Privacy Policy

CFMSite is operated by Ryan Ybarra, a sole proprietor trading as CFMSite, at 9817 Gschwind St, El Paso, TX 79924. Contact: [email protected].

Two different groups of people have information here, and they are treated differently.

Church leaders who sign up

When you fill in the signup form, CFMSite collects your name, email address, phone number, your church’s name, its street address, city and country, your preferred language, your service times, your social media handle, and any welcome text you write. All of it is used for one thing: building and running your website, and contacting you about your account. Nothing on that form is optional decoration. If a field is not needed to build your site, it is not asked for.

Visitors to a church website

Church sites built on CFMSite may include a form where a visitor can give their name, email address and phone number to get in touch with that church. That information belongs to the church. CFMSite stores it on the church’s behalf and does not use it for any purpose of its own, does not email those visitors, and does not add them to any list.

On cfmsite.com itself, CFMSite uses PostHog to count page views and to see where people leave the signup form, so the form can be made easier. PostHog stores an anonymous identifier in your browser to tell one visit from the next. It records which pages you open and which buttons you press. It does not record what you type, and session recording is switched off.

There are no advertising pixels and no tag manager, and nothing here is used to follow you to other websites. The church websites CFMSite hosts carry no visitor analytics at all: the only measurement is a daily count of page views per site, with no IP address and no identifier kept.

Your browser also stores one preference remembering whether you chose the light or dark version of the page. It contains no identifier and never leaves your device.

Running the service means using other companies. Each one below receives only what it needs to do its job, and none of them are permitted to use it for their own purposes.

• PostHog — page-view and signup-form analytics on cfmsite.com, described in section 3.
• Stripe — payments. Card numbers go directly to Stripe and are never seen or stored by CFMSite.
• Supabase — the database and file storage holding your site content. Hosted in the United States.
• Cloudflare — serves the websites and the translation service.
• Google Workspace — the email account that writes to you.
• Anthropic — reads change requests you email in, and produces live sermon translations.
• Deepgram and ElevenLabs — speech recognition and speech synthesis for Live Translation.
• Apify — fetches your church’s own public social media posts so your site can show them.
• n8n — connects the steps above together.

Your information is not sold, rented, or shared with advertisers. That is not a policy choice that could quietly change; there is no advertising in this product to sell it to.

If you connect Instagram, Facebook or YouTube, CFMSite reads the posts your church has already made public and copies them onto your website. It cannot read private messages, follower lists, or anything you have not published. You can have this switched off at any time by emailing and asking.

If your church uses Live Translation, the service listens to the sermon while it is being preached, converts the speech to text, and translates it for listeners. This is covered by a separate notice at translate.cfmsite.com/privacy because spoken audio is more sensitive than the rest of what is handled here, and it deserves its own explanation.

Everything is stored on servers in the United States. If your church is outside the United States, signing up means your information is transferred there. CFMSite has customers in Colombia and Mexico, so this is a real transfer, not boilerplate.

Your account information and site content are kept for as long as your subscription is active. If you cancel, they are kept for 90 days so the site can be restored if you change your mind, and then deleted. Billing records are kept for 7 years because tax rules require it. Visitor form submissions on a church site are kept until that church asks for them to be removed.

You can ask for a copy of everything held about you, ask for anything wrong to be corrected, ask for it to be deleted, or ask for your site to be taken down. Email [email protected] and it will be done within 30 days. There is no form and no fee. Depending on where you live, these may be rights you hold by law rather than courtesies, and that changes nothing about how the request is handled here.

CFMSite is sold to churches, not to children, and it does not knowingly collect information from anyone under 13. A church that publishes photographs of children on its own website is responsible for having permission to do so.

Payment card details never touch CFMSite’s systems. Databases and file storage sit behind access controls, and site traffic is encrypted. No service can promise it will never be breached, and this one does not. If something happens that affects your information, you will be told.

If this policy changes in a way that matters, you will get an email about it before it takes effect, not a silently updated date at the top of the page.