"Pushpay operates as a high-risk data aggregator for religious organizations, collecting extensive sensitive data including financial records, religious affiliation, precise location, child information, and phone recordings, then sharing this data broadly with third-party integrations, advertisers, faith organizations, and corporate entities. The company employs aggressive behavioral tracking and targeted advertising while explicitly ignoring Do Not Track signals, maintains vague indefinite retention policies, and provides limited user control over location tracking that degrades service functionality when disabled. This combination of sensitive data collection, broad third-party sharing, pervasive tracking without consent, and weak transparency practices creates a critical privacy risk profile comparable to ad-tech platforms."
pushpay Privacy Concerns & Scorecard
Extensive collection of sensitive financial and religious data including payment information, donation/giving history, religious affiliation/denomination, precise geolocation, child check-in information, and phone call recordings.
Data shared broadly with integrated third-party services (Engiven, Gusto, MortarStone, Resi, StudioC, VisitorTap), faith-based organizations, other Pushpay group companies, advertisers, and business partners. Payment information shared with payment gateway partners outside direct company control.
Vague data retention policies allowing indefinite retention for 'legitimate business interests' and recordkeeping purposes without specific time limits or automatic deletion mechanisms.
Geolocation tracking enabled by default with limited opt-out capability that requires disabling location-based services entirely, degrading core service functionality.
Targeted advertising enabled across internal and external platforms with behavioral profiling and consumer preference inference. Company explicitly does not honor Do Not Track signals.
Third-party payment processors and integrated service providers handle sensitive data outside Pushpay's direct control, creating transparency gaps about data handling practices.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, user authentication, service delivery, and communication.
Payment processing, service delivery, financial reporting, and legitimate business interests.
Service delivery to faith-based organizations, community engagement, and event management.
Child check-in systems for religious organizations and event management.
Location-based services, targeted advertising, and delivery of location-relevant content.
Analytics, service delivery, user identification, targeted advertising, and fraud prevention.
Analytics, service improvement, targeted advertising, and user experience personalization.
Measuring advertising effectiveness, optimizing marketing campaigns, and delivering targeted offers.
Account linkage, social authentication, and social media integration.
Quality assurance, dispute resolution, and service improvement.
Targeted advertising, marketing development, and offer personalization.
Service enhancement, data enrichment, and targeted advertising.
Cross-Platform Tracking
Pushpay tracks your activity across its own websites and third-party platforms through cookies, web beacons, and behavioral profiling. The company shares geolocation and device data with integrated third-party services (Engiven, Gusto, MortarStone, Resi, StudioC, VisitorTap) and advertisers to deliver targeted advertising across multiple platforms. Device fingerprinting via IP address and Device ID enables cross-device and cross-site tracking to build profiles of your behavior.
Tracking Methods:
Cookies
First-party and third-party cookies used to track user activity, preferences, and interactions across Pushpay platforms and external websites. Users can manage cookie preferences through Cookie Notice.
Web Beacons
Tracking pixels and web beacons embedded in websites and emails to monitor user interactions with ads, newsletters, and content.
Device Fingerprinting
Collection of IP address, Device ID, browser type, operating system, and other device characteristics to create unique device identifiers for cross-device tracking and profiling.
Behavioral Profiling
Automated analysis of user activity, preferences, and characteristics through computer processing to create consumer profiles used for targeting and personalization.
Geolocation Tracking
Collection of precise geolocation data from mobile devices and browsers. Enabled by default; users can disable through device settings but this limits service features. Used for location-based advertising and targeting.
AI & Data Training
pushpay does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed pushpay
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.