The short version. Open Path Group is a nonprofit. We collect only what we need to serve you, we never sell your personal information, and we never use your church's data to train AI models. You can ask us to access or delete your data at any time.
This Privacy Policy explains how Open Path Group ("Open Path," "we," "us") collects, uses, shares, and protects personal information when you visit our website, take the Operations Assessment, use our playbooks, subscribe to a plan, or support our mission. We are committed to handling your information with the same care we ask churches to bring to their own communities.
This policy applies to three groups:
Where a church uses Open Path to manage information about its own members or guests, the church is the "controller" of that information and Open Path acts as a "processor" on the church's behalf, following the church's instructions.
We group the information we collect into three buckets:
| Category | Examples |
|---|---|
| Information you provide | Name, email, church or organization name, role, assessment answers, messages you send us, and donation details. |
| Church operational data | Information you enter into a playbook to run your operations (for example, guest follow-up lists or volunteer roles). You control this data; we process it to provide the service. |
| Technical & usage data | Device and browser type, general location (from IP), pages visited, and basic analytics that help us improve the site. |
Payment card details, when you give or subscribe, are collected and processed directly by our payment processor — Open Path does not store your full card number.
| Purpose | Basis |
|---|---|
| Deliver your assessment results and report | To perform the service you requested |
| Provide and maintain playbooks and your account | To perform our agreement with you |
| Send your results, service updates, and (if you opt in) educational content | Consent / legitimate interest |
| Process donations and issue receipts | To complete your gift and meet legal obligations |
| Produce anonymized, aggregated research (the Open Path Index™) | Legitimate interest — never identifies your church |
| Protect against fraud, abuse, and security threats | Legal obligation / legitimate interest |
Some commitments matter enough to state plainly:
We share information only with trusted service providers who help us operate — such as hosting, email delivery, analytics, and payment processing — and only as needed to provide the service. These providers are bound by contracts that limit their use of your information to serving Open Path. We may also disclose information if required by law or to protect the rights and safety of people and churches.
We use essential cookies that make the site work and a small amount of privacy-respecting analytics to understand what's useful. We honor "Do Not Track" signals where supported. You can control cookies through your browser settings.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of marketing. To make a request, email care@openpathgroup.org. We'll respond within the timeframe required by applicable law (generally within 30 days). You can unsubscribe from emails at any time using the link in any message.
We protect your information with encryption in transit, access controls, and regular review of our practices. No system is perfectly secure, but we work to hold your data to a standard worthy of the trust churches place in us.
Open Path is intended for church leaders and administrators, not children. We do not knowingly collect personal information from children. If a church uses Open Path in ways that involve information about minors, the church remains responsible for obtaining any consents its context requires. If you believe a child's information has reached us in error, contact us and we will remove it.
We may update this policy as our services grow. When we make material changes, we'll update the date above and, where appropriate, notify you. Continued use of Open Path after an update means you accept the revised policy.
Questions about privacy? Email care@openpathgroup.org or write to Open Path Group, 4729 Tatum Mill Way, Chantilly, VA 20151. See our Terms of Service for the rules that govern use of Open Path.
This policy is provided as a starting template for Open Path Group and should be reviewed by qualified legal counsel before launch to ensure it reflects your actual data practices and complies with the laws that apply to you (including GDPR, CCPA/CPRA, and applicable state laws).