Data Retention and Deletion — churchoffice.ai

Who holds the working copy

LeadLocal operates churchoffice.ai. Our mailing address is 3624 SE 5th St, Renton, WA 98058.

We hold a private working copy only for the intake, preview and approved build. This policy covers files, logos, answers, graphics, generated plans, contact choices and delivery records.

Preview auto-delete

Preview files, answers and generated materials are automatically deleted 90 days after actual preview delivery, unless they are part of an approved ongoing build. A ready screen or an unsent email record is not email delivery. Unconverted intake and brain material are also subject to the 90-day cleanup schedule. We do not restart retention merely because you open a page.

The automatic cleanup uses actual delivery records, not merely ready status or a would-send record. Approved active builds follow their authorized handover lifecycle rather than being silently deleted as unused previews. Separate non-opted-in contacts follow the 90-day cleanup schedule.

Delete sooner

Contact matt@churchoffice.ai or use the data request page to request access, correction, export, deletion or withdrawal of optional contact consent. We verify your authority before releasing or deleting data. Keep private intake and results links confidential.

We complete verified deletion requests within 30 days of the request. We remove stored files before completing intake and generated-material cleanup, and revoke access to deleted results and shared graphics. We retain only records required for legal obligations, consent evidence, security and deletion accountability, with restricted access; these are not used to rebuild your brain.

With a valid private link, the in-app deletion action can remove the intake immediately once safe file cleanup succeeds. Without that link we verify a request before acting. We may ask only for information necessary to verify authority; we do not publish the request.

Handover and third-party copies

After completed brain handover and confirmation that you can access your copy, we remove our access and delete our working copy, recording deletion proof. A ready-to-ship archive is not proof that handover or access removal occurred.

We cannot recall PDFs, exports, screenshots or public-graphic copies already downloaded by you or others. Your own Drive and tools have separate retention controls. Ask recipients to delete their copies and use the external provider’s controls where necessary.

Records retained and recovery limits

Legally required consent, opt-out, security, audit and anonymized deletion evidence may be retained with restricted access for the applicable legal or accountability period. We do not keep those records to regenerate deleted content. Provider-managed backups follow provider recovery and expiry controls; if restored, deletion restrictions must still be applied before reuse.

Deletion is permanent for the app’s usable working copy. Export anything you need before deleting. Optional contact consent can be withdrawn separately without keeping files or brain material. Questions: matt@churchoffice.ai.