Privacy Policy

MV Connect ("MV Connect," "we," "us," or "our") operates the MV Connect platform (the "Service"), a digital platform that creates and hosts profile pages for churches, ministries, businesses, creators, barbers, and food brands. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service or interact with profiles hosted on our platform.

1. Information We Collect

1.1 Profile Owner Information

When you create a profile on MV Connect, we collect:

• Account email address and password (hashed)
• Full name and display name
• Phone number (if provided)
• Profile content (bio, page description, church information, service times)
• Social media links and external URLs
• Avatar images and uploaded media (photos, videos)
• Payment setup information (processed via Stripe or Base44 Payments)
• Booking configuration and calendar settings
• Notification preferences and OneSignal push subscription tokens

1.2 Visitor Information

When a visitor interacts with a profile, we collect:

• IP address (used for anonymized analytics only)
• Browser type, device type, and operating system
• Page view data and click interactions
• Geographic location (city/country level, derived from IP)
• Contact form submissions (name, email, phone, message)
• Chat messages sent to profile owners
• Booking requests (name, phone, email, service type, preferred date/time)
• Event registration submissions (name, contact details, church information)
• Prayer request submissions
• Connect form submissions

1.3 Automatically Collected Data

• Analytics cookies and tracking pixels
• Link click data and visitor journey data
• Session duration and engagement metrics
• NFC tap data (when an MV ONE TOUCH PRO product is used)

2. How We Use Your Information

• To create, maintain, and deliver your MV Connect profile
• To process bookings, event registrations, and contact form submissions
• To deliver chat messages from visitors to profile owners
• To send push notifications via OneSignal (to profile owners who opt in)
• To send email notifications (contact form submissions, booking reminders)
• To process payments and manage subscriptions via Stripe or Base44 Payments
• To provide analytics to profile owners about visitor engagement
• To improve our Service, fix bugs, and develop new features
• To comply with legal obligations and protect against fraud
• To send service announcements, updates, and support communications

2A. Lawful Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar privacy laws, MV Connect processes your personal information under one or more of the following legal bases:

• Performance of a contract, including providing your account, profile pages, bookings, messaging, analytics, and other requested services.
• Your consent, where required, including optional notifications and marketing communications.
• Compliance with legal obligations, including accounting, taxation, fraud prevention, and regulatory requirements.
• Legitimate interests, including improving platform performance, preventing abuse, securing the Service, and developing new features.

Where processing is based on consent, you may withdraw your consent at any time without affecting processing already performed.

2B. Profile Owner Responsibilities

MV Connect provides technology that allows profile owners to create public profile pages and receive information submitted by visitors.

Profile owners are responsible for ensuring that they have the legal right to collect, use, store, and process information submitted through their profile pages.

This includes, but is not limited to:

• Contact forms
• Booking requests
• Event registrations
• Chat messages
• Prayer requests
• Donations
• Service inquiries
• Custom forms

Profile owners are responsible for complying with applicable privacy laws in their jurisdiction when using these features.

3. Information We Share

We do not sell your personal information. We share information with the following third-party service providers:

3.1 Payment Processing

Stripe and Base44 Payments process subscription and one-time payments. Payment card information is handled entirely by these providers and never stored on our servers. Stripe and Base44 Payments are PCI-DSS compliant.

3.2 Push Notifications

OneSignal is used to deliver push notifications to profile owners. Your OneSignal subscription token and email-based external ID are shared with OneSignal for the purpose of delivering notifications.

You may disable push notifications at any time through your device, browser, or operating system notification settings.

3.3 Email Delivery

Resend is used to send transactional emails (contact form notifications, booking confirmations, chat message alerts). Resend receives the recipient email address and message content.

3.4 Infrastructure

Our platform is hosted on Base44, which provides the database, authentication, file storage, and backend infrastructure. File uploads (images, videos) are stored on Base44's managed storage.

3.5 AI Services

Certain optional features of MV Connect use third-party artificial intelligence providers to generate educational, informational, or productivity-related content.

Only the information submitted as part of the user's request is transmitted to these providers when necessary to generate a response.

Users should avoid submitting confidential or highly sensitive information unless necessary for the requested feature.

3.6 Legal Disclosures

We may disclose information when required by law, court order, or government regulation, or to protect the rights, property, or safety of MV Connect, our users, or others.

3.7 Third-Party Service Providers

4. Data Retention

Detailed retention information is available in our Data Retention Policy. Key points:

• Profile data is retained for the life of your account
• Upon account deletion, all profile data, messages, bookings, contacts, and analytics are permanently deleted
• Payment records (ProfileOrder, PaymentConnection) are retained for up to 7 years for legal and tax compliance, even after account deletion
• Visitor analytics data is aggregated and anonymized, retained for up to 24 months
• Deletion request records are retained with an email hash (SHA-256) for audit purposes for 24 months after completion
• Deleted information may remain in encrypted backup systems for a limited period before being permanently overwritten as part of our normal disaster recovery procedures.
• Backup copies are not restored except for disaster recovery purposes.

5. Account Deletion

You can delete your MV Connect account at any time from within the app (Owner Portal → Account & Security → Delete Account) or via our public Account Deletion page. Account deletion permanently removes:

• Your account
• Public profiles
• Media uploads
• Contact forms
• Messages
• Bookings
• Event registrations
• Analytics associated with your profiles
• Visitor interactions associated with your profiles

Certain financial records, including payment transaction records required for legal, accounting, taxation, fraud prevention, or regulatory compliance, may be retained for the period required by applicable law.

See our Account Deletion Policy for full details.

6. Your Rights

6.1 General Rights

• Access: You can request a copy of your personal data
• Rectification: You can correct inaccurate or incomplete data
• Deletion: You can delete your account and associated data
• Portability: Upon verified request and where technically feasible, we will provide your personal information in a commonly used, structured, machine-readable format.
• Restriction: You can request that we limit processing of your data
• Objection: You can object to certain types of processing
• Withdraw Consent: You can withdraw consent for consent-based processing

6.2 GDPR (EU/EEA Users)

If you are in the European Union or European Economic Area, you have the rights listed above under the General Data Protection Regulation (GDPR). MV Connect acts as a data controller for profile owner data and a data controller for visitor data. To exercise your GDPR rights, contact us at support@mvconnectmobile.com.

6.3 CCPA (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information is collected about you
• The right to know whether personal information is sold or disclosed, and to whom
• The right to opt-out of the sale of personal information
• The right to request deletion of your personal information
• The right to non-discrimination for exercising your rights

MV Connect does not sell personal information to third parties.

California residents may designate an authorized agent to submit requests on their behalf where permitted by law.

6.4 COPPA (Children Under 13)

MV Connect is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@mvconnectmobile.com and we will delete it immediately. Explorer Club content is designed for children's ministry use under adult supervision; no personal data is collected from children through this content.

7. Cookies and Tracking

We use cookies and similar tracking technologies to provide and improve our Service. See our Cookie Policy for details.

Cookies may include:

• Authentication cookies
• Security cookies
• Performance cookies
• Analytics cookies
• Preference cookies
• Functional cookies
• Notification preference cookies

8. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, secure authentication tokens, and role-based access controls. Payment information is processed by PCI-DSS compliant providers (Stripe, Base44 Payments) and never stored on our servers. Despite these measures, no system is 100% secure, and we cannot guarantee absolute security.

Additional safeguards include:

• HTTPS encryption
• Password hashing
• Role-based access control
• Authentication tokens
• Backend authorization verification
• Database access controls
• Secure cloud infrastructure
• Continuous platform updates

9. International Data Transfers

Depending on your location, your information may be transferred to countries that may not provide the same level of data protection as your home country.

Your information may be transferred to and processed in the United States or other countries where our infrastructure and third-party service providers operate. By using our Service, you consent to such transfers.

Where required, we implement appropriate safeguards for international transfers in accordance with applicable law.

10. Third-Party Links

MV Connect profiles may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies.

11. Business Transfers

If MV Connect is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar business transaction, user information may be transferred as part of that transaction subject to applicable law.

12. Fraud Prevention

We may process information to detect, investigate, and prevent fraud, abuse, unauthorized access, spam, security incidents, and other unlawful activity.

13. Account Security

• You are responsible for maintaining the confidentiality of your account credentials.
• You should not share your password or verification codes with others.
• Notify us immediately if you believe your account has been compromised.

14. Data Accuracy

Users are responsible for ensuring the information they provide remains accurate and up to date.

15. Visitor Responsibilities

• Visitors submitting information through profile pages should only provide information they are authorized to share.
• Visitors should avoid submitting sensitive personal information unless specifically requested by the profile owner.

16. Contact Response Times

We will make reasonable efforts to respond to verified privacy requests within the timeframes required by applicable law.

17. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify profile owners of material changes via email or in-app notification. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

18. Future Services

This Privacy Policy applies to current and future MV Connect features unless a separate privacy notice is provided for a specific service.

19. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: support@mvconnectmobile.com
• MV Connect
• Support: Contact Page