Privacy Policy

Who we are

ShamashHub ("we", "us") is a shul management platform operated by SoftSpot Tech. This policy explains what we collect, why, and how we handle it — both for the shuls that subscribe to the platform and for the individuals whose information those shuls manage.

Two kinds of data

Account data is what shul staff provide to use the platform: names, login emails, and billing details. We are the controller of this data.

Community data is what a shul stores in the platform about its own members: contact details, pledges and payments, seating, yahrzeits, and similar records. Each shul owns and controls its community data; we process it only on the shul's behalf and never use it for our own purposes. Requests about your record in a specific shul's account should go to that shul.

What we collect and why

• Login and profile details — to authenticate you and run your account.
• Billing information — processed by Stripe; we never store full card numbers.
• The records your shul enters — to provide the service itself.
• Basic technical logs (IP, browser, timestamps) — for security and troubleshooting.

We do not sell data. We do not run advertising. We do not train AI models on your data.

Service providers

We rely on a small set of processors to run the platform: cloud hosting and database infrastructure, Stripe (platform billing), Resend (email delivery), Twilio (SMS), and AWS S3 (file storage). Payment processing that a shul configures for its own donors runs through that shul's own processor account. Each provider receives only what it needs to do its job.

Text messages (SMS)

Shuls may send transactional text messages to members who provided their mobile number — confirmations of donations, pledges, payments, and scheduled automatic payments. Message frequency varies with your activity: typically one message per transaction, and no more than a few per month. Message and data rates may apply.

Mobile numbers and text-messaging opt-in information are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes.

Reply STOP to any message to stop receiving texts, or HELP for help.

Retention and deletion

Data stays as long as the shul's account is active. When an account is closed, the shul can export its data; we delete it from production systems within 90 days of closure, with backups aging out on their own schedule shortly after.

Security

All traffic is encrypted in transit, data is encrypted at rest, every shul's data is isolated from every other's, and access within a shul is controlled by per-user permissions. See our security page for details.

Your rights

You can access and correct your account information from your profile page. You may request a copy or deletion of your account data by contacting us. For community data held by a shul, contact that shul — we'll assist them in fulfilling your request.

Contact

Questions about this policy: contact us or email info@shamashhub.com.