Legal

Privacy Policy

What we collect, who processes it, and the choices you have.

Last updated: August 29, 2026

This page is drafted to describe how GospelMaker actually operates today. It has not yet been reviewed by a qualified lawyer in our operating jurisdiction, and should be treated as a working draft until that review happens.

What we collect

Account data: email address, display name, country and language.

Project content: the briefs, documents, lyrics and edits you create, and the projects and folders you organise them into.

Media: images, audio and video files you upload or generate, stored in private storage buckets tied to your account.

Credit & payment records: your credit balance and transaction history, and records of payments and refunds (not your card details — see "Payments" below).

Who processes it (our sub-processors)

Supabase / Lovable Cloud — our database, authentication and file storage provider. It holds your account, project and media data.

Lovable AI Gateway and the underlying model providers — receive the prompt text (and, for image/audio jobs, the relevant prompt content) needed to generate the specific thing you asked for. They do not receive your password, payment details or account admin data.

ElevenLabs — a music/voice provider we integrate with for future features. It is not currently enabled for generation, so no content is sent to it today.

Paystack — processes payments. Paystack handles your card and payment details directly; GospelMaker never receives or stores your full card number.

Email provider — not yet configured. Until it is, GospelMaker does not send transactional email through a third-party sender; this page will be updated once one is connected.

Data minimisation for AI generations

Only the text actually needed to fulfil the specific generation you requested is sent to an AI provider — for example, your brief and any Bible reference you supply. Your password, payment details, authentication tokens and administrative account data are never sent to an AI provider.

Product analytics

We keep first-party usage analytics (like which features are used and how often) in our own database. We do not use third-party trackers or ad pixels, we do not log your IP address for analytics, and we do not include your prompt content in analytics records.

Retention

We keep your account and project data for as long as your account is open, plus a limited period after deletion to handle support, fraud and legal obligations. Credit and payment transaction records are kept for accounting and dispute-resolution purposes.

Your rights

You can review and correct your profile details, and request deletion of your account and data, from Settings. Where a request needs manual handling (for example, a data export), email support@gospelmaker.com and we will action it as soon as we can.

International transfers

Our processors operate infrastructure in multiple countries, so your data may be processed outside the country you live in. We choose processors that offer appropriate safeguards for the type of data involved.

Children

GospelMaker is not directed at children and is not knowingly used to collect data from children under the age required by local law to consent to data processing. If you believe a child has created an account, contact us and we will remove it.

Provider rights notice

See our Terms of Service and AI Disclaimer for how AI provider terms affect the content you generate, separate from how we handle your personal data.

Contact

Privacy questions or requests: support@gospelmaker.com.

Questions about this page? See our full legal policy index or email support@gospelmaker.com.