Privacy Policy
How AsoreOnline collects, processes, protects, and governs organizational data under zero-compromise tenant isolation standards.
1. Information We Collect & Data Controller Roles
When an organization subscribes to AsoreOnline, we collect administrative account credentials, official communication emails, contact numbers, and billing identifiers. During platform operation, subscriber churches enter operational records — including member directories, attendance logs, financial gifts, cell group hierarchies, and child check-in records. Subscriber churches act as Data Controllers for their congregational records, while AsoreOnline operates strictly as a Data Processor under enterprise service agreements.
2. Purpose & Legal Basis of Processing
We process organizational and congregational data exclusively to operate, maintain, and secure the AsoreOnline platform. This includes workspace provisioning, role verification, financial transaction reconciliations, outbound communication delivery (SMS/Email), preventing unauthorized access, and complying with statutory compliance requirements.
3. Multi-Tenant Cryptographic Isolation
Each organization workspace is strictly isolated through mandatory tenant header verification (x-church-id) on every API request, enforced at the application middleware and database abstraction layers. Database queries enforce strict tenant scoping. All data in transit is encrypted using TLS 1.3, data at rest is encrypted using AES-256, and credentials use salted bcrypt cryptographic hashing.
4. Enterprise Sub-Processors & Infrastructure
We partner with vetted, enterprise-grade cloud providers to deliver critical capabilities: Paystack & Stripe for PCI-DSS compliant financial settlement, Mono for automated bank account reconciliation, Resend & Arkesel for transactional dispatch, Cloudflare & AWS S3-compatible R2 for geo-distributed media storage, and Sentry for error observability. Sub-processors receive only the minimum necessary payloads required to fulfill service tasks.
5. Child Check-In & Protected Category Data
Child safety modules require elevated access governance. Security pickup codes, authorized guardian contacts, allergies, and special medical notes are collected strictly with verified guardian authorization and accessible only to designated Child Safety Officers on active check-in duty.
6. Data Sovereignty, Portability & Deletion
Subscriber organizations retain total sovereignty over their operational datasets. Complete data exports in open formats (CSV, XLSX, PDF) can be initiated at any time by authorized administrators. Upon workspace decommissioning, all tenant data is scheduled for irreversible cryptographic shredding across database clusters following standard retention hold intervals.
7. Data Subject Rights & Privacy Inquiries
Under global data protection standards (including GDPR, CCPA, and regional Data Protection frameworks), members have rights to access, rectify, or request deletion of their records. Congregants should direct requests to their church administrator. For platform-wide compliance inquiries or Data Processing Addendum (DPA) execution, email privacy@asoreonline.com.
Effective Date: Operating Standard 2026
Privacy Office: privacy@asoreonline.com