. About this Policy
This Privacy Policy explains how Studio DR sp. z o.o. (“Studio DR”, “we”, “us”) collects, uses, and protects personal data in connection with the AskOurChurch service (the “Service”), in accordance with Regulation (EU) 2016/679 (“GDPR” / “RODO”) and applicable Polish law, including the Polish Act on the Protection of Personal Data.
Studio DR acts as a data controller for its own customers (the churches and individuals who register for the Service) and as a processor for churches to the extent they process their members’ and visitors’ data through the Service. Where we act as a processor, the Data Processing Agreement (DPA), not this Policy, governs that relationship.
2. What Data We Collect
3. Purposes and Legal Bases
We process personal data to provide and operate the Service (performance of a contract, Art. 6(1)(b) GDPR), to comply with legal obligations (Art. 6(1)(c)), for our legitimate interests such as security and product improvement (Art. 6(1)(f)), and on the basis of consent where required, for example for certain cookies and marketing (Art. 6(1)(a)). You may withdraw consent at any time.
4. Cookies and Similar Technologies
Strictly necessary cookies operate the Service. Analytics and preference cookies are used only with your consent, which you can manage through our cookie preferences. Embedded YouTube players may set cookies governed by Google’s policies; see Section 6.
5. Recipients and Processors
We share personal data only with service providers acting on our behalf under appropriate agreements, including: infrastructure and hosting providers; Google LLC / YouTube (for access to YouTube API data and for embedded video playback, see Section 6); our payment provider (Stripe) for billing; email delivery providers; AI processing providers used to index content and generate answers; analytics providers; and professional advisers. We do not sell personal data.
6. YouTube API Services
AskOurChurch uses YouTube API Services to access content from the YouTube channels that our customers (churches) connect to the Service. By connecting a YouTube channel or otherwise using these features, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms).
6.1 How we access YouTube data. A church connects its own YouTube channel by signing in with Google and authorizing AskOurChurch through Google OAuth. We access YouTube data only for channels whose owner has granted this authorization, and only to the extent that authorization allows. We do not access channels that have not authorized the Service.
6.2 What YouTube data we access. Caption/transcript tracks and basic video metadata (such as title, description, publication date, and video identifiers) of the authorized channel’s videos, retrieved through the official YouTube Data API.
6.3 How we use YouTube data. We use captions/transcripts and metadata to build searchable, question-and-answer features grounded in the church’s own teaching — including tags, categories, topic timestamps, and summaries that link back to the source video on YouTube.
6.4 How we store and retain YouTube data. Raw transcript/caption text obtained from the YouTube API is stored only transiently and deleted within 30 days. We retain only the derived data we create from it (such as tags, categories, timestamps, and summaries) for as long as needed to provide the Service, consistent with YouTube’s data-storage policies.
6.5 How we share YouTube data. We do not sell YouTube data. We share it only with the sub-processors necessary to operate the Service (hosting and AI processing providers) under confidentiality and data-processing terms.
6.6 Revoking access and deleting your data. You can revoke AskOurChurch’s access to your YouTube data at any time through the Google security settings page at https://security.google.com/settings/security/permissions, and/or by disconnecting the channel within AskOurChurch. Upon revocation or on request, we delete the associated YouTube data and YouTube-derived data within 30 days, except where retention is required by law.
6.7 Google Privacy Policy. Your use of Google and YouTube through the Service is also governed by the Google Privacy Policy (https://policies.google.com/privacy).
7. International Transfers
Personal data may be transferred outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and supplementary measures, in accordance with Chapter V of the GDPR.
8. Your Rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to certain processing; to withdraw consent; and to lodge a complaint with the Polish supervisory authority (UODO). To exercise these rights, contact us at privacy-aoc@askourchurch.com.
9. Retention
We keep personal data only as long as necessary for the purposes described here. Account data is deleted within 14 days after account deletion; billing records are kept for 5 years as required by Polish tax law; support data is kept for a reasonable follow-up period. YouTube API data is retained as described in Section 6.4 (raw transcripts deleted within 30 days; derived data kept only as long as needed to provide the Service).
10. Data Processed on Behalf of Customers
Where churches process their members’ or visitors’ personal data through the Service, we act as a processor and the Data Processing Agreement governs that relationship, not this Policy.
11. Automated Processing and AI
The Service uses AI to index content and generate responses. This does not constitute automated decision-making producing legal or similarly significant effects within the meaning of Article 22 GDPR. YouTube data is not used to train AI models; it is processed only to provide the Service’s features.
12. Security
We implement appropriate technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Children
The Service is intended for adults and is not directed to children.
14. Changes to This Policy
We may update this Policy from time to time. We will provide notice of material changes by email or within the Service.
15. Contact
Studio DR sp. z o.o.
ul. Malinka 65D/2, 43-460 Wisła, Poland
NIP: 548-10-11-757 · KRS: 0000112221
Privacy contact: privacy-aoc@askourchurch.com