Privacy Policy

This Privacy Policy explains how Casaroll (casaroll.net), operated by Timechain Strategy, collects, uses, and shares information when you use our church potluck and meal-train signup service.

Contact: info@casaroll.net. Related terms of use are in our Terms of Service.

Organizer / church admin accounts. When someone signs in or redeems a church invite, we process email address, auth session data, organization membership, and role (for example admin or member).

Planning Center People sync. When a church connects Planning Center OAuth and selects a People list, we store from that list what we need for access control — typically Planning Center person id, name, and email addresses. Sync is list-based: the church chooses one list (often Active Members).

Signup sheets. Titles, descriptions, locations, dates, item or meal-train night rows, and related organizer settings.

Guest claims. Display name and optional email, phone, and comment when someone claims a public row. Email is used only if provided (for example confirmation or reminder messages).

Technical data. Standard server and security logs (approximate IP, user agent, timestamps) and cookies needed for authentication sessions. We do not use advertising cookies or behavioral tracking pixels for ads.

• Provide and secure organizer sign-in (email codes) and sessions
• Decide who may create or manage sheets based on the synced People list
• Host public signup sheets and process guest claims
• Send transactional email (sign-in codes; optional claim confirmation and day-before reminders; organizer notices when a claim with an email is edited or removed)
• Send product updates or marketing email to church admins only (not to guest claimers)
• Maintain, debug, and improve the service
• Comply with law and protect against abuse

Church admins connect Planning Center so Casaroll can read the selected People list. We request only the access needed for that sync. Tokens are stored securely for sync jobs. Disconnecting or changing the list updates who remains eligible; people removed from the list are soft-revoked from organizer sign-in without deleting historical sheet history by default.

We use cookies (and similar storage) to keep you signed in and to refresh your session securely via our auth provider (Supabase Auth). These are essential for the signed-in app. We do not use them to sell advertising or build third-party ad profiles.

Sign-in codes go to eligible organizer emails. Claim emails (confirmation, day-before reminder, and related organizer notices) go only when a claim includes an email. Guests who skip email will not receive those messages — they should save their manage link if shown.

We do not place ads in the product or attach advertising tracking to these emails. Infrastructure providers that deliver mail may process messages under their own terms.

We share information only as needed to run Casaroll, including:

• Service providers such as hosting (for example Vercel), database/auth (Supabase), and email delivery (for example SendGrid)
• Planning Center, when you authorize the connection
• Legal or safety disclosures when required or to protect rights and users

We do not sell personal information or rent email lists for ads.

We keep account, organization, and claim data while your church uses Casaroll and as needed for security and legitimate operations.

Potluck and meal-train signup sheets are generally retired about six months after the event date. After cleanup, a public link may show a friendly “retired” page rather than full claim details. Soft-revoked organizer records may remain for history even after list removal.

You can ask us about deletion or correction at info@casaroll.net. We may retain limited information when required by law or for dispute resolution.

We use reasonable technical and organizational measures appropriate to a small SaaS product (encrypted transport, access-controlled databases, scoped service roles). No method of transmission or storage is perfectly secure.

Casaroll organizer accounts are for users 18 and older. We do not knowingly create organizer accounts for children. Public claim forms are intended for church community use under organizer oversight; contact us if you believe we have collected information from a child inappropriately.

• Request access, correction, or deletion where applicable
• Leave email blank on a claim if you do not want claim confirmation or reminder email
• Ask church admins to adjust Planning Center list membership
• Contact info@casaroll.net about admin marketing email preferences

We may update this Privacy Policy and will post the new version here with a revised effective date. Continued use after changes means you acknowledge the updated policy.

Privacy questions: info@casaroll.net · Casaroll / Timechain Strategy · https://casaroll.net