Privacy Policy

1. Introduction

Grace Unworthy Ministries, LLC ("we," "our," or "us") is the data controller and legal entity responsible for multiple web properties and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit any of our websites, use our services, create an account, or interact with our content.

By using our websites and services, you consent to the data practices described in this Privacy Policy. If you do not agree with the data practices described, please do not use our services.

1.1 Data Controller Information

Grace Unworthy Ministries, LLC is the data controller responsible for your personal information across all of our web properties. For data protection inquiries, our Data Protection Officer can be contacted at:

1.2 Content Notice

Our website and services are not directed to children under the age of 13. Please note that our content may cover mature topics including but not limited to sex, finance, marriage, divorce, and other sensitive subjects that may not be suitable for all ages. While our content is educational and faith-based, parents and guardians should be aware of these topics when determining if our content is appropriate for young adults in their care. For important disclaimers about our content, please see our Disclaimers page.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Register for an account using email and password
• Sign in or register using third-party authentication services (Google, Facebook, Instagram, Twitter/X)
• Enroll in courses or purchase products
• Subscribe to our newsletter or email updates
• Contact us through contact forms or support requests
• Participate in surveys, forums, or promotional activities
• Interact with our social media accounts
• Submit user-generated content, comments, or reviews

This information may include:

• Name and email address
• Username and password (encrypted)
• Profile photo or avatar
• Mailing address and phone number
• Payment information (processed securely through third-party payment processors)
• Course progress and assessment responses
• Any other information you choose to provide

2.2 Information from Third-Party Authentication Services

When you sign in or register using third-party authentication services, we receive certain information from those services. The information we receive depends on your privacy settings with the third-party service and their terms of service.

We use this information solely to create and manage your account on our platform. We do not post to your social media accounts without your explicit permission, and we do not access any additional information beyond what is necessary for authentication.

2.3 Automatically Collected Information

When you visit our websites, we automatically collect certain information about your device and usage, including:

• IP address and device identifiers
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• Click-through and navigation patterns
• Cookies and similar tracking technologies

2.4 Course and Learning Data

When you participate in our courses and educational content, we collect:

• Course enrollment and completion status
• Lesson progress and time spent on lessons
• Quiz and assessment responses and scores
• Achievements and points earned
• Course feedback and ratings

3. How We Use Your Information

We use the information we collect for various purposes, including:

• To create and manage your user account
• To authenticate your identity and provide secure access
• To provide, maintain, and improve our services and website functionality
• To process transactions, enrollments, and send related information
• To track your course progress and provide personalized learning experiences
• To send newsletters, course updates, and promotional communications (with your consent)
• To respond to your inquiries and provide customer support
• To detect, prevent, and address technical issues, fraud, and security threats
• To analyze usage patterns and improve user experience
• To send administrative information such as updates to our terms and policies
• To comply with legal obligations and enforce our Terms of Service
• To conduct research and analytics to improve our educational content

3.1 Artificial Intelligence (AI) Usage

We use artificial intelligence and machine learning technologies to enhance your experience and improve our services. AI is used for:

• Content Generation: Creating and optimizing blog posts, articles, and other educational content based on our podcast episodes and source materials
• Traffic Monitoring: Analyzing user behavior patterns to understand how visitors interact with our content
• Ad Optimization: Improving the relevance and performance of advertisements and promotional content
• User Experience Improvements: Personalizing content recommendations and enhancing site navigation based on user preferences

AI-generated content is reviewed and edited by our team to ensure accuracy, quality, and alignment with our faith-based values. No personal data is used to train AI models; AI is only used to process aggregated analytics and generate content from our own source materials.

3.2 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned and the context in which we collect it. We process your data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., newsletter subscriptions)
• Contract: Processing is necessary for a contract we have with you (e.g., course enrollment, purchases)
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is in our legitimate interests and does not override your rights (e.g., analytics, security)

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We share information with trusted third-party service providers who assist us in operating our websites, conducting business, or serving our users (e.g., payment processors, email service providers, hosting providers, analytics providers), provided they agree to keep this information confidential.
• Authentication Services: When you use third-party authentication (Google, Facebook, Instagram, Twitter/X), limited information is shared with those services solely for authentication purposes according to their respective privacy policies.
• Legal Requirements: We may disclose information if required by law, court order, or in response to valid requests by public authorities (e.g., law enforcement, national security requirements).
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any such change.
• Protection of Rights: We may disclose information when we believe it is necessary to protect our rights, property, or safety, or that of our users or others.
• With Your Consent: We may share information with third parties when you have given us explicit consent to do so.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website. For detailed information about the cookies we use, please see our Cookie Policy.

5.1 Third-Party Tracking and Analytics Services

We use various third-party services to track, analyze, and optimize our website performance and marketing efforts. These services may collect information about your browsing behavior, including pages visited, time spent on site, purchases made, and other interactions. The third-party services we use include:

These tracking technologies allow us to understand how visitors use our site, measure the effectiveness of our marketing campaigns, and improve your experience. All tracking includes purchases and transactions to help us optimize our offerings and understand what content resonates with our audience.

Each third-party service has its own privacy policy governing how they collect and process data. We recommend reviewing their respective privacy policies to understand their practices.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest (SSL/TLS)
• Secure password hashing using industry-standard algorithms
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements for our systems
• Regular backups of data
• Employee training on data protection and privacy

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

6.1 Data Storage and Location

Your data is stored on secure cloud-based infrastructure with enterprise-grade security measures:

• Cloud Providers: We use Cloudflare and Google Cloud Platform for data storage and content delivery
• Replication: Data is replicated across multiple servers to ensure reliability and availability
• Primary Location: Our primary data storage location is in the Eastern United States
• International Transfers: If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States where our servers are located

7. Data Retention Policy

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

For other types of data:

• Account Information: Retained for the duration of your account plus additional time as required by law or legitimate business purposes
• Marketing Communications: Retained until you unsubscribe or request deletion
• Analytics Data: Typically retained in aggregated form indefinitely for business intelligence and improvement purposes
• Support Communications: Retained as needed for quality assurance and to resolve ongoing issues

Unless legally required to delete data or you exercise your right to deletion (where applicable), we may retain your information indefinitely. When you request deletion of your data, we will delete or anonymize your information, except for purchase records and data we are legally required to retain.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. We are committed to respecting these rights and providing you with control over your data.

8.1 GDPR Rights (European Economic Area)

If you are located in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

• Right to Access: You have the right to request copies of your personal data and information about how we process it
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete
• Right to Erasure: You have the right to request that we delete your personal data, under certain conditions. Please note that purchase and order records will be retained permanently for legal and business purposes
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions
• Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions
• Right to Object: You have the right to object to our processing of your personal data, under certain conditions
• Right to Withdraw Consent: Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your country if you believe we have not complied with data protection laws

8.2 CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell
• Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions. Purchase and order records will be retained permanently
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. We do not sell your personal information in the traditional sense, but some data sharing with advertising partners may qualify as a "sale" under CCPA
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights

Do Not Sell My Personal Information: To opt-out of potential data sharing that may qualify as a sale under CCPA, you can adjust your cookie preferences or contact us directly.

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Protection Officer:

You may also visit our Data Deletion Policy page for information on requesting account and data deletion. We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

8.4 Email Preferences

You may opt out of receiving promotional emails by clicking the "unsubscribe" link at the bottom of any promotional email or by updating your email preferences in your account settings. Please note that we may still send you transactional emails related to your account and services.

9. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information from our servers.

If you are between 13 and 18 years of age, you may only use our services with the involvement, supervision, and approval of a parent or legal guardian.

10. Third-Party Links and Services

Our websites may contain links to third-party websites, plugins, and applications. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to review the privacy policies of any third-party sites you visit.

This includes the privacy policies of third-party authentication services (Google, Facebook, Instagram, Twitter/X) if you choose to use those services to sign in.

11. International Data Transfers

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal data, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us using the information below.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Effective Date" at the top of this Privacy Policy
• Sending you an email notification (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to report a privacy concern, please contact us:

For data deletion requests, please visit: Data Deletion Policy