Interim Privacy Notice
How StewardOS handles personal information
StewardOS is operated under the name Tishbite Group.
Effective 18 August 2026. Operator: Tishbite Group. Contact: joshowusu@gmail.com.
Who operates StewardOS
StewardOS is operated under the name Tishbite Group. This is interim operator information. A registered company name, company number, registered office and governing jurisdiction are not published here because they have not been supplied as confirmed facts.
How to contact us
The general and privacy contact for this limited launch is joshowusu@gmail.com. Use that address to ask about access, correction or deletion of personal information, or about this notice.
When you visit the website
The public website is hosted on Vercel. Hosting and server logs can include technical information such as IP address, date and time, requested address, referrer, user agent and response status. These records are used to operate, secure and diagnose the website.
When you email the contact address
If you send a message to joshowusu@gmail.com, the content of that email and your email address are processed in the mailbox used for that address. This website does not send that message for you and does not store a copy of the form on our servers.
When you log into an existing account
Existing users sign in with credentials. StewardOS then keeps an authenticated session using essential HTTP-only session cookies so that the correct organisation and permissions can be applied. Login and selected public or API operations may also be rate-limited.
When an organisation uses StewardOS
An authorised organisation can record ministry operational information in StewardOS, including people, households, programmes, attendance, communications, finance, giving, pastoral-care and related records according to the features that organisation uses and the permissions it assigns. That information is scoped to the organisation. StewardOS does not use public website forms in this limited launch to create a new organisation account.
Who may process information
Information may be processed by Tishbite Group to operate StewardOS, and by the service providers evidenced in the product: Vercel for hosting; the configured PostgreSQL database; NextAuth for authentication sessions; Sentry for error monitoring where configured; Resend for application email where configured; SMS providers where configured; Stripe for giving or other payment flows where configured; Vercel Blob for selected file uploads where configured; and Upstash Redis for rate-limiting or session-related storage where configured. A complete contractual subprocessor schedule is not published in this limited launch.
Why information is used
Information is used to provide the website and product, authenticate existing users, keep organisation records available to permitted people in that organisation, diagnose faults, and respond to contact emails. Payment-card details are not collected on the public marketing website.
How long information is kept
A complete automated retention and deletion schedule is not implemented. Information is kept while it is needed to operate the service and the relevant organisation records. This notice will be updated when a retention schedule is approved.
Security
StewardOS uses access controls, organisation scoping, protected sessions and browser-security headers as implemented in the product. These are operational controls. They are not a certification, a guarantee of absolute security, or a claim that every record is independently encrypted.
Your requests
You can email joshowusu@gmail.com to ask about access, correction or deletion. Organisation-administered records may also need to be handled with the organisation that recorded them.
Updates
This notice will be updated as operator identity, processors and service arrangements are finalised. It has not been independently legally reviewed.