Last updated: 14 April 2026
Donation Core is operated by Auckland Evangelical Church Trust ("we", "us", "our"). This policy describes how we collect, use, and protect your information when you use Donation Core.
Information We Collect
When you use Donation Core, we may collect:
- Account information: your name, email address, and organization details provided during onboarding.
- Integration data: donation records, donor accounts, and designation accounts accessed via your connected Xero account through OAuth authorization.
- Usage data: basic information about how you interact with the service, including log data and access timestamps.
How We Use Your Information
We use your information to:
- Provide and maintain the Donation Core service, including syncing data between your connected systems.
- Communicate with you about your account and service updates.
- Monitor and improve the reliability and security of the service.
Data Storage and Security
Your data is stored securely using industry-standard encryption and access controls. We do not store your Xero credentials — we use OAuth tokens that you can revoke at any time from your Xero account settings.
Data Sharing
We do not sell your information. We share data only:
- With the destination systems you have configured (Rock, Fluro, MPDX) as part of the sync functionality you have authorized.
- When required by law or to protect our legal rights.
Subprocessors
We use the following third-party services to operate Donation Core. These services may process your data on our behalf:
- Railway — application hosting (United States)
- Cloudflare — DNS, CDN, and DDoS protection (global network)
- Resend — transactional email delivery (United States)
- Rollbar — error monitoring and reporting (United States)
- Rock RMS — church management platform, destination for synced data (self-hosted or provider-hosted)
- Fluro — ministry platform, destination for synced data (Australia)
- MPDX — donor relationship management, destination for synced data (United States)
Your Rights
You may request access to, correction of, or deletion of your personal information at any time by contacting us. You may also disconnect your Xero integration at any time, which will stop data syncing.
Contact
For privacy inquiries, contact us at [email protected].