Privacy Policy

Effective date: October 30, 2026

This Privacy Policy explains how Woods Holdings & Advisory, LLC (“FundLayer”, “we”, “us”) handles personal information when you visit https://fundlayer.app or use the FundLayer application at https://app.fundlayer.app (together, the “Service”).

The short version: FundLayer reads church accounting data from QuickBooks Online so it can show fund balances and prepare donor contribution statements. We use that data only to provide the Service. We never sell it, never use it for advertising, and never use it to train artificial-intelligence models. When you disconnect a QuickBooks company, we delete the data we synced from it.

1. Our role

For account information about our customers and their users, we decide how the data is used and are responsible for it.
For church and donor data synced from QuickBooks Online, the church (or the bookkeeping practice acting for it) decides what is collected and why. We process that data on the church’s behalf, as its service provider, and only under its instructions as set out in our End-User License Agreement. Donors with questions about their data should contact their church first; we will help the church respond.

2. What we collect

Account information. Name, email address, organization name, role, password (stored only as a salted hash), multi-factor authentication settings, and team invitations.

Data synced from QuickBooks Online. When you connect a QuickBooks Online company, we read accounting data through Intuit’s API with read-only access, including:

the company name and Intuit company identifier;
the chart of accounts, classes, locations, items, and payment methods;
customer records used as donors: names, email addresses, and mailing addresses;
vendor and employee display names shown on transactions;
transactions such as sales receipts, deposits, refunds, journal entries, transfers, bills, expenses, invoices, and payments, including amounts, dates, memos, and fund assignments.

We also store the authorization tokens Intuit issues for the connection, encrypted.

Data you enter or upload. Fund settings, opening balances, restrictions, statement wording, logos, and any files you import, such as giving records in CSV form.

Statements and email events. Contribution statements we generate for you, and delivery information from our email providers (delivered, bounced, opened, or marked as spam) for statements sent through the Service.

Billing information. Our payment processor, Stripe, collects card or bank details directly. We receive only the billing contact, plan, payment status, and the last four digits and expiry of the card.

Usage and device information. Pages and features used, sign-in times, IP address, browser type, and error reports. We use this for security, troubleshooting, and improving the product. Our monitoring records identifiers, not donor names, emails, or amounts.

Website visitors and early-access sign-ups. If you join our early-access list, we collect your email address, the role you select, and how many churches you keep books for. If you arrived from an online ad, we also record the campaign details in the link you followed (such as the campaign name, search keyword and ad click identifier) so we can tell which ads are useful. The marketing website does not use advertising or tracking cookies.

3. How we use information

We use information to:

provide the Service: sync your QuickBooks data, compute fund balances and reports, check them against QuickBooks, and generate and deliver contribution statements;
secure the Service: authenticate users, enforce multi-factor authentication, detect abuse, and keep audit logs;
support you and send service messages, such as sync failures, reconnect requests, and billing notices;
bill for subscriptions;
improve the Service using usage information and aggregated, de-identified statistics; and
comply with law and enforce our agreements.

We do not sell or rent personal information, we do not share it for cross-context behavioral advertising, and we do not use church or donor data to market to donors or to train artificial-intelligence models.

4. Cookies

The application uses strictly necessary cookies to keep you signed in and to protect sign-in and QuickBooks connection flows. The marketing website sets no cookies. We do not use third-party advertising cookies.

We share information only with:

Service providers (subprocessors) that help us run the Service, under contracts that limit their use of the data to providing services to us:

Provider	Purpose	Location
Microsoft Azure	Hosting, database, file storage, key management, monitoring	United States
Intuit Inc.	QuickBooks Online connection (source of synced data)	United States
Stripe	Subscription billing and payments	United States
Resend	Sending contribution statements and service email	United States
Postmark (ActiveCampaign)	Backup email delivery	United States

Your organization and its delegates. People you invite to your account, and, for practice accounts, the bookkeeping practice that manages a church’s file.
Donors, when you send them their contribution statements.
Legal and safety. When required by law, subpoena, or court order, or to protect the rights, safety, or property of our customers, donors, or us. We will notify the affected customer unless the law prohibits it.
Business transfers. A successor in a merger, acquisition, or sale of assets, bound by this Policy.

6. Security

We protect data with encryption in transit (TLS 1.2 or higher) and at rest, an additional layer of encryption for QuickBooks tokens using keys held in Azure Key Vault, mandatory multi-factor authentication, per-organization data isolation, least-privilege access for our staff, and audit logging. See our Security page. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you without undue delay and as the law requires.

7. Retention and deletion

Disconnected QuickBooks companies. When a company is disconnected, from FundLayer or from QuickBooks Online, we revoke and delete its tokens at once and start deleting the data synced from it, along with its fund data and stored statements. Deletion normally completes within minutes, and an automatic sweep removes anything remaining within 30 days.
Closed accounts. We delete account and customer data within 30 days after an account closes, after any export period described in the End-User License Agreement.
Backups. Deleted data can remain in encrypted database backups and storage recovery copies for up to 30 days, after which it is overwritten.
Audit and billing records. Security audit logs are kept for one year. Billing records are kept as long as tax and accounting law requires.
Early-access list. Until you ask us to remove you, or until we launch and invite you, whichever comes first.

8. Your choices and rights

You can view and update account information in the Service, disconnect any QuickBooks company at any time, and close your account. Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, and to not be discriminated against for exercising these rights. To make a request, email [email protected]. We will verify your request and respond within the time the law requires. Donors should contact their church first, as described in section 1.

9. Children

The Service is for organizations and is not directed to children under 13. Donor records may include minors if a church records gifts from them; the church is responsible for that data, and we handle it like all other donor data.

10. Where data is stored

FundLayer is intended for organizations in the United States, and we store and process data in the United States.

11. Changes to this Policy

We will post any changes on this page and update the effective date. If a change is material, we will notify account owners by email or in the Service before it takes effect.

12. Contact

Woods Holdings & Advisory, LLC, 216 Saint Thomas Church Rd, Chapin, SC 29036. Email: [email protected].