24 h
The most you could lose
We make a backup every night. Even after the most serious outage, you would lose at most the changes from the last day.
Security
Your church's data is safe
Songs, service plans and people's details are years of work. Here is, in plain words, where we keep them, how we back them up and what happens if something goes wrong.
What we promise
4 h
Back after an outage
If the server suffers a serious failure, we will have WorshipPro running again within 4 hours.
6 mo.
How far back
We keep backups from the last 7 days, 4 weeks and 6 months.
Where your data lives
The application, database and files are on a server in Poland, in the European Union. Backups are stored in the European Union as well. The few services from outside the EU that we use (such as email delivery) are named on the subprocessors list.
Subprocessors listBackups
- Every night we copy the whole database and all files: sheet music, attachments and media.
- Backups are encrypted — without our key nobody can read them, even if they get access to where they are stored.
- We regularly check that the backup really restores to a working system, including the separation between churches.
- If someone in your church deletes important data by mistake, write to us — we will check whether it can be recovered from a backup.
Every church kept apart
Each church's data is separated inside the database itself. The database makes sure nobody from one church can see another church's data — an extra layer of protection that does not depend on the application code. Within a church, access depends on the roles the administrator assigns.
Connections and sign-in
- All connections from the apps and the browser are encrypted (HTTPS).
- Passwords are stored only in a form that cannot be read back — we do not know them.
- You can turn on two-step sign-in with a code from an app on your phone.
- We limit sign-in attempts and record important changes in an audit log.
Text on phones and live translation
- Text on phones: a person in the hall scans a QR code and reads the text of the current slide — no account and no app. They send nothing except the choice of language; the chosen language, text size and look are kept only on their phone.
- Live translation of the sermon: speech is turned into text on the church's computer — the sound stays in the hall.
- Only the text of the sentences reaches the server. It is translated by an external provider (Anthropic, the Claude model), which receives the sentence, up to three previous sentences and the church's glossary — without the name of the church and without anyone's personal data.
- We do not store the text of the sermon — neither in the database nor in logs. We keep only a counter of time. Live translation is switched on by the church administrator; it is off by default.
When something goes wrong
We report outages as they happen on the status page. If a personal data breach ever occurred, we would report it to the Polish data protection authority (UODO) within 72 hours and notify the churches affected.
Check for yourself, any time
The status page shows whether everything is working, when the latest backup was made and whether it is stored off the server.
Legal details: Privacy policy · Data processing agreement · Subprocessors
A question about security, or found a vulnerability? Write to us: contact@worshippro.net