Privacy Policy
Effective October 30, 2026
Skylight is a mapping tool for churches, made by Problem Assassins, LLC ("we", "us"). It shows people from a church on a map, including small group leaders, and matches new people to a leader near them. This policy explains what Skylight stores, who it shares it with and how a church can delete it.
Who this covers
Churches that use Skylight, the staff and volunteers who sign in, and the people whose details a church brings into Skylight from Planning Center. The church decides whose details are brought in and is responsible for having the right to use them.
What Skylight stores
- From Planning Center: names, addresses, phone numbers, email addresses, membership and status, custom tab fields, households (each household's name, who is in it and who is its head), groups, group members and leaders. Skylight only reads from Planning Center and never changes it.
- Planning Center notes, only when the church turns that on. Turning it off deletes the notes kept.
- Birthdates, child flags and grades are never brought in.
- Accounts: the name and email of each person who signs in. Passwords, keys and share codes are stored only as one-way hashes.
- For each user account, which details about people it may see. A church can hide a person's email, phone, street address, Planning Center fields, Skylight custom fields and household from a user account; those are then left out of everything that account sees and of the emails Skylight writes to it about people.
- What the church creates in Skylight: maps, territories, leads, matching rules, routines, and email drafts waiting for approval.
- An activity log of who did what in the account.
Gmail
When a church connects Gmail, Skylight asks Google only for permission to send email (gmail.send) and for the connected address. Skylight cannot read, search or delete anyone's mail. Email waits in Approvals for a person at the church to approve it, except when a super admin at the church has turned on auto-send on the Accounts tab: an email to a Skylight account with a confirmed email then goes out right away and shows in Approvals as sent. A routine's note to its own user always goes out without approval, from Skylight's own sender and not from Gmail. The Gmail connection is stored encrypted. Disconnect removes it, and for a person's own Gmail also revokes the access at Google. A church address is only removed from that person's account, because someone else may send from the same access.
Skylight's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google is used only to send the church's emails: the ones it approves, and the ones its auto-send switch lets out. It is not sold, not used for advertising, and not used to train AI models.
Who we share Google user data with
The Google user data Skylight receives is the address of the connected Gmail account and the permission to send email from it. We do not sell, rent or trade it, and we do not share, transfer or disclose it to anyone except:
- The church's own Skylight accounts, which see which Gmail address is connected, so they know which address the church's email goes out from. An AI assistant the church itself connects to Skylight can see the same address.
- Google, which sends each email through the Gmail API. The people the church emails see the Gmail address as the sender, as with any email.
- Our hosting providers, hosting.com (the app) and Supabase (the database, where the permission is kept encrypted). They store and process it only to run Skylight for the church.
- Anyone the law requires us to disclose it to, such as under a valid court order.
Google user data is never sent to the AI model, the geocoders, Planning Center or any webhook, and no person at Problem Assassins, LLC reads it except to keep Skylight secure, to fix a problem the church asks us to fix, or as the law requires.
AI models
Skylight uses an AI model (Gloo AI Studio) to match new people to a leader and to write introduction emails for the church to approve. Before anything is sent to a model, the addresses Skylight holds, phone numbers and email addresses are replaced with placeholders, and only the town and state of a location are sent. Planning Center notes and custom field values reach the model only if the church turns that setting on. The real details are put back into the email inside Skylight.
Who else handles the data
- Hosting: the app runs on hosting.com, and the database is hosted by Supabase in the United States.
- Planning Center, the source of the church's people and groups.
- Google, to send the church's emails through its Gmail.
- Gloo AI Studio, the AI model described above.
- Geocodio, the US Census geocoder and OpenStreetMap Nominatim receive addresses to place people on the map. Map images come from OpenStreetMap.
- Webhook addresses the church itself adds, which receive what the church chooses to send them.
- OpenPanel, for page views and sign-up events on this site, sent to api.openpanel.dev. It does not receive a church's Planning Center data.
- Google Ads, for the advertising tag on every page of this site. It measures visits. It does not receive a church's people, addresses or emails from Planning Center.
We do not sell personal information. Visits to this site are measured by OpenPanel and the Google Ads tag, as described under Cookies. A church's Planning Center data is not sent to them and is not used for advertising.
Security
Skylight runs over HTTPS. Planning Center connections (sign-in tokens, or an older Personal Access Token's secret), webhook secrets and Gmail connections are encrypted at rest. A nightly backup is encrypted and kept for 30 days.
How long it is kept, and deleting it
- The text of a sent email is cleared after 90 days; the record that it was sent stays.
- The matching agent's step log is deleted after 90 days, and the activity log after 1 year.
- When a person is deleted in Planning Center, Skylight deletes them too, and takes them out of their households. A household nobody is in any more is deleted.
- Disconnect Planning Center ends Skylight's access to Planning Center and deletes everything Skylight synced from it, including people, households, groups, assignments and emails waiting for approval.
If you want your details changed or removed, contact your church, which manages them in Planning Center, or contact us below.
Cookies
Skylight uses a cookie to keep you signed in and to complete a Google sign-in. Every page also loads OpenPanel and the Google Ads tag. Those can set their own cookies and receive the page address. OpenPanel also receives the sign-up events signup_click and signup_complete. They do not receive a church's people, addresses or emails from Planning Center.
Children
Skylight is used by church staff and volunteers, not by children, and it does not bring in child flags, grades or birthdates.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Problem Assassins, LLC, contact-us@skylight.ing