Privacy Policy: Pastor Nest
Effective date: {{EFFECTIVE_DATE}}
Last updated: {{LAST_UPDATED}}
1. Operator and scope
ZRN Holdings Pty Ltd, trading as Codex Analytica, operates Pastor Nest in Victoria, Australia (ABN 56 696 766 186, {{COMPANY_ADDRESS}}). Contact privacy@pastornest.com about personal information. This policy describes handling for the website hosting service, editor and private proposals. We apply the Privacy Act 1988 and Australian Privacy Principles (APPs) where they apply to us. This draft is not a certification of compliance.
2. Information handled
- Account and access information: names, email addresses, site ownership and editor invitations, magic-link authentication and access records. We do not ask customers to create a Pastor Nest password.
- Website content: supplied biographies, articles, sermon notes, image files, links and import metadata. Draft material is distinct from content the owner authorizes for publication.
- Billing information: plan, subscription status, transaction references and receipt details. Paddle is the intended merchant of record handling checkout and payment data. Its card-data flow and any bypass of our servers remain to be verified in sandbox; activation is not asserted.
- Service activity: first-party page-view and outbound-click counts. Hosting and security services may also process IP addresses, timestamps and browser request information to deliver and secure requests. Counts are not proof of unique people.
- Support correspondence and necessary browser storage for sessions and editor recovery.
Ministry biographies and photos may reveal religious beliefs or affiliations, which are sensitive personal information. Supply only what is necessary and obtain appropriate consent for other people's information and images. The pilot is for adult website owners, not children's records or confidential counselling information. Contact us if such material is uploaded inadvertently.
3. Sources and purposes
We collect information from owners and their invited editors, from use of the service, and from support requests. At an owner's request we retrieve RSS or YouTube metadata from the selected source. We use this information to provide editing and hosting, manage access, process subscriptions, assist customers, secure the service and show basic website counts.
The operator may prepare a clearly labelled, private unofficial proposal using relevant public professional sources. This is not an endorsement. Public availability does not eliminate privacy or copyright obligations. The person concerned may request access, correction or removal without purchasing or claiming the site. We confirm rights and appropriate permissions before publication. We do not use proposal preparation as permission to send marketing.
Not providing required account or payment information may prevent us from providing a subscription. Optional content can be omitted. Owners choose which authorized content to publish; published content can be viewed and copied by visitors and search engines, whose copies we cannot directly control.
4. Providers and disclosure
The service configuration described for this pilot uses the following providers. Production configuration and overseas processing details remain subject to review before these draft pages become effective.
| Provider | Purpose and information involved | Location or status |
|---|---|---|
| Supabase | Database, authentication and file storage for accounts, content and media | Project region Australia (Sydney, ap-southeast-2), as specified for the pilot; ancillary support and processing locations require confirmation |
| Railway | Application hosting; requests and application data needed to serve the product | Deployment and processing countries: United States |
| Vercel | Marketing site hosting; website requests and existing domain binding | Processing countries: United States |
| Paddle (planned, not activated) | Merchant of record for subscriptions; checkout/payment data, payer details, invoices and transaction records | Processing locations, subprocessors and card-data flow pending confirmation before publication |
| Cloudflare (planned DNS authority) | DNS for the Namecheap-registered domain; configuration and request information as applicable | DNS cutover, processing locations and applicable handling pending confirmation; no activation claimed |
| Resend | Planned transactional email, such as sign-in and service messages | Not yet active in this stated configuration; confirm activation and United States before use |
| YouTube/Google | Customer-selected video embeds and requested metadata imports; visitor requests when embeds load or play | External provider with its own practices; United States |
YouTube and Paddle may handle information under their own terms as well as providing services to us. This table does not assert that every provider is solely our legal data processor. External giving, booking and newsletter destinations are chosen by the owner and have their own privacy policies. We do not process donations. We do not sell personal information, use third-party analytics or run advertising cookies.
We may disclose information where required by law or reasonably necessary to address a security incident or protect legal rights. We limit access to what is needed for the purpose.
5. Overseas handling
The Sydney database region does not mean all information stays in Australia. Provider operations and video requests may involve overseas handling. Before making an overseas disclosure subject to APP 8, we must assess the recipient and take the reasonable steps required by that principle. The country placeholders above must be resolved from actual provider arrangements before publication. Nothing in this notice seeks blanket consent to waive overseas-disclosure protections.
6. Security
The stated hosted-service safeguards are HTTPS, hashed single-use claim tokens, server-side per-site authorization, image type verification and re-encoding, and revision history. They reduce risk but cannot guarantee that an incident will never occur. This notice does not claim certification, penetration testing or an independently verified encryption guarantee.
If an incident occurs, we will assess and respond to it, including notifying affected people and the Office of the Australian Information Commissioner (OAIC) when required by the Notifiable Data Breaches scheme. We will meet other notification obligations that apply.
7. Retention and cancellation
We retain account information and website content while needed to provide the service. Cancellation stops renewals, while hosting and access continue to the end of the paid period. That date is the effective cancellation date. The published site is taken down at the end of the paid period.
Content and media export is available on cancellation. Drafts and media are retained for 30 days after the effective cancellation date so you can retrieve them, then deleted. Request retrieval at support@pastornest.com during that window. Backup copies rotate out within 30 days after deletion from active storage. A restored backup must have pending deletions reapplied. This is the same timing as the Terms of Service.
Billing and dispute records may have separate legally required retention. Access records, support correspondence and unclaimed or expired trial proposals are kept only as needed for their purpose; their approved deletion schedules are {{OTHER_RETENTION_SCHEDULE}}. These schedules must be settled before this policy takes effect. Browser recovery copies may remain on your device until removed through the editor or browser settings.
8. Access, correction and complaints
Email privacy@pastornest.com to request access, correction, deletion where available, or removal of an unofficial proposal. We may request proportionate identity verification to avoid releasing someone else's information. We will respond within a reasonable period, explain any lawful refusal and consider your complaint. If unresolved, you can contact the OAIC. Rights under any other applicable privacy law are preserved.
9. Our emails
Transactional emails support account access, billing and service administration. Our own commercial marketing is subject to the Spam Act 2003: we require an appropriate consent basis, identify the sender, provide contact details and offer a functional unsubscribe. We action unsubscribe requests within five working days. A public email address or existing customer relationship does not automatically grant permission. Marketing opt-out does not prevent necessary non-marketing account messages. External newsletter providers linked by a site owner operate separately.
10. Changes and contact
We will update this notice when handling changes and notify account holders of material changes where practicable. Questions or complaints: privacy@pastornest.com. Postal contact: ZRN Holdings Pty Ltd, {{COMPANY_ADDRESS}}.
Automatic font and animation requests
The pilot pages currently request Google Fonts automatically when opened, including font stylesheets and font files. The landing page also automatically requests pinned GSAP animation scripts from cdnjs (Cloudflare). These providers receive connection information such as IP address and browser headers even if you do not play a video or submit a form. Their processing locations have not been verified: {{GOOGLE_FONTS_PROCESSING_COUNTRIES}} and {{CDNJS_PROCESSING_COUNTRIES}} remain publication blockers. Script integrity checks protect the pinned files, but do not prevent these requests.