Privacy
Built for your most sensitive conversations.
Check-ins and reviews hold some of the most personal words a church has. Meet decides who sees what on the server for every action, so what someone can't see never reaches their browser.
Enforced on the server
Every action is checked in C#. A direct call to an action URL gets the same answer as the page.
Admin isn't a skeleton key
Being a Meet or Rock administrator gives no access to anyone's check-ins.
Out of Rock's reports
Meet's data is hidden from Data Views and Reports, and from Lava unless a Rock admin grants a role access.
New Data View · Entity type
Keys stay encrypted
Keys pasted into Meet are encrypted with your Rock's own encryption key and never sent to a browser.
Anthropic API key
Your database
Everything lives in your own Rock SQL Server. Nothing else to host.
Audit log
Settings and AI changes, deletions, shared reviews, published meetings, staff changes and exports record who and when.
Who sees what
Every item has a clear audience.
- Check-ins
- The employee, their supervisor, and their department lead. The employee sees the notes after Wrap up.
- Private check-in notes
- Only the supervisor who wrote them
- Annual review
- The employee (once shared), the writer and the department lead
- Peer 360 answers
- The subject without names; the person running it and the department lead with names
- Personal to-dos and goals
- Only you
- Shared To-dos
- You, plus anyone you share the list with
- Department goals
- The department's members and lead, and anyone the goal's owner reports to
- Church to-dos and goals
- All staff
- Meeting (draft)
- The host, Meet admins and leaders in the departments it's addressed to
- Meeting (published)
- Everyone it was sent to and anyone with an action item on it, plus the host, Meet admins and leaders in those departments
- My notes on a meeting
- Only you
- Feedback
- Public: all staff. Supervisor only: the recipient's supervisor and Meet admins, not the recipient. Private: only the sender
AI and your data
What's sent, and what never is.
Sent to your AI provider
- The typed notes and the transcript
- Names and job titles of people who could own an action item
- For a meeting, its write-up so far
Never sent, never exported
- Private supervisor notes
- Personal meeting notes (My notes)
- Audio is deleted as soon as its transcript comes back
AI is off until an admin turns it on. Check-ins and meetings should only be recorded with the consent of everyone present. Your AI provider’s own terms govern what it does with what it receives.
Questions about privacy?
Our technical overview covers the security model in depth, or ask us directly.