Overview
This Privacy Notice for Radtak LLC (doing business as Cheda) ("we," "us," or "our") describes how and why we access, collect, store, use, and/or share ("process") your personal information when you use our Services, including when you: visit https://www.cheda.ai; download and use our mobile app (Cheda AI); use Cheda; or engage with us in marketing or events.
Cheda is a church operations platform that helps ministry teams manage volunteers, scheduling, attendance, giving, and events. It includes RadAI, an AI-powered ministry assistant that responds by voice or text in English and Spanish.
Questions: support@cheda.ai.
Summary of Key Points
- What we process: depends on how you interact with us and the Services.
- Sensitive personal information: the policy states we do not process it — see issue #1.
- Information from third parties: the policy states we do not collect any.
- How we process: to provide/improve/administer Services, communicate, for security/fraud prevention, and to comply with law.
- Sharing: in specific situations and with specific third parties (see §3).
- Security: organizational and technical measures, but no guarantee of 100% security.
- Your rights: vary by location.
- Exercising rights: via https://cheda.ai/contact or by contacting us.
Table of Contents
- What Information Do We Collect?
- How Do We Process Your Information?
- When and With Whom Do We Share Your Personal Information?
- Do We Use Cookies and Other Tracking Technologies?
- Do We Offer Artificial Intelligence-Based Products?
- How Do We Handle Your Social Logins?
- How Long Do We Keep Your Information?
- How Do We Keep Your Information Safe?
- Do We Collect Information From Minors?
- What Are Your Privacy Rights?
- Controls for Do-Not-Track Features
- Do United States Residents Have Specific Privacy Rights?
- Do We Make Updates to This Notice?
- How Can You Contact Us About This Notice?
- How Can You Review, Update, or Delete the Data We Collect From You?
1. What Information Do We Collect?
Personal information you disclose to us. Collected when you register, express interest, participate in activities, or contact us. May include: names, email addresses, usernames, passwords, contact preferences, contact or authentication data, billing addresses, debit/credit card numbers.
Sensitive Information. Because Cheda is a church-management platform, the records a church keeps in Cheda can indicate religious affiliation (for example, that a person is a member of a congregation). We process this limited category of sensitive information only on behalf of, and at the direction of, the church (our customer) to provide the Service — not for any independent purpose of our own. RadAI processes voice input transiently to produce a text transcription only; we do not record or retain audio and do not create voiceprints, so we do not process biometric information.
Payment Data. Payment data is handled and stored by Stripe (https://stripe.com/privacy).
Social Media Login Data. If you register via social media (e.g., Facebook, X, Google), we collect certain profile information from the provider (see §6).
Application Data. If you use our app, with your permission we may collect: - Mobile Device Data — device ID, model, manufacturer, OS, configuration, IP address, carrier, and which app features you access. - Push Notifications — we may send these; you can opt out in device settings.
Information automatically collected. IP address, browser/device characteristics, OS, language preferences, referring URLs, device name, country, location, usage information, and similar technical data — primarily for security, operation, and analytics. Includes Log and Usage Data, Device Data, and Location Data (precise or imprecise; you can disable location in device settings).
2. How Do We Process Your Information?
To: facilitate account creation/authentication and manage accounts; deliver services; respond to inquiries and offer support; send administrative information; send marketing/promotional communications (you can opt out); protect our Services (fraud monitoring/prevention); evaluate and improve Services, products, marketing, and your experience; identify usage trends; and comply with legal obligations.
3. When and With Whom Do We Share Your Personal Information?
We may share with third-party vendors/service providers under contract, and in specific situations (e.g., business transfers). The third parties listed include:
- Advertising, Direct Marketing, and Lead Generation — HubSpot CRM
- AI Service Providers — Anthropic (AI assistant) and ElevenLabs (text-to-speech voice)
- Allow Users to Connect Their Third-Party Accounts — Google account
- Cloud Computing Services — Supabase
- Communicate with Users — Twilio (SMS) and Resend (email)
- Content Delivery and Security — Cloudflare
- Functionality and Infrastructure Optimization — Vercel
- Invoice and Billing — Stripe
- User Account Registration and Authentication — Google Sign-In
- Web and Mobile Analytics — Vercel Analytics
- Website Hosting — Vercel
- Website Performance Monitoring — Sentry
Business Transfers. We may share/transfer information in a merger, acquisition, financing, or sale of assets.
4. Do We Use Cookies and Other Tracking Technologies?
We use cookies and similar technologies (web beacons, pixels) for security, preferences, and basic functions, and permit third parties to use them for analytics and advertising. To the extent these are a "sale"/"sharing" under US state laws, you can opt out (see §12). Cookie Notice: https://cheda.ai/cookies. (Note: the cookie notice link points back to this privacy page — there is no separate cookie policy yet.)
5. Do We Offer Artificial Intelligence-Based Products?
Yes. We offer AI-powered products ("AI Products") via third-party AI Service Providers, including Anthropic. Your input, output, and personal information are shared with and processed by these providers to enable the AI Products. Our AI Products are designed for: Customer Support and Personalization. All personal information processed via AI is handled per this Notice and our agreements with third parties. To opt out: update your account settings, or contact us.
6. How Do We Handle Your Social Logins?
If you register/log in via a social media account (e.g., Facebook, X, Google), we receive profile information (often name, email, friends list, profile picture). We use it only as described here. We don't control the provider's own use of your data — review their privacy notice.
7. How Long Do We Keep Your Information?
Only as long as necessary for the purposes in this Notice (or as required by law). No purpose requires keeping personal information longer than the period in which users have an account with us. When there's no ongoing need, we delete or anonymize it (or securely store and isolate it where deletion isn't immediately possible).
8. How Do We Keep Your Information Safe?
We use appropriate technical and organizational security measures, but no internet transmission or storage is 100% secure. Transmission is at your own risk; access the Services within a secure environment.
9. Do We Collect Information From Minors?
We do not knowingly collect data from or market to children under 18. By using the Services, you represent you are at least 18, or are the parent/guardian of a minor and consent to that minor's use. If we learn we've collected data from someone under 18, we'll deactivate the account and delete the data. Contact: jose@radtak.com. For children's-ministry features such as kids' check-in, the church (acting as the data controller) may enter limited information about a child — typically a first name and an age indicator such as grade or age group. Cheda does not collect a child's date of birth, and children are not users of the Service. This information is provided and controlled by the church to operate its ministry, and Cheda processes it solely as a service provider on the church's behalf.
10. What Are Your Privacy Rights?
You may review, change, or terminate your account at any time, depending on your location.
- Withdrawing consent: where we rely on consent, you can withdraw it anytime (won't affect prior lawful processing).
- Opting out of marketing: unsubscribe via email links, reply "STOP"/"UNSUBSCRIBE" to SMS, or contact us. We may still send service-related messages.
- SMS sharing: No mobile information will be shared with third parties or affiliates for marketing/promotional purposes. Sharing to subcontractors in support services is permitted. Text-messaging opt-in data and consent are not shared with third parties.
- Account Information: update via account settings or by contacting us. On termination we deactivate/delete your account, though we may retain some information for legal/fraud/troubleshooting reasons.
- Cookies: you can set your browser to reject cookies (may affect functionality). See https://cheda.ai/privacy.
Privacy-rights questions: support@cheda.ai.
11. Controls for Do-Not-Track Features
We do not currently respond to DNT browser signals, as no uniform standard exists. California law requires disclosure of this.
12. Do United States Residents Have Specific Privacy Rights?
If you reside in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, obtain a copy of, or delete your personal information, and to withdraw consent.
Categories of personal information (collected in past 12 months): - A. Identifiers (name, email, account identifiers) — YES - B. California Customer Records personal information (name, contact, financial info) — YES - C. Protected classification characteristics — NO - D. Commercial information — NO - E. Biometric information (fingerprints, voiceprints) — NO — Cheda does not create or store voiceprints; voice is transcribed transiently and not retained - F. Internet/network activity — NO - G. Geolocation data — NO - H. Audio/electronic/sensory (images, audio/video/call recordings) — NO — Cheda does not record or store audio - I. Professional/employment information — NO - J. Education information — NO - K. Inferences — NO - L. Sensitive personal information — YES — limited to religious affiliation inferable from church membership, processed only on behalf of the church
Retention: Category B kept as long as the user has an account. We have not sold/shared personal information in the past 12 months. Your Rights: to know, access, correct, delete, obtain a copy, non-discrimination, and opt out of targeted advertising/sale/profiling (plus additional state-specific rights). Exercise via https://cheda.ai/contact or support@cheda.ai. Authorized agents permitted with proof. Appeals: support@cheda.ai.
13. Do We Make Updates to This Notice?
Yes — we update as needed to stay compliant. Changes indicated by a revised date; material changes may be notified directly or by prominent posting.
14. How Can You Contact Us About This Notice?
Contact our Data Protection Officer (DPO) by email at jose@radtak.com, by phone at 408-544-0990, or by post:
Radtak LLC Data Protection Officer 7600 Chevy Chase Dr, 300 Austin, TX 78752 United States
15. How Can You Review, Update, or Delete the Data We Collect From You?
Depending on applicable law, you may request access, correction, or deletion of your personal information, and may withdraw consent. To request: https://cheda.ai/contact.
