Your Data
This page covers where your data lives, how it’s protected, and how to get rid of it if you decide to leave.
What Bellwether Stores
Bellwether stores:
- Account information — Your name, email, and organization details. This is the data you provided when signing up.
- Integration credentials — OAuth tokens (for Planning Center) or API keys (for Rock RMS), encrypted at rest. These are what allow Bellwether to connect to your ChMS.
- Chat history — Your conversations with Bellwether, including the questions you asked and the responses generated.
Bellwether does not store a copy of your ChMS database. Church data (people, groups, attendance) is fetched from your ChMS in real time when you ask a question and is not persisted after the conversation.
Encryption
- In transit — All data between your browser, Bellwether’s servers, and your ChMS is encrypted with TLS.
- At rest — Integration credentials (OAuth tokens, API keys) are encrypted using Fernet symmetric encryption before being stored. Chat history and account data are stored in an encrypted database.
Where Data Lives
Bellwether’s infrastructure runs on AWS (Amazon Web Services) in the US. Your data does not leave AWS except when Bellwether makes API calls to your ChMS (Planning Center or Rock RMS) and when questions are processed through Anthropic’s Claude API.
Anthropic processes your data per their API terms, which specify that customer data is not used for model training and is not retained beyond the processing window.
Deleting Your Data
Disconnect an integration. Go to Settings → Integrations and click Disconnect. This immediately deletes the stored credentials and revokes Bellwether’s access to your ChMS.
Delete your organization. Contact support at support@bellwetherapp.ai to request full deletion of your organization, including all chat history, account data, and stored credentials. Deletion is permanent and typically processed within a few business days.
What deletion covers: When your organization is deleted, all associated data is removed from Bellwether’s systems — account info, integration credentials, and chat history. Data that was processed through Anthropic’s API during conversations is not retained by Anthropic per their API terms.
Questions?
If you have specific questions about data handling that aren’t covered here, reach out to support@bellwetherapp.ai. We’d rather answer a detailed question than leave you guessing.