Privacy notice (draft) · Candlestick

This notice explains what personal information this website collects, why, who handles it, how long it is kept and what your rights are. It covers getcandlestick.com only. Each church app on Candlestick will have its own privacy notice.

Candlestick is run by TrueVine Software, which is responsible for the information described here. You can contact us at hello@getcandlestick.com.

What we collect

When you register your church

The form asks for:

your church’s name and country
your name and email address
your phone or WhatsApp number, if you give it
roughly how many members your church has, the kind of church, and the package and features you’re interested in
anything else you choose to tell us
that you agreed to be contacted, and when you sent the form

To stop spam, Cloudflare Turnstile checks that the form was sent by a person. It uses information about your browser and your IP address, and doesn’t use advertising cookies.

When you visit the website

We use Cloudflare Web Analytics to count visits. It doesn’t use cookies and doesn’t identify you. Like any website, the servers briefly log technical details such as IP addresses, to keep the site running and secure.

Why we use it

To reply to your application, arrange a call and, if your church joins, set up your church’s account.
To keep the form free of spam and abuse.

We use your details because you asked us to contact you about your church joining Candlestick. We don’t sell your information, and we don’t use it for advertising.

Who handles it

Cloudflare runs this website, the spam check and the analytics.
Resend sends us an email with each application.
Lovable Cloud, in Europe, will store applications once the Candlestick platform is running.

Some of these providers process information outside your country, including in Europe and the United States. [Transfer safeguards for Zimbabwe, Botswana, South Africa and other countries to be confirmed in legal review.]

How long we keep it

If your church joins Candlestick, your application becomes part of your church’s account records. If it doesn’t, we delete the application 6 months after our last contact with you. You can ask us to delete it sooner.

Your rights

You can ask to see the information we hold about you, to correct it, to delete it, or to object to how we use it. Depending on where you live, laws such as Zimbabwe’s Cyber and Data Protection Act, South Africa’s POPIA, Botswana’s Data Protection Act and the EU and UK GDPR give you these rights. You can also complain to your country’s data protection authority.

Contact

For anything about your information, email hello@getcandlestick.com. To report a security problem, email security@getcandlestick.com.

Draft of 5 October 2026.