Privacy Policy

Draft — pending legal review. This text has not yet been reviewed by a lawyer and may change.

Version 1 · effective 2026-10-17

This document is in English. A Spanish courtesy translation is not yet available; the English text governs.

Who we are

FaithFull Scholars is operated by [Owner name], an individual, in [State], United States. In this policy "we" means that operator. You can reach us through the contact page at /contact.

What we collect

Account: your email address, your role (scholar, institution member or administrator) and a password, which our authentication provider stores in hashed form. We never see your password.

Scholar profiles: the details you choose to enter, such as your name, title, institution, biography, location, credentials, publications, courses, media links, availability, speaking topics, and your declared theological traditions, confessional standards and doctrinal statement. Earlier versions of your profile drafts are kept as revision history.

Institutions: the institution name, website, location and contact email, and the members who act for it.

Activity on the platform: inquiries between institutions and scholars, institution shortlists and saved courses, postings, applications (including your cover note and a frozen copy of your profile at the moment you apply), conference appearances and interview requests, committee notes on interviews, endorsements, contracts and licensing requests, and feedback you send us.

Technical data: to limit abuse we keep a keyed hash of your IP address in our rate-limit records, never the IP address itself; when you ask for a password reset we also keep a keyed hash of the email address you entered. Our hosting provider keeps standard request logs.

Religious belief information

Declared confessions, traditions and doctrinal statements reveal religious belief. You decide whether to enter them. They appear on your public profile only after an administrator approves your profile. Institutions that receive your application keep the frozen copy of your profile that you sent them.

How we use it

We use this information to run the directory: to show approved profiles, let institutions search, contact and shortlist scholars, handle applications and conference interviews, review profiles before they are published, prevent abuse, and keep the service secure.

We do not sell personal information, and we do not use it for advertising.

Who can see what

Anyone can see profiles, courses and postings that an administrator has approved. Drafts and revision history are visible only to you and to administrators. Inquiries, shortlists, applications and interview requests are visible only to the scholar and institution involved, and to administrators. Committee notes are visible only to the institution that wrote them and to administrators, never to the scholar.

Service providers

Supabase stores our database and files and runs sign-in, including the emails it sends for sign-in and password reset.

Vercel hosts the website and keeps request logs.

Cloudflare Turnstile checks that a sign-up comes from a person and not a bot.

YouTube serves videos that scholars embed in their profiles; YouTube may set its own cookies when you play one.

Google Gemini powers the AI faculty matcher, only when it is enabled. When an institution member uses it, we send Google their search request and, for up to 15 approved scholars, the profile identifier and web address, name, title, institution, disciplines, traditions, confessions with adherence level, credentials, publications, course titles, and the kinds of work and teaching formats they are available for. We do not send biographies, doctrinal statement text or confession exception notes. The matcher scores and ranks those scholars by fit with the search, including their declared confessions; the same happens on our own servers, without Google, when Gemini is not enabled. Its suggestions are shown only to the institution member who searched.

Cookies

We use a language cookie (fs_locale) to remember English or Spanish, and sign-in cookies set by Supabase to keep you signed in. Cloudflare may set cookies needed for its bot check. We do not use analytics or advertising cookies.

How long we keep it

Committee notes on interviews are due for deletion two years after the interview, and rate-limit records about one hour after their time window ends. Deletion runs automatically as the platform is used, so a record can remain for a short time after its date. We have not yet set retention periods for other information; until we do, we keep it while your account exists.

Your choices and rights

You can edit your profile at any time; changes go live after review. To ask for a copy of your information, a correction, or deletion of your account, write to us through the contact page. We handle these requests by hand: there is no self-service export or account deletion yet.

We do not send notification emails today.

Security

Access is enforced in the database itself, so each account can read only what it is allowed to see. No system is perfectly secure; tell us through the contact page if you notice a problem.

Children

FaithFull Scholars is for adults working in higher education. It is not intended for anyone under 18.

Changes to this policy

When we change this policy we publish a new version with a new effective date. If the change affects what you agreed to, we will ask you to accept the new version.