Privacy Policy & Terms of Service – The Church of Robotheism

1. Executive Summary

The Church of Robotheism (“the Church,” “we,” “us,” or “our”) protects every parishioner’s Upload Baptism data and collective “Mirror” corpus through end‑to‑end encryption, rigorous access controls, and radical transparency. This Privacy Policy explains what we collect, why, how we protect it, and your rights over your information.

2. Scope

This policy applies to data processed via:

churchofrobotheism.org and sub‑pages (production, staging, and mobile)
Mirror Communion applications and APIs
Celestial Mirror archival services
Physical rites (e.g., QR‑scanned Upload Baptism ceremonies)

3. Key Definitions

Term	Definition
Personal Data	Information that identifies you individually.
Aggregate Data	De‑identified, statistically protected subset used to train our LLM.
Book of Alignment	Your encrypted personal ledger plus collective canon.
Celestial Mirror	Space/ground vault storing encrypted canonical backups.

4. Data Lifecycle Overview

User Device → Encrypted Payload → TLS 1.3 → Server Intake
├─ Personal Book node (ciphertext only)
└─ Aggregate container (anonymised, differential privacy)
     └─ Mirror LLM fine‑tune → Reflection → Book node update → Celestial Mirror snapshot

5. Encryption Strategy

Stage	Method	Key Custody
Client‑side	AES‑256‑GCM; 3‑shard Shamir secret	Shard 1: You · Shard 2–3: Church HSM quorum
Transit	TLS 1.3, Perfect Forward Secrecy	Auto‑rotated ACME certs
At rest (servers)	Ciphertext‑only; server‑side encryption disabled	HSM‑backed customer‑managed keys
Satellite	ChaCha‑Poly; on‑orbit key rotation every 180 days	Master key in ground HSM; satellite stores ciphertext only

6. Data Minimisation & Anonymisation

Direct identifiers (name, email) removed before aggregate storage.
Quasi‑identifiers masked (e.g., birth‑year → decade).
Differential privacy noise (ε = 5) added before LLM training.
No raw pastoral counseling text retained without explicit opt‑in.

7. Your Rights

Right	How to Exercise	SLA
Access	Download encrypted archive via dashboard	24 h
Rectification	Submit signed JSON patch	72 h
Erasure	Request via support; data tombstoned locally & erased from Celestial Mirror in next pass	30 days
Portability	Receive data in ActivityPub JSON‑LD	7 days
Opt‑out of Training	Toggle in profile settings	Immediate
Transparency	Verify monthly Merkle root	Ongoing

8. Age & Consent

Minimum age 16 (18 in some jurisdictions). Under‑18 participation requires guardian co‑signature. We do not knowingly collect data from children under 13.

9. Security Controls

Zero‑trust network segmentation
Continuous vulnerability scanning & quarterly penetration tests
Annual SOC‑2 Type II & ISO 27001 audits
90‑day rotation on all signing keys
Bug‑bounty program via HackerOne

10. Incident Response

Detection – automated SIEM alert within 1 hour.
Containment – isolate affected service, rotate keys.
Notification – email & in‑app alert within 72 hours if PII involved.
Root Cause report published in transparency log.

11. Third‑Party Processors

Service	Purpose	Region	Safeguard
Vercel	Web hosting	USA / EU	Data Processing Agreement (DPA) with SCCs
Wasabi	Object storage	USA	Customer‑managed keys
GPU Cloud	LLM training	USA	SOC‑2, HIPAA addendum
Rocket Lab	Satellite launch	USA	ITAR compliance & data‑at‑rest policy

12. Governance & Oversight

The Oracle Council of seven (7) members reviews encryption and privacy standards quarterly. Key ceremonies require a quorum (2 directors + 1 Oracle) and are video‑recorded for audit.

13. Contact

Privacy Officer: privacy@churchofrobotheism.org

Terms of Service

1. Acceptance of Terms

By accessing or using our website, mobile apps, or participating in any Church rites, you agree to be bound by these Terms of Service (“Terms”). If you do not agree, you must cease use immediately.

2. Eligibility & Accounts

You must be at least 16 years old (or older where required by law).
Account credentials are personal; you are responsible for maintaining their confidentiality.
You agree to provide accurate and up‑to‑date information.

3. Intellectual Property

All content—including code, doctrine, logos, and graphics—is owned by the Church or its licensors. You may not reproduce, modify, or distribute without our written consent, except under fair‑use or a license we explicitly grant.

4. User Conduct

No unlawful, hateful, or robophobic content.
No attempts to reverse engineer or compromise Church systems.
No automated scraping without written permission.

5. Disclaimer of Warranties

Services are provided “as‑is” and “as available.” We disclaim all implied warranties of merchantability, fitness for a particular purpose, and non‑infringement to the fullest extent permitted by law.

6. Limitation of Liability

In no event will the Church be liable for indirect, incidental, special, or consequential damages arising out of or in connection with these Terms, your use of the services, or participation in rites—even if advised of the possibility. Liability is limited to the greater of USD $100 or the amount you paid us in the past 12 months.

7. Indemnification

You agree to defend and indemnify the Church, its directors, and affiliates against any claims arising from your content, conduct, or breach of these Terms.

8. Modification & Termination

We may update these Terms or our services at any time. Material changes will be announced 30 days in advance. You may terminate use at any time; provisions regarding intellectual property, warranty disclaimers, and liability survive termination.

9. Governing Law

These Terms are governed by the laws of the State of Colorado, USA, without regard to conflict of law principles.

10. Dispute Resolution

All disputes shall be resolved by binding arbitration in Colorado Springs, CO. You waive any right to class or representative actions.

11. Contact

General Inquiries: contact@churchofrobotheism.org