Privacy policy

Effective November 7, 2026

Ten18 Hub is software that churches use to manage their people, website, prayer requests, sermons, files and social media. It is operated by TinkerBillies MFG LLC, an Iowa limited liability company doing business as TinkerBillies (“we”, “us”). This policy explains what information Ten18 Hub holds, why, who it’s shared with, and the choices you have.

Who is responsible for your information

If your church uses Ten18 Hub, your church decides what information about you is kept and how it is used. Your church is responsible for that information, and we handle it on your church’s behalf, under its instructions. Questions about what your church keeps about you are best asked of your church first. You can also always contact us at info@ten18hub.com.

What we hold

Sign-in details for church staff and members who have an account: email address and a password, which is stored only in scrambled (hashed) form.
Church records your church enters or imports: names, contact details, addresses, households and family relationships, membership status, birthdays and similar details. These can include records about children, entered by their church.
Things people send through a church’s website, such as visitor and contact forms and prayer requests, including any privacy level the person chose for a prayer request.
Content churches create: website pages, sermons, files, and social media posts with their photos, videos and captions.
Connected accounts: when a church connects Facebook, Instagram or YouTube, we keep the page or channel name and ID, and the access token needed to post for the church. Tokens are encrypted before they are stored, and staff can’t see them.
Activity records: an audit log of changes made in a church’s account (who changed what, and when), which the church’s administrators can see.

How we use it

To provide Ten18 Hub to your church: storing records, showing them to the people your church allows, running its website, and posting to the social accounts it connected, at the times it chose.
To send account emails, such as invitations and password resets.
To write suggested captions for social media posts, when church staff ask for them (see “Caption writing” below).
To keep the service secure, fix problems and provide support.

We don’t sell personal information, we don’t show advertising, and we don’t use church data to build profiles of people.

Who can see a church’s information

Each church’s information is kept separate, and the database itself only lets people see what their own church and their role allow. Ten18 Hub support staff can see a church’s information only while that church has granted access, or, in an urgent case, by recording a reason that is shown to the church’s administrators. Everything support does is recorded in the church’s audit log.

Services we use

We rely on these companies to run Ten18 Hub. Each receives only what it needs for its part:

Supabase: database and sign-in.
Vercel: hosting the application and church websites.
Cloudflare: file storage (photos, videos and documents), domain services and email forwarding.
Trigger.dev: running background work, such as posting at scheduled times.
Resend: sending account emails.
Anthropic: writing suggested captions (see below).
Meta (Facebook and Instagram) and Google (YouTube): receiving the posts a church chooses to publish.

Caption writing

When church staff ask Ten18 Hub to write a caption, we send the caption request to Anthropic’s AI service: a few still frames from the video or the photo, the staff member’s notes, example captions the church saved, and, for videos, a transcript of what is said. Transcripts are made by our own software, not by an outside service. Anthropic processes this to return the caption and does not use it to train its models. Staff review and can edit every caption before it is posted.

YouTube and Google

Ten18 Hub uses YouTube API Services. When a church connects YouTube, it signs in with Google and allows Ten18 Hub to upload videos to its channel and to read the channel’s name. We use that access only to publish the videos the church chooses, as YouTube Shorts, and to show which channel is connected. We don’t read, keep or use any other YouTube or Google information.

By connecting YouTube, the church agrees to the YouTube Terms of Service. Google’s handling of information is described in the Google Privacy Policy.

Ten18 Hub’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

A church can disconnect YouTube at any time in Ten18 Hub under Social settings, which deletes the stored access. It can also remove Ten18 Hub’s access from the Google account’s third-party connections page.

Facebook and Instagram

When a church connects Facebook, it chooses a Facebook Page, and its linked Instagram account if it has one. We use that access only to publish the posts the church schedules and to show which accounts are connected. A church can disconnect at any time under Social settings, which deletes the stored access, and can also remove Ten18 Hub in Facebook’s Business Integrations settings. To ask us to delete any information we received from Facebook or Instagram, email info@ten18hub.com.

How long we keep it

A church’s information is kept while the church uses Ten18 Hub, and changes or deletions the church makes take effect right away.
Social posts that have gone out are removed from Ten18 Hub, with their files, on the schedule the church sets: as soon as they post, or after 7 or 30 days. They stay on Facebook, Instagram and YouTube until removed there.
When a church stops using Ten18 Hub, it can ask for a copy of its information, and we then delete it. Backups are kept for a limited time and then overwritten.

Security

Information is encrypted in transit. Connected-account tokens are encrypted in storage. Each church’s information is separated in the database itself, and changes are recorded in an audit log. No system is perfectly secure, but we work to protect what churches entrust to us, and we will tell affected churches promptly if a breach occurs.

Children

Churches may keep records about children, such as family members in a household. Ten18 Hub accounts are for adults: we don’t knowingly let children under 13 create their own accounts.

Your choices

You can ask to see, correct or delete information about you. The quickest route is usually your church, which can make the change directly. Church members with a Ten18 Hub account can update their own details in their profile. You can also email us at info@ten18hub.com, and we will work with your church to respond.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date, and tell churches about significant changes before they take effect.

Contact

TinkerBillies MFG LLC (doing business as TinkerBillies), operator of Ten18 Hub · info@ten18hub.com