GivingSync

Security & privacy

Last updated October 12, 2026

GivingSync moves money records between two systems your church already trusts. We designed it to ask for as little access as possible and to keep as little data as possible.

What we can access

  • Planning Center: the Giving product only (OAuth scope giving). We can’t see your people database, groups, services or check-ins.
  • QuickBooks Online: the accounting scope, which we use to read your chart of accounts (and classes or locations) and to create journal entries. GivingSync never edits or deletes existing transactions.
  • You connect each account yourself and can disconnect it at any time from GivingSync; we then revoke and delete the access tokens.

What we store

  • For each gift: Planning Center donation ID, dates, amount, fee, fund split, payment method type, batch, campus and refund status.
  • Your funds, your QuickBooks account names and IDs, your mapping, and the journal entries we created.
  • Your name and email, to sign you in.

What we never store

  • Donor names, emails, phone numbers or addresses.
  • Card numbers, the last four digits, bank details or check numbers.
  • Your Planning Center or QuickBooks passwords (sign-in happens on their sites).

QuickBooks receives totals by fund. Each entry’s private note lists Planning Center donation IDs so you can trace a gift back, never a donor’s identity.

How we protect it

  • All traffic uses HTTPS (TLS), with HSTS.
  • Planning Center and QuickBooks access tokens are encrypted at rest with AES-256-GCM, with keys kept outside the database.
  • Sign-in uses one-time email links that expire in 15 minutes; there are no passwords to leak.
  • Data is hosted in the United States (Vercel and Neon, US East).
  • Payments are handled by Paddle. We never see or store card details.

Your control

  • Nothing is posted to QuickBooks until you review and approve a preview.
  • You can ask us to delete your church’s data at any time. See the privacy policy.

Report a problem

If you think you’ve found a security issue, write to support@givingsync.com. We aim to reply within two business days.