Your church is the data controller of its data (members, visitors, finances, events). The admin has several rights, from Settings > Privacy, section Church data.
Export the church's data (portability)
To protect your members against data theft (compromised account, malicious departure), the full export goes through a 72-hour safety delay and a re-authentication.
- Open Settings > Privacy > Church data.
- Click Request export.
- Confirm your identity (2FA code, or password if 2FA is not enabled).
- The request goes to pending. After 72h, the export is prepared automatically and you receive an email with the download link.
Warning: when the request is made, all church admins receive an email. If this wasn't you, cancel it immediately (Cancel request button) - that is your protection against a compromised account.
- Any admin can cancel the request during the delay.
- The file is in JSON format: profile, members, visitors, finances, events.
- Sanctumel has visibility into pending requests (support) but has no approval to give: your church stays in control of its data.
Note: this file contains personal data. Keep it in a safe place and do not share it carelessly. One export request at a time.
Delete the church account
- Still in Church data, click Request account deletion.
- Confirm and optionally give a reason.
- The request is registered; a Sanctumel operator handles it within 30 days (GDPR art. 12).
Note: export your data first - deletion is permanent. Some data (accounting) may be kept for the legal period before erasure. The request stays cancellable until it is processed (Cancel button).
Country and currency: changeable only by support
The church's country and currency determine payment methods, accounting and the amounts shown everywhere. These are structural: once the church is created, they can no longer be changed self-service (the fields are greyed out). For a legitimate migration, contact support.
Difference with deleting a personal account
- Personal account (any user): manages your Sanctumel account data. The personal export stays immediate.
- Church account (admin): manages the church's data, with the safety delay above. The two are independent.