Giving and privacy: what's kept, for how long, and what AI sees
Who sees names, statements only to givers, records kept your church's years, and AI never sees names or amounts.
Giving is built so that how much someone gives stays with the few people the church trusts with it.
Who sees names and amounts
Only Giving managers, chosen by an owner, with two-step sign-in done. Owners, admins and a finance committee see totals, and any fund fewer than 3 people gave to is added in with others, so nobody's gift can be worked out. Counters see only their own batch. Every time a manager opens a person's giving, it's logged.
The activity log
Owners and admins read the church's activity log, so a gift's line never names the giver or the amount: it says "a gift". Exports, statement sends and locks are logged too.
Statements
A statement goes only to the giver, or to the adults of their household who have an email with the church.
How long
Gifts and statements are kept for the number of years your church chooses in Settings, under Giving (7 by default, 3 to 10), then deleted. They stay for that time even if a person is deleted from People, because the church needs them for its records. Practice batches go after a week. Giving records are never sold.
What AI sees
AI never sees a giver's name or an amount. It reads a check photo after the bank numbers are cut off on your device (the photo isn't kept), matches a file's columns by their shapes, suggests fund names, helps word the pastor's note and its Spanish, and turns a list described in words into a filter from your fund names. Every number on statements and reports is worked out by PraisePad itself.