What is kept

• About people: the name, phone number and email of each person a church adds, their role in that church, and when they sign in.
• About a church: its name, contacts and labels (denomination, area, district), and the books it keeps: collections, receipts, payments, assets, budgets and the journals behind them.
• A record of changes: who changed what, and when, so the church can see it in its audit log.
• A record of the text messages and emails sent to each person (a voucher waiting for their approval, an invitation, a reminder, a code): when, to which number or address, and whether it went. The codes themselves are never kept.

Who sees it

• A church’s books are seen only by the people that church adds, and only as far as the role it gives them allows.
• Nothing is shared between churches. A person who serves two churches sees each church only as that church allows.
• The people who run Church Accounting see which churches use it, who their people are and whether they are active, and whom each message went to, to keep the platform running. They do not see a church’s accounts, nor what its messages said.
• Text messages go out through mNotify and emails through the platform’s email provider, which carry them to you.

How it is kept safe

• Passwords are stored only in a form that cannot be read back. Signing out everywhere, or changing a password, ends every session.
• A forgotten password is replaced with a code sent to your own phone or email, which works once and only for 15 minutes.
• Data travels encrypted between your device and the platform, and is backed up regularly.

Your part

• A church decides who to add and what each person may do. Remove someone who no longer serves, and ask your church’s administrator to correct anything about you that is wrong.
• You choose, under Your account, whether notices reach you by text message, by email, both or neither.