Legal
Privacy Policy
Effective May 21, 2026
Wroot Labs builds careful software for the local church. This page explains what we collect, why, who we share it with, and how long we keep it. We aim to collect as little as possible and to be plain about what we do with it.
Who we are
Wroot Labs LLC is a Texas limited liability company, based in Lakeway, Texas. We operate wrootlabs.com and a family of product sites including lampstand.review, nave.build, fairshare.wrootlabs.com, bookthechurch.com, echochurch.app, and chapelapp.com. This policy covers all of them.
For any privacy question or request, write to wilson@wrootlabs.com. A real person reads every message.
What we collect
Information you give us
- Contact information. Your name, email address, church or organization name, and anything else you choose to include when you write to us or sign up for one of our products.
- Payment information. When you pay for one of our products, our payment processor (Stripe) collects your card details, billing address, and the amount of the charge. We never see your full card number; we see only the last four digits and the basic transaction record Stripe shares with us.
- Content you submit to a product. For Lampstand audits, this includes the URL of the website you ask us to review, and a captured copy of that site's public pages at the time of the audit. For products like Fairshare or Book the Church, this includes the records, names, and figures you enter into the application.
- Communications. The content of any email or message you send us, kept in our mailbox in the ordinary course of business.
Information we collect automatically
- Server logs. Our hosting providers (Vercel, Cloudflare) log request metadata — IP address, page requested, user agent, timestamp — for operational and security purposes. We do not use these logs to build a profile of you.
- No third-party analytics, no advertising trackers. Wroot Labs marketing sites do not run Google Analytics, Facebook Pixel, or any advertising tracker. Logged-in product applications may use minimal first-party analytics to understand product usage; if so, that is disclosed in the product's specific documentation.
- Cookies. We use cookies only where they are required for a product to function (session cookies for logged-in applications) or where you opt in. We do not set advertising cookies.
How we use what we collect
- To provide the product or service you asked for.
- To send you transactional messages — receipts, audit deliveries, password resets, important notices.
- To reply to your support requests.
- To improve our products by understanding which features are used and which are not.
- To comply with legal obligations (tax records, dispute resolution).
We do not sell your personal information. We do not share it with advertisers. We do not use it to train third-party AI models.
Who we share information with
We use a small set of third-party service providers (sub- processors) to run our products. They access only the data necessary to perform their function, under written agreements that require them to protect it.
- Stripe — payment processing. Subject to Stripe's own privacy policy.
- Vercel — application hosting and server logs.
- Cloudflare — DNS and edge networking.
- Supabase — Postgres database hosting for specific products (Fairshare, Chapel, and others where noted).
- Google Workspace — email (wilson@wrootlabs.com and aliases).
- Anthropic — large-language-model calls used by certain product features (notably Lampstand's classification and verdict passes). The content sent to Anthropic during a Lampstand audit is the rendered text of the church's public website. Anthropic does not retain this content for training when accessed via API under standard terms.
- Resend — transactional email delivery, where applicable.
- Mercury — business banking. Records of payments are reflected in our bank statements.
We will also disclose information if required by law, or to protect the safety, rights, or property of Wroot Labs, our customers, or others.
How long we keep it
- Audit deliverables (Lampstand). We retain the final report PDF and the JSON manifest that produced it for one year after delivery, to support follow-up questions and free revisions. Captured copies of the audited site's pages are purged within thirty days of delivery.
- Application data. For products with logged-in accounts, your data is retained as long as your account is active. On cancellation, data is deleted within ninety days unless we are required to retain it longer (for example, tax records).
- Communications. Email correspondence is retained in our mailbox in the ordinary course of business.
- Payment records. Retained for seven years for tax and accounting compliance.
Your rights
You can ask us at any time to:
- tell you what information we have about you,
- correct anything that is wrong,
- delete your information, where we are not required to keep it,
- export your information in a portable format.
Write to wilson@wrootlabs.com with the request. We will respond within thirty days. If you are in California, Colorado, Virginia, the European Union, or any other jurisdiction with specific privacy rights, those rights are preserved here.
Children
Wroot Labs products are designed for adults working at churches and church-adjacent organizations. We do not knowingly collect information from anyone under the age of thirteen. If you believe we have, write to us and we will delete it.
Changes to this policy
If we make a material change to this policy, we will update the effective date at the top of the page and, where appropriate, notify customers of active products by email. Continued use of our products after a change means you accept the new policy.
Contact
Wroot Labs LLC
110 Deerfield Cove
Lakeway, Texas 78734
wilson@wrootlabs.com