Cancellation

If you decide to cancel Ministrium, we want the process to be fast, complete, and respectful of your data.

Before canceling

Consider alternatives:

• Downgrade to Starter (free with limits): if cost is the issue and you still want the product.
• Pause 90 days: Settings → Plan → Pause. Your tenant goes read-only, no charge. 1-click reactivation.
• Talk to success: success@ministrium.com. If there’s a usage issue or missing feature, we can help.

How to cancel

1. Settings → Plan → Cancel subscription.
2. Pick a reason (optional but helpful).
3. Confirm with your password.
4. Service stays active until the end of current cycle (monthly or annual).

You receive a confirmation email with the exact end date.

What happens at cycle end

Day 0: cancellation processed
  ↓
Until cycle end: normal service, can create/edit
  ↓
Cycle end: tenant enters READ-ONLY mode
  ↓
+30 days: tenant ARCHIVED (no access)
  ↓
+60 days: final email warning
  ↓
+90 days: PERMANENT DELETION

You have 90 days post-cancellation to download all your data.

Export everything

Settings → Data → Full export:

• CSV per module (members, attendance, donations, events, groups, communications)
• PDFs of tax receipts
• PDFs of templates
• ZIP with avatars and attachments
• Structured JSON of everything (for eventual migration)

Generation takes 1 to 30 min based on size. Email when ready. Link valid 7 days.

Data deletion

At 90 days post-cancellation:

1. We delete your tenant from primary PostgreSQL.
2. We delete your assets in S3.
3. We delete your tenant KEK in KMS → data in backups becomes cryptographically unrecoverable (even for us).
4. Backups expire on normal cycle (35 d daily, 12 m monthly).
5. We send you a signed deletion certificate.

If you need accelerated deletion (Enterprise, strict GDPR requirement), you can request it and we process within 7 days of confirmed download.

Data we retain

Even after deleting your tenant, we retain for legal obligation:

• Invoices (10 years tax).
• Audit log of financial ops (7 years).
• Security logs (1 year).

These don’t contain personal data of your congregation, only of your church as legal payer.

Canceling Stripe

Your Stripe account is yours, not ours. Canceling Ministrium does not cancel your Stripe nor affect active recurring donations.

If you also want to cancel Stripe:

• Cancel recurrings at Donations → Recurrings → Pause all.
• Wait for the final payout.
• Close the account from the Stripe dashboard.

Migrating to another platform

If you’re moving to another tool:

• Use the structured export (JSON) — it has the complete data with relations.
• Some competitors (Planning Center, ChurchTrac) have importers that understand our format or offer assisted import.
• Ministrium can issue a departure letter for denomination migration.

Reactivate after cancellation

If you change your mind within 90 days post-cancellation, everything is intact:

Settings → Plan → Reactivate. We charge the plan you had and return to service without data loss.

After 90 days, you must create a new tenant and migrate from the export.

Exit survey

At cancellation, we ask what went wrong and what to improve. Anonymous (optional). We read every response — it feeds the roadmap.