I. Introduction

At Nucleus, LLC, an Idaho limited liability company (“we,” “us,” “our,” or the “Company”), we are committed to protecting your privacy. This Privacy Policy describes the types of information we collect about users of our websites and is designed to help you understand how we collect, use, and safeguard the information you provide to us and to assist you in making informed decisions when using our Services. This Privacy Policy also describes (1) the measures we take to safeguard the information we collect and (2) your rights and privileges concerning our collection, use, and disclosure of information about you.

This Privacy Policy applies to our websites and web applications accessed via https://www.nucleus.church, https://www.rebelgive.com, https://www.storytape.com, http://www.prochurchcertified.com, and all related domains and subdomains (e.g. https://app.nucleus.church, https://accounts.rebelgive.com) (collectively, the “Website” or “Websites”). These Websites are operated by Nucleus and provide information about our company and access to our online platforms designed to allow churches or non-profit organizations who subscribe to our services access to web building, form building, content, establishing a platform to accept monetary donations, communications, and all our other related services (together with the Website, the “Services”).

By using any part of the Services, you consent to the collection, use, and disclosure of your information as further outlined in this Privacy Policy.

Please note however that Nucleus shall not be the controller of any third-party data you may submit to our Service, (e.g., personal data you process within your church, CRMs, email communication, etc.) which may be integrated or shared with our Service upon your decision and subject to the Terms of Service. We process such information within the Service solely in the processor’s role and, depending on the scope of your activity, you may be the data controller.

Data Ownership and Rights For Congregants

Our customers, e.g., your church, retain all the rights to the data they store in our Services. We are considered a “Service Provider” as defined by the California Consumer Privacy Act (CCPA), or a “Subprocessor” as defined by the Global Data Protection Regulation (GDPR).

The data stored in our databases by users of our Services is entrusted to us for safekeeping, but it is not our data. We are legally and contractually obligated to hold certain standards to the data we process. Some of these obligations include:

to never retain, disclose, or use your church’s data for any purpose other than for providing our Services,

to provide appropriate levels of technical and organizational measures to ensure the security of the data we process,

and to assist our customers in fulfilling their legal obligations in regard to the data that we process on their behalf.

You may have legal rights in regard to how your church uses your personal information. These rights will vary depending on where you live, but generally, you have the right to:

access, correct, or request deletion of your personal data,

object to the processing of your personal data,

file a complaint with an applicable data protection authority,

where the processing of personal data is based on your consent, you have a right to withdraw consent at any time for future processing

To exercise these rights, contact your church. We will take all steps necessary to assist your church in satisfying your requests.

II. Changes to the Privacy Policy

The Services and our business may change from time to time. As a result, it may be necessary for Nucleus to make changes to this Privacy Policy. Nucleus reserves the right to update or modify this Privacy Policy at any time and from time to time. If you disagree with our revisions to the Privacy Policy, you may de-activate your account or discontinue the use of our Services. Please review this policy periodically, and especially before you provide us with any information through the Services. This Privacy Policy was last updated on the date indicated above. Your continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.

III. Information we Collect

We have access to and collect information that you voluntarily give us via email, webforms, our product or platforms, or other direct contact from you. We will only use your information to respond to you regarding the reason you contacted us or to help you use our products or services. We will not, and do not sell any information you provide actively or passively to any third party.

We also avoid any disclosure or sharing of your information to affiliates or third parties. In rare cases, some basic information about you or your church (or general information about the products or services you use from Nucleus) may be used or referenced in a third party tool (limited to only essential information like email, name, or similar identifying contact or church information) to help us recognize you or your account - simply so we can provide help for the products and services you use (e.g. customer service email or chat). Unless you ask us not to, we may also contact you via email in the future to tell you about our services, new products, or changes to this Privacy Policy or to provide you with informational or educational newsletters.

You may also provide us with special categories of personal data under the GDPR (also known as sensitive data) about yourself and/or third parties (like health information). Any information of this category would never be shared unless you explicitly requested that sharing or authorized it.

Our Services allow you to invite others to manage your account or provide information. Do not provide personal information about others (including by connecting your work email address to our Services) unless you are authorized or required to do so by applicable law or contract. Before supplying personal information about others, you and the person about whom you supply the information must review and consent to the Terms of Use and Privacy Policy of the Website. By submitting any personal information about others, you represent and warrant that you are authorized to do so, that you have made the Terms of Use and Privacy Policy available to the person about whom you supply the information, and that you have obtained that person's written consent to our Terms of Use and Privacy Policy. You agree to indemnify, defend and hold harmless Nucleus, our parents, subsidiaries, officers, directors, employees and agents for any failure by you to comply with this paragraph.

a. Personal Information and Business Information

“Personal Information” as used in this Privacy Policy is information that we directly associate with a specific person or entity, such as name, address, payment information (including payment card number, expiration date, cardholder name and CVV code), mobile telephone number, email address, gender, birthdate, other data from the Nucleus GivingFlow℠, PrayerFlow℠, other Nucleus custom Flows, or other areas of our applications and Services including Profile editors in application Dashboards.

The Personal Information you provide will vary based upon the context, and we will not collect your Personal Information unless you make it available. You are not required to provide Personal Information at any time while visiting the Website; however, you may be required to provide Personal Information to use certain Services. You may provide us with Personal Information by participating in online surveys, subscribing to newsletters and other recurring offerings through the Website, and in connection with other products, services, features, or requests made available through the Website or your church’s website.

If you provide “personal data” to the Services, you acknowledge and agree that such personal data may be transferred from your current location to the offices and servers of Nucleus and the authorized third parties referred to herein located in the United States and/or Canada.

Nucleus collects the Business Information (as defined below) necessary to enable us to respond to your requests for our Services and to send you information regarding our Services from time to time. We have defined “Business Information” as any information that identifies or may identify a company or an individual contact at a company or that allows others to contact a company or an individual contact at a company. When you visit our Website, you may be asked to submit information such as email address, company name, address, and phone number. In addition, we collect credit card and related payment information when you order Services online. Our information collection and use practices are described in more detail below.

b. Information that is Automatically Collected

When using the internet, if you interact with us through the Services, we may automatically or passively receive and store certain information from devices that you use to access the Services. Typically this information is provided to us by default, as a result of the way internet technologies work, and may include the type of internet browser or mobile device you’re using, the website from which you have come to the Services, your operating system, and may also include location data in the form of an IP address that identifies the city and state where you logged into the Services or your precise geo-location if you have permitted your device to provide that information. Nucleus may passively store such information itself or such information may be included in databases owned and maintained by Nucleus affiliates, agents or service providers.

c. Aggregated Data

Unlike most internet product or service providers, Nucleus does not conduct detailed research or analytics on its customer demographics, interests and behavior based on information we collect. We also do not aggregate data with the purpose of sharing or selling the information collected through the Services for research. We do not use customer data profile enrichment services, or sell any individual or aggregated customer data to any third parties or affiliates. Any information you provide as part of your use of the Website or Services is only used by our direct owners and employees, for the purposes of directly serving our customers and their needs.

d. Registration Information

To access information on the Website and use our Services, a user may be required to register with Nucleus. During registration a user is required to give certain information (such as name and email address). This information is used to contact you about the Services in which you have expressed interest, and provide a way for a user to log in to utilize other protected areas of our Services.

e. Cookies and Other Electronic Technologies

When you interact with the Services, we try to make that experience simple and meaningful. When you visit our Website, our web server may send a cookie to your computer or mobile device. Cookies are small pieces of information that are issued to your computer or mobile device when you visit a website or access or use a mobile application, and that store and sometimes track information about your use of the Website and Services. A number of cookies we use last only for the duration of your web or application session and expire when you close your browser or exit the application. Other cookies are used to remember you when you return to the Website and may last longer.

Some of the cookies used by the Website are set by us, and some are set by third parties who are delivering services on our behalf (e.g. customer service tools).

We may use cookies, and similar technologies to cookies, to collect information about your access and use of the Website and Services. For example, we may use cookies or other technologies that: (1) allow you to navigate and use all the features provided by our Website; (2) customize elements of the layout and/or content within the Website and remember that you have visited us before; (3) identify the number of unique visitors we receive; (4) allow us to provide you with a customized experience; and (5) inform us how you use the Website (including how long you spend on the Website) and where you have come to the Website from, so that we can improve the Website and learn which functions of the Website are most popular with users. As we adopt additional technologies, we may also gather additional information through other methods.

Most web and mobile device browsers automatically accept cookies but, if you prefer, you can change your browser to prevent that or to notify you each time a cookie is set. You may consult the “Help” section of your browser for more information (e.g., Internet Explorer; Google Chrome; Mozilla Firefox; or Apple Safari). You can also manage the use of Flash technologies, including cookies and local storage objects with the Flash management tools available at Adobe’s website. Please note that by blocking any or all cookies, you may lose access to certain features or offerings of the Services.

If you are accessing our Services through a mobile device, you can also update your privacy settings on your device by setting the “Limit Ad Tracking” and Diagnostics and Usage setting property located in the settings screen of your Apple iPhone or iPad, or by resetting your Android ID through apps that are available in the Play Store. You can also limit information collection by uninstalling the App on your device and you can use the standard uninstall process available as part of your device for this purpose.

f. Social Media Data

Our Website may contain links to our social media profiles. If you choose to interact with us on various third-party social media platforms such as Facebook, Twitter, Instagram, TikTok, LinkedIn, or other social media platforms, we may passively receive or have made available to us by you or the third-party social media platform, additional Personal Information from you. These may include your personally identifiable information list, the profile pictures of the contact list, education, work history, events, relationship status, likes, gender, location, URL, biography, any additional image or information the social media platform provides when connecting or interacting. We may also receive communications from you to us through those third-party social media platforms. Nucleus does not actively aggregate or explicitly collect this information, and we do not append it to your customer profile, your church, or your Nucleus account to build a profile on you. Please visit the privacy policy of the relevant social media platform to find out more information about your rights and choices as it relates to your use of those third-party platforms.

g. Third-Party Analytics

We do not employ any third-party analytics, behavior-tracking tools in our Services to collect data on our customers. This helps protect your church (and congregation’s) privacy and prevents unnecessary data aggregation by third-parties.

IV. How We Use the Information We Collect

Nucleus uses the information collected from the Services in a manner that is consistent with this Privacy Policy. If you provide information for a certain reason, we may use the information in connection with the reason for which it was provided. For instance, if you contact us by email, we will use the information you provide to answer your question or resolve your problem. Also, if you provide information about yourself, or have provided (or otherwise permitted the Services to access) any third-party data, we will use your information and any such third-party data to provide you with access to such services and to monitor your use of such services. For the purposes of the GDPR, we may use your information in the above ways as this is necessary for us to fulfill our obligations under our contract with you or in order to take steps at your request prior to entering into a contract.

a. Email Communication

Each marketing or promotional email we send will contain instructions on how to unsubscribe from that particular email list, should you decide not to receive future promotional emails. If you choose to opt-out of receiving promotional email communications from any Nucleus business unit, we may still periodically communicate with you via mail, telephone, or social media. Please allow up to 10 business days to be removed from our promotional email list.

We send notification and transactional emails about the Website and Services from time to time. Generally, you may not opt-out of these communications, which are not promotional in nature. If you do not wish to receive them, you may have the option to control some but not all of these notification preferences via your Nucleus account view of your account settings, or you have the option to deactivate and delete your account.

b. Information Collected through the Services

Nucleus may also use the information we collect through the Services to help us in providing the Services and support services, processing transactions, fulfilling requests for information, receiving and sending communications, updating email lists, to comply with state, local, federal or international laws, to enforce our Terms of Service and this Privacy Policy, as otherwise described in this Privacy Policy, or in assisting with other tasks from time to time. For the purposes of the GDPR, we may use your information in the above ways as this is necessary: (i) to fulfill our obligations under our contract with you or in order to take steps at your request prior to entering into a contract; (ii) for our legitimate interest to maintain our relationship with you or protect you and us against fraud; or (iii) to comply with legal obligations.

We may also use data collected through the Services to send communications relating to the Services, in accordance with applicable laws. For example, we may send periodic emails to registered users of the Services relating to their recent interactions with the Services, such as donating to a church, completing a Flow and submitting data, or preparing and providing a church with a GivingFlow℠ and updating the user’s “Control Center” or “Dashboard.” Also, if you use any feature of the Services permitting you to communicate with third parties (such as to refer a third party to the Services or to communicate with them regarding a campaign or a donation), you acknowledge and agree that you have the authority of the relevant third party for us to access and use the relevant third-party data and that you have notified these third parties and informed them how their information is collected and used by Nucleus to provide the Services. We reserve the right to identify you as the person who has made the referral in any messages that are sent to them. In addition to sending the foregoing communications, we may also send reminders or related messages to you and to third parties on your behalf from time to time where permitted by applicable law. In each case, any such communications sent to third parties using third-party data will provide a means to “opt-out” of receiving further communication of the same nature.

V. How We Share Data

Unless you give us your permission, we do not share data we collect from you with third parties, except as described below:

a. Third-Party Service Providers or Consultants

We may share data collected from you on the Nucleus Website with limited third-party service providers who receive your contact data on our behalf, so we can communicate with you about your account. These third-party service providers are limited to only accessing or using this data to provide services we use and must provide reasonable assurances that they will appropriately safeguard the data.

b. Compliance with Laws

We may disclose your data to a third party if (i) we believe that disclosure is reasonably necessary to comply with any applicable law, regulation, legal process or government request (including to meet national security or law enforcement requirements), (ii) to enforce our agreements and policies, including this Privacy Policy and any applicable Terms of Service, (iii) to protect the security or integrity of the Nucleus Site or our services, or (iv) to protect ourselves, our other customers, or the public from harm or illegal activities.

c. Affiliates

We may share data collected from you from the Services with our affiliates. We will only use the data as described in this policy.

d. Business Transfers

As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution, similar event, or steps taken in anticipation of such events (e.g., due diligence in a transaction), user information may be part of the transferred assets.

e. Church Organizers

If you donate to a church’s fundraising campaign, or submit any information to a church through our Services, we may share your name, email address and other information you’ve provided in connection with your donation or other activity with the church, who may contact you. By donating to the campaign, submitting a Flow, or participating in other online or website activity related to the church through our Services, you consent to our sharing the above information and to the church organizer contacting you.

f. Aggregated or De-Identified Information

We may aggregate and/or de-identify your information so that the information no longer relates to you individually. Our use and disclosures of such aggregated or de-identified information is not subject to this Privacy Policy and may be disclosed to others without limitation and for any purpose.

We do not share your data (including, but not limited to, the personal data of your end users or congregants) with third parties for their direct marketing purposes.

VI. Unsolicited Information

Please be advised that some information you provide may be publicly accessible, such as information posted in forums or comment sections. We may also collect information through customer support communications, your communication to us of ideas for new products or modifications to existing products, and other unsolicited submissions (collectively, with publicly-accessible information, “Unsolicited Information”). By sending us Unsolicited Information, you (a) agree that we are under no obligation of confidentiality, express or implied, with respect to the Unsolicited Information, (b) acknowledge that we may have something similar to the Unsolicited Information already under consideration or in development, (c) grant us an irrevocable, non-exclusive, royalty-free, perpetual, worldwide license to use, modify, prepare derivative works, publish, distribute and sublicense the Unsolicited Information, and (iv) irrevocably waive, and cause to be waived, against Nucleus and its users any claims and assertions of any moral rights contained in such Unsolicited Information. This Unsolicited Information section shall survive any termination of your account or the Services. This Privacy Policy otherwise does not apply to any information collected by Nucleus other than information collected through the Services.

VII. Children

Our Services are not designed for use by individuals under the age of 16. If you are under the age of 16, please do not use the Services or submit any information through the Services. If you have reason to believe that a child under the age of 16 has provided personal information to Nucleus through the Services, please contact us at hello@nucleus.church, and we will delete that information from our databases to the extent required by law.

VIII. Links to Other Websites

This Privacy Policy applies only to the Services. The Services may contain links to other websites not operated or controlled by Nucleus (“Third-Party Sites”). The policies and procedures we described here do not apply to Third-Party Sites. The links from the Services do not imply that Nucleus endorses or has reviewed the Third-Party Sites. We suggest contacting those sites directly for information on their respective privacy policies.

IX. Your Privacy Rights and Retention of Your Information

We may retain your information for a period of time consistent with the original purpose of collection. For instance, we may retain your information during the time in which you have an account to use our Website or Services and for a reasonable period of time afterward. We also may retain your information while it is needed for us to pursue our legitimate business interests, conduct audits, comply with our legal obligations, resolve disputes and enforce our agreements.

You may opt out of any future contacts from us at any time. Additionally, if the collection of your personal data was based on your consent, you have the right to revoke that consent at any time. Be aware that by revoking consent, you may lose access to the Services you previously opted to use.

You may request to review, correct, delete, or otherwise modify any of the personal information that you have previously provided to us through the Website and/or Services.

You may access and correct certain information about you by visiting the “Control Center” or “Dashboard” portion of our Services.

XII. How to Contact Us

Nucleus commits to resolve complaints about our collection or use of your personal information. Nucleus takes its users’ privacy concerns seriously, and in every way, we are committed to limiting access to your personal or account information and protecting your data.

If you believe that Nucleus has not complied with this Privacy Policy with respect to your personal information, you should first contact us at Nucleus by emailing us at hello@nucleus.church, or by writing to the Nucleus Legal Department at the following address:

Nucleus, LLC

Attn: Legal Department

212 W. Ironwood Drive, Suite D471

Coeur D Alene, ID. 83814

Please note that Nucleus is not responsible for the content or privacy practices of non-Nucleus websites to which this Website or any other Nucleus website may link. Also, Nucleus is not responsible for the privacy practices of its customers or users of its customer websites. You should review the additional privacy policy of the customer site before using the site.