Information we collect
Account and contact details. Your name, email address, authentication information, and messages to us.
Application and business details. Ownership information, faith affirmations, descriptions, categories, locations, contact links, photos, and other profile content you submit.
Community content. Reviews, ratings, reports, and related moderation records.
Payment records. Stripe processes checkout and card information. We receive transaction, subscription, customer, and billing-status details, but we do not store full payment-card numbers.
Technical information. Standard service logs may include IP address, browser or device information, pages visited, timestamps, and security events.
How we use information
- Provide accounts, applications, billing, public listings, search, reviews, and support.
- Manually review businesses and faith affirmations before publication.
- Communicate about an application, membership, review, refund, or policy change.
- Prevent fraud, enforce our terms, protect the community, and improve GraceScout.
- Measure whether GraceScout advertising leads to account registrations or purchases.
- Meet legal, accounting, tax, and regulatory obligations.
What becomes public
Approved business profiles are public and may be indexed by search engines. Public fields can include the business name, description, category, location, contact details, links, photos, approval status, and reviews. Do not submit sensitive personal information for a public profile. Application notes, payment details, and private account information are not intended for public display.
When we share information
We share information with service providers that help operate GraceScout, including hosting, database, authentication, storage, email, payment, security, advertising measurement, and support providers. These currently include services such as Vercel, Supabase, Stripe, and Meta. We may also disclose information when required by law, to protect rights or safety, with your direction, or as part of a merger, financing, or sale of the service. We do not sell personal information for money. Some laws may treat advertising-related disclosures as a sale or sharing for cross-context behavioral advertising; we treat recognized browser opt-out signals as a request to stop that disclosure.
Analytics and session replay
We use Google Analytics and Microsoft Clarity to understand how visitors find and move through GraceScout, measure conversions, troubleshoot problems, and improve advertising and site performance. These services may process page visits, referring URLs, clicks or taps, scrolling, device and browser information, approximate location derived from IP address, performance data, and similar usage information. Clarity can also produce heatmaps and reconstructed session replays. Form inputs and dropdowns are masked, and we additionally mask private account, onboarding, checkout, and administrative content. These providers may use cookies and similar technologies where permitted. Learn more in the Google Privacy Policy and Microsoft Privacy Statement.
Advertising measurement
We use Meta's Conversions API to understand whether a GraceScout ad leads to an account registration or a verified purchase. We may send Meta a one-way hashed email address and account or application identifier, along with an ad click identifier, IP address, browser information, event time, page URL, and purchase value and currency. We do not send faith affirmations, application answers, business descriptions, payment-card numbers, or review content to Meta. These events are sent from our server and are used for attribution, reporting, and ad delivery. We skip this advertising measurement when a request carries a Global Privacy Control or Do Not Track signal.
Cookies and similar technology
GraceScout uses cookies or local storage needed for secure sign-in, session continuity, preferences, and service protection. When someone arrives from a Meta ad, we may also store Meta's first-party click identifier for up to 90 days so a later registration or purchase can be attributed to that ad. We do not load a Meta browser pixel. We will provide any additional notice or choices required by applicable law.
Retention and security
We retain information while an account or membership is active and as reasonably needed for support, fraud prevention, disputes, legal compliance, and legitimate business records. We use administrative and technical safeguards designed to protect information, but no internet service can promise absolute security.
Your choices and rights
You may update profile information through your account and cancel an annual membership through the available billing controls. You may also ask to access, correct, delete, or receive a copy of personal information. We will honor rights provided by applicable law after verifying the request, subject to lawful retention exceptions. Public search-engine copies may take time to refresh after information is removed from GraceScout.
Children
GraceScout is not directed to children under 13, and we do not knowingly collect personal information from them. Paid memberships and business applications are for adults authorized to act for a business.
Updates and contact
We may update this policy as GraceScout changes. We will post the revised date and provide additional notice when required. For a privacy request or question, email hello@intuicodigital.com.