How We Collect Your Information

You give us your information in one of two ways:

• Directly from you - when you fill out the signup form on our website or update your preferences through a link in one of our emails.
• Through a Partner Church - when a church admin adds you to the service on your behalf. Partner Churches agree, under our Church Terms of Use, to obtain your consent before submitting your information and to only submit information they have the right to share.

We do not buy lists, scrape the web, or acquire your information from data brokers.

3. How We Use Your Information

We use your information for one purpose: sending you a personalized rebirthday card once a year on the anniversary of your baptism. We also use it to respond to you if you write to us, or to let you know about a meaningful change to this policy.

We do not use your data for marketing. We do not run paid advertising. We do not profile you, target you, or score you. We do not sell, trade, rent, or share your personal information with third parties for their own promotional purposes. Period.

4. Service Providers and Sub-Processors

To operate the service, we work with a small set of trusted service providers. Each one processes your data only for the specific purpose listed below, under contractual data-protection obligations.

• SendGrid (Twilio Inc.) - sends your rebirthday card email. SendGrid receives your name and email address at delivery time. SendGrid privacy policy.
• Netlify, Inc. - hosts our website and handles web traffic. Netlify processes standard server log data (IP address, request time, browser type) as part of normal web hosting. Netlify privacy policy.
• Supabase (via ForgeSystems) - stores your contact record, baptism date, and preferences. Data is encrypted at rest. ForgeSystems is the platform operator we use for our database and authentication infrastructure. Supabase privacy policy.
• Google Fonts (fonts.googleapis.com and fonts.gstatic.com) - loads the typefaces our pages use. Google receives standard web-request metadata (IP address, referring page) but no personal data that you submitted to us.
• Cloudflare CDN (cdnjs.cloudflare.com) - serves the icon font our pages use. Cloudflare receives standard web-request metadata but no personal data that you submitted to us.

We no longer use FormSubmit.co for form transport. Signup and update requests are handled directly by our own server.

5. How Long We Keep Your Information

We keep your information for as long as your church-member relationship with the service is active, plus 90 days after that relationship ends. This mirrors the 90-day window in our Church Terms of Use, section 11.

If you unsubscribe or ask us to delete your data, we delete it within 30 days, except for a minimal record (your email address and the fact that you unsubscribed) which we keep solely to honor your unsubscribe request and prevent accidental re-enrollment.

6. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct information that is wrong or out of date.
• Delete your information from our records.
• Unsubscribe from our emails at any time. Every email includes a one-click unsubscribe link.

To exercise any of these rights, email us at legal@rebirthinchrist.com. We will respond within 30 days. We may ask you to verify the email address associated with your record so we do not accidentally disclose or delete someone else's data.

7. Children's Data

Our service is not directed at children under 13, and we do not knowingly collect personal information directly from children.

If a Partner Church submits a minor's baptism date on the minor's behalf, the Partner Church is responsible for obtaining verifiable parental consent under the Children's Online Privacy Protection Act (COPPA, 16 CFR Part 312, §312.5) before submitting that information. Our Church Terms of Use, section 16, allocates this responsibility to the Partner Church.

If you believe we have inadvertently received information about a child under 13 without proper parental consent, please contact legal@rebirthinchrist.com and we will delete the information promptly.

8. How We Protect Your Information

We use commercially reasonable safeguards to protect your information, including:

• TLS encryption for all data in transit between your browser and our servers.
• Encryption at rest for the database where your information is stored.
• Role-based access controls limiting who on our team can see member data.
• Regular review of our security practices and service-provider agreements.

No method of electronic transmission or storage is perfectly secure, and we do not promise one. If a data breach ever affects your information, we will notify you in line with our obligations under the Texas Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code §521.053), which generally requires notification within 60 days of discovery, and Texas Attorney General notification if 250 or more Texans are affected.

9. International Visitors

Our service is operated from the United States and is intended for US residents. We do not market the service to the European Union, the United Kingdom, or other regions outside the US.

If you visit our website from outside the US, your information will be transferred to and processed in the United States. By using the service from outside the US, you understand that US privacy law - not the law of your home country - governs how your information is handled. If you have a specific concern about how your information would be treated under the law of your country, please contact us before signing up and we will do our best to address it.

10. Our Non-Profit Status

Rebirth in Christ is a Texas-recognized 501(c)(3) non-profit organization (Texas Taxpayer Number 32104321529). This status shapes our data practices:

• We do not sell personal data to any party, for any purpose, at any price.
• We do not run paid advertising on our website or in our emails.
• We do not profile members or use their data for behavioral advertising.
• We use member data solely to deliver the annual remembrance card you signed up for.

Donations are not currently accepted.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we do, we will:

• Update the "Last Updated" date at the top of this page.
• Post the revised policy at this URL.
• For material changes, send an email notice to the address on file at least 14 days before the change takes effect.

Your continued use of the service after any change takes effect constitutes your acceptance of the updated policy.

12. How to Contact Us

For any privacy question, request, or concern, please reach us at:

• Email: legal@rebirthinchrist.com
• Mailing address: Rebirth in Christ, 3410 Airway Boulevard, Amarillo, TX

We aim to respond to every privacy inquiry within 30 days.