Churches trust Edeso with information about their members, their giving and their community life. This page explains, in plain words, where that data lives, who can see it and how it is protected. The full legal text is in our privacy policy.
Where the data is stored
The Edeso platform (the admin panel and your church's app) stores its data on Google Firebase, in Google Cloud data centres in the European Union, in Germany and Ireland. Requests sent through this website go to our CRM, hosted in the European Union (Frankfurt, Germany).
How the data is protected
- Encryption: data travels encrypted (HTTPS/TLS) and is encrypted at rest on Google's infrastructure.
- Access by role: everyone signs in, and each person sees only what their role allows. Leaders, finance and volunteers get different access.
- Activity logs record important actions in the platform.
- Trusted providers with recognised security standards, bound by contract to confidentiality and security.
Who decides what happens to the data
Your church is the controller of its members' data: it decides what is collected, why and on what legal basis. Edeso is the processor: we handle the data only on the church's documented instructions, under a data processing agreement (Art. 28 GDPR). We never use church data for advertising, profiling or resale.
Sensitive data
Some data can reveal religious beliefs, which is a special category under Art. 9 GDPR. The church needs a valid basis for it, for example explicit consent, and Edeso processes it only on the church's instructions, with appropriate safeguards.
Retention and deletion
Data is kept while the church has an active subscription. After the contract ends, it is deleted or anonymised within 3 months, unless the law requires keeping it. Backups are deleted on their own retention cycle.
Sub-processors
Hosting and database (Google Firebase, EU regions), email delivery and IT support, each with equivalent contractual obligations. The current list is available on request.
Members' rights
Members exercise their rights (access, correction, deletion and the others under the GDPR) first with their church. Edeso helps the church respond.
Contact
For a data processing agreement, the sub-processor list or any security question, write to contact@edeso.app. Edeso is operated by Outcreate Media Group SRL (VAT RO41089715), Romania.