The short version. StewardWell never sees or stores your card or bank number; Stripe handles that. We hold your name, contact details, and gift history so the church or ministry you gave to can receipt you and keep its books. We don't sell data, we don't run ads, and the product has no AI features that touch your information.
Requests about your data go to hello@stewardwell.giving or to the organization you gave to.
Who we are, and whose data it is
StewardWell ("we," "us") is a giving platform operated by Architect Ministry Solutions LLC, Queen Creek, Arizona. We provide online giving, gift records, statements, and reporting tools to churches and ministry organizations ("organizations").
When you give through StewardWell, the organization you give to is the party receiving your gift and the one responsible for its donor records. We process that information on the organization's behalf and under its instructions. In privacy-law terms the organization is the controller and StewardWell is the processor. In practical terms: your relationship is with the organization, it can see and manage your record, and we do not use your information for purposes of our own.
What we collect
- Donor information you provide when giving or creating a donor account: name, email address, phone, mailing address, and the details of your gifts (amount, fund or campaign, date, optional note, and whether you chose to cover processing costs).
- Payment information is collected and processed by Stripe on a page Stripe hosts. Card and bank numbers go directly to Stripe. StewardWell stores a Stripe reference and, for receipts, the card brand and last four digits that Stripe reports. We never store full card or bank account numbers.
- Steward Wall pledges. If you reserve a wall card to pay by cash or check, we record the name, phone, and optional email you enter so the organization can match your payment. The wall itself shows only the card amount and any note you chose to display.
- Staff account information for organization users: name, email, role, and the activity needed to operate and audit the service.
- Technical logs such as IP address, browser type, and timestamps, used for security, abuse prevention, and reliability. Every gift attempt passes a Cloudflare Turnstile check, which may process your IP address and browser signals to tell people from bots.
We do not collect Social Security numbers, dates of birth, or government identifiers.
How we use it
- To process gifts and deliver receipts, annual statements, and giving history to you and to the organization you gave to.
- To give organizations the accounting, reconciliation, and reporting they need for their own records, including syncing gift records to systems the organization itself uses, such as its constituent database (for example Salesforce) or its accounting software (for example QuickBooks Online). Those connections are set up and authorized by the organization.
- To send service email: receipts, statements, pledge confirmations, and account messages. We do not send marketing email to donors.
- To keep the platform secure and working: detecting fraud and abuse, debugging problems, and maintaining an accurate ledger.
Who processes it on our behalf
We share information only with the organization you gave to and with the service providers below, each of which processes data under contract and only to provide its service. Each publishes independent security attestations (SOC 2 and, for Stripe, PCI DSS Level 1) and encrypts data in transit and at rest.
| Provider | What it does | What it handles |
|---|---|---|
| Stripe | Payment processing, directly into the organization's own Stripe account | Card and bank details, name, email, billing address, gift amount |
| Supabase | Database, authentication, and server functions (hosted on Amazon Web Services in the United States) | Donor and staff records, gift ledger, sign-in credentials (hashed) |
| Netlify | Hosting for the website and giving pages | Technical logs |
| Cloudflare | Turnstile human verification on giving and wall pages | IP address and browser signals |
| Resend | Delivery of receipts and service email | Email address and the contents of the receipt |
An organization may also connect StewardWell to systems it already runs, such as Salesforce or QuickBooks Online. Those are the organization's own vendors, chosen and controlled by the organization; we exchange records with them only as the organization directs.
We may disclose information if required by law or to protect the rights and safety of donors, organizations, or the public. If Architect Ministry Solutions LLC is ever acquired or merges, donor data would remain subject to this policy and organizations would be notified in advance.
What we don't do
- We do not sell or rent personal information. Ever.
- We do not run advertising, and we do not use advertising trackers on any page.
- We do not use donor information for our own marketing.
- No AI features touch your data. StewardWell has no artificial-intelligence features. Nothing a donor enters is sent to an AI service, and donor data is not used to train any model.
Security
- Payments: card and bank details are entered on Stripe's hosted checkout and never pass through StewardWell's servers. Stripe is a PCI DSS Level 1 processor.
- Separation: every record is tied to one organization, and database-level row security enforces that an organization's staff can read only their own organization's data. Donors signed in to the portal can read only their own gifts.
- Encryption: all traffic uses TLS, and data is encrypted at rest by our hosting providers.
- Secrets: payment keys, webhook secrets, and email keys live in server configuration and are never present in the browser. Every payment notification from Stripe is signature-verified before it is trusted.
- Public pages reveal nothing personal: giving pages and the Steward Wall display totals and card states only. Donor identities never leave the server.
- Tamper-evident ledger: a recorded payment cannot be edited. Refunds and corrections are added as offsetting entries, so the history is always visible.
- Access: staff access is by invitation from the organization and limited by role. Our own administrative access is limited to operating and supporting the service.
How long we keep it
- Gift records are financial records. We retain them for as long as the organization remains a StewardWell customer, and the organization may be required to keep them for seven years or longer under its financial and tax obligations.
- Donor contact information is kept while the organization uses StewardWell, so that statements and receipts remain accurate. If you ask the organization or us to remove your contact details, we will do so while preserving the gift record itself in de-identified form where the law requires it to be kept.
- Steward Wall pledge contact details are kept until the organization has matched the payment, and can be cleared by the organization at any time.
- Technical logs are kept for a limited period for security and reliability and then deleted.
- When an organization leaves StewardWell, it receives a full export of its data in standard formats, and we delete the organization's data from our systems within 90 days of its request, apart from what we must keep by law.
Your choices and requests
- See your giving: sign in to the donor portal at stewardwell.giving/portal to view your gifts and print statements.
- Correct or update your contact details in the portal or by asking the organization.
- Delete your contact details, cancel a recurring gift, or ask what we hold about you: write to the organization you gave to or to hello@stewardwell.giving. We respond within 30 days and confirm what was done.
- Email: receipts and statements are transactional and go to the email you provided at the time of your gift. We do not send marketing email, so there is nothing to unsubscribe from.
We honor these requests regardless of where you live. If you are in a jurisdiction with specific privacy rights, such as California or the European Economic Area, those rights apply and you may exercise them through the same channels.
If something goes wrong
If we confirm a security incident that affects personal information, we will notify the affected organizations without undue delay and no later than 72 hours after confirming it, tell them what happened and what we are doing about it, and support them in notifying donors as required by law.
Cookies and local storage
We use only what the service needs: a sign-in session for staff and donor accounts, a few browser-stored preferences (such as a remembered tab or view setting), and the Cloudflare Turnstile check on giving pages. There are no advertising or cross-site tracking cookies.
Children
StewardWell is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given through StewardWell, contact the organization or us and we will remove the contact details.
Changes to this policy
We will update this policy as the service evolves. Material changes are posted here with a new effective date, and organizations are told directly. The current and prior effective dates appear at the top of this page.
Contact
Privacy questions and requests: hello@stewardwell.giving
Architect Ministry Solutions LLC, Queen Creek, Arizona, USA