What we collect, and what we don't.
Effective August 4, 2026. Last updated August 8, 2026.
We are a small company that makes social media posts for churches. This page explains what happens to your information when you visit this site or write to us. It is written to be read, not to be skimmed past.
The short version
We collect the contact details you type into a form. If you subscribe to a package, our payment processor collects your billing details and we never see your card or bank number. We do not use advertising cookies, we do not track you across other websites, and we have never sold anyone's information and do not intend to start.
Who we are
Handwoven is a done-for-you social media service for churches, operated by Woven Story Co. in Colorado Springs, Colorado. You can reach us at hi@handwovenmedia.com.
What we collect, and when
| What | When and why |
|---|---|
| Name, email address, phone number, church name | Only when you fill in a form on this site. We use it to reply to you and to prepare for a call. |
| The package you were looking at | Prefilled by the button you clicked, so we know what you want to talk about. |
| Anything you type in a message field | Because you chose to tell us. |
| Your church name, name and email at checkout | Only if you subscribe to a package. Stripe collects these and passes them to us so we know who has signed up and how to start. |
| A record that you accepted our terms | Kept by Stripe when you tick the box at checkout, with the date and time. |
| Name and email when you book a call | Collected by Cal.com so the meeting can be put on both calendars. |
| Aggregate page views | Which pages get read, from where, at a country level. This is counted without cookies and cannot be traced to a person. |
Payment details are the one thing we deliberately never touch. Card and bank numbers go straight from you to Stripe on their own pages, and they never pass through this website or our inbox. We do not ask for and do not want government identifiers or health information at all.
What we do not collect
- No advertising or marketing cookies. We do not run a Meta pixel, a Google Ads tag, or any similar tracker.
- No cross-site tracking of any kind.
- No profiles built from your browsing.
- No automated decisions made about you.
Our onboarding page remembers which steps you have ticked. That list lives in your own browser, and clearing your browser data erases it. When you finish the last step, the page sends us a single summary of your setup choices so we can prepare for your kickoff call.
Who we share it with
We share your information only with the companies that make this business run, and only as much as each one needs. We do not sell it and we do not trade it.
| Who | What they handle |
|---|---|
| Our hosting and analytics provider | Serves this website and counts page views without cookies. |
| Our form provider | Passes what you typed to our inbox. |
| Our spam filter | Checks that a human sent each form before it reaches our inbox. It runs quietly in the background and only shows a puzzle if something seems off. |
| Cal.com, scheduling | Books the call and puts it on both calendars. Their booking window loads on our page only after you click to book. |
| Our email provider | Holds the conversation after you write to us. |
| Stripe, payments | Runs checkout and ongoing billing. They receive your card or bank details directly and screen payments for fraud. We see the last four digits, the amount, and your church name, and nothing more. |
| Our agreement provider | Handles signing if you become a client. |
We may also disclose information if the law requires it, or to protect our rights or someone's safety. If that ever happens we will tell you unless we are legally prohibited from doing so.
Paying us
Choosing a package sends you to a checkout page hosted by Stripe. You are on their page at that point, not ours, and their privacy policy governs what happens there.
- We never see your card or bank number. Stripe holds it. What reaches us is the last four digits, the amount, the billing period, and the church name you entered.
- Stripe screens payments for fraud. That involves them looking at things like the device and location a payment comes from. It happens on their side and we do not receive the details of it.
- Ticking the terms box is recorded. Stripe stores that you accepted, and when. We keep that record for as long as we keep your billing records.
- Cancelling. Monthly subscriptions can be stopped at any time and annual ones run to the end of the year you paid for. Ask us and we will action it. Your billing history stays on file because tax rules require it.
If you become a client
Working together involves more than a form, so a few extra things apply.
- We never ask for your passwords. Access to your Facebook, Instagram, or YouTube accounts is granted through each platform's own permission settings, which means you can remove us yourself without changing a single password.
- Your files stay yours. Sermon recordings, photographs, and brand assets you send us are held so we can do the work, and for no other purpose. We do not license them, sell them, or feed them to anyone else's training data.
- We keep source recordings for twelve months, then delete them. Your church remains the system of record for its own service recordings. We are not a backup service.
- Finished work is yours to keep, during the engagement and after it ends.
- People in your footage. Your congregation appears in the material you send us, sometimes including children. You confirm you hold the permissions your church requires before sending it. We handle it carefully and we publish only to your own accounts.
The full terms of the working relationship live in the written agreement you sign, not on this page.
How long we keep things
- You wrote in and we did not end up working together: we keep the exchange for two years in case you come back, then delete it.
- You became a client: we keep records for the length of the engagement plus seven years, because tax and accounting rules require it.
- Sermon source files: twelve months.
- Aggregate page view counts: indefinitely, because they contain nothing about you.
Your choices
Whatever state you live in, you can ask us to show you what we hold about you, correct it, or delete it. Write to hi@handwovenmedia.com and we will take care of it within thirty days. We will not charge you and we will not treat you differently for asking.
If you are on one of our email lists, every message has an unsubscribe link and we act on it within two business days.
Do Not Track
Some browsers send a Do Not Track signal. There is still no agreed standard for what a website should do with it. Our answer is simple: we do not track visitors across other websites, with or without the signal, so there is nothing for us to switch off.
California
California residents have the right to know what personal information is collected, to have it deleted, to correct it, and not to be discriminated against for exercising those rights. In the past twelve months we have collected the categories listed above, for the purposes listed above. We have not sold or shared personal information for cross-context behavioural advertising, and we do not intend to.
Colorado, and other states with privacy laws
We are a small company and we fall below the thresholds that trigger most state privacy statutes. We answer requests from residents of any state on the same terms anyway, because keeping two standards is more work than keeping one good one.
Children
This website is meant for church staff and leaders, and we do not knowingly collect information from anyone under thirteen through it. If you believe a child has sent us something, write to us and we will remove it.
Security
We use reputable providers, we turn on two-factor authentication everywhere it is offered, and we limit who on our side can see what. No system is perfect and we will not pretend otherwise. If a breach ever affects your information we will tell you promptly and plainly.
Where your information is handled
We operate in the United States and our providers store data in the United States. If you write to us from outside the US, your information will be handled here.
Changes
If we change this policy we will update the date at the top. If a change is significant and you are a client, we will tell you directly rather than leaving you to notice.
Questions, or want your information removed? Write to hi@handwovenmedia.com. A person reads it.