Privacy Policy

Who we are

Vestrybooks provides accounting and online-giving software for churches. This policy explains how we handle information for the churches who use Vestrybooks (“you”) and the people whose information you enter (such as your donors).

What we collect

• Your account:your church's name and address, and each user's name and email. Passwords are stored only as a one-way hash — we never see them.
• Your financial records: the funds, transactions, and reconciliations you enter or import.
• Donor information you enter: donor names, emails, addresses, and giving history, so we can produce statements and reports for you.
• Payments: when a donor gives online, the payment is handled by Stripe. We receive a record of the gift (amount, date, donor) but never the card number.
• Basic technical data: standard logs needed to run the service securely.

How we use it

Only to provide and improve the service: keeping your books, producing statements and reports, sending the emails you ask us to send, supporting you, and keeping the service secure. We do not sell your data or your donors' data — ever.We don't use it for advertising.

Your donors' data

The donor information in your account belongs to your church. We act as a processor on your behalf: we store and process it to provide the service, and we follow your instructions for it (including deleting it on request). You're responsible for handling your donors' information lawfully.

Who we share with (subprocessors)

We use a small set of trusted providers to run the service — Stripe (payments & bank connections), Neon (database), Vercel (hosting), Resend (email), and Cloudflare (network). Each only receives what it needs. See the Security & your data page for details. We may also disclose information if required by law.

Your rights

You can access, export, correct, or delete your data at any time — email privacy@vestrybooks.comand we'll help. Depending on where you live, you may have additional rights under laws like GDPR or CCPA; we honor those requests.

How long we keep it

We keep your data while your account is active. If you delete your account, we delete your data — except records we're legally required to retain (for example, financial records kept for tax purposes), which we hold only as long as required and then delete.

Security

We encrypt your data in transit and at rest, hash passwords, and limit who can see what. More on our Security & your data page. No system is perfectly secure, but we treat your trust as the whole job.

Children

Vestrybooks is for church administration and isn't directed at children under 13.

Changes

We may update this policy as the product grows; we'll change the date above and, for meaningful changes, let you know.

Contact

Questions or requests: privacy@vestrybooks.com.