Legal

Privacy Policy

Mutual Covenant is a service and brand operated by Computer Pro Network LLC.

Mutual Covenant, operated by Computer Pro Network LLC, provides church management software and related services. This policy describes how we handle information when you use Mutual Covenant at mucov.com.

Who provides the service

When this policy refers to the legal provider of the service, it means Computer Pro Network LLC. When it refers to the product or platform, it means Mutual Covenant.

Information we collect

Church administrators and members may provide names, contact details, household information, attendance, giving records, pastoral notes, and other ministry data needed to operate their church. Account holders also provide login credentials. We collect technical information such as IP address, browser type, and security logs to protect the service.

When a church owner or administrator accepts the Online Giving compliance terms, we keep a record of who accepted, their church role, the date and time, the terms version, the church’s Stripe connected-account reference and the country Stripe reports for it, and the IP address and browser user agent of the request. We use and retain these records for security, fraud prevention, compliance, and audit purposes, including demonstrating that the terms were accepted.

To protect the service, prevent fraud, meet compliance obligations, and assess payment risk, we process each church’s Stripe connected-account status as reported by Stripe, its compliance records, and summary information about its Online Giving payments (for example the number and rate of successful, refunded, disputed, and declined payments). We use this information to assign internal, rule-based risk ratings to churches that use Online Giving. A rating can place a church’s Online Giving under review by Mutual Covenant staff; any decision to suspend Online Giving is made by Mutual Covenant staff. Risk ratings concern the church’s account, not individual donors, and are not based on religious beliefs or other personal characteristics.

Sanctions and restricted-party screening

For Online Giving, we process the donor’s legal name; the church’s name and the legal business name Stripe reports for it; the names of the church’s Online Giving administrators and, when Stripe makes them available, its Stripe account representatives; and, for funds offered online, the fund’s name and stated purpose, any named recipient or beneficiary, and destination or beneficiary country. We compare these against official government sanctions and restricted-party lists — including lists published by the U.S. Department of the Treasury (OFAC), the U.S. Government Consolidated Screening List, the UK Sanctions List, the European Union’s consolidated financial sanctions list, and the United Nations Security Council Consolidated List — for legal and sanctions compliance, fraud prevention, payment-risk management, and to protect our users and the platform. A possible match is reviewed by Mutual Covenant compliance staff before any determination is made; similar names alone are not treated as a match.

Screening results are kept in restricted compliance records that only authorized Mutual Covenant compliance staff can access. They are not shown to the church, in giving reports, contribution statements, receipts, or communications. If a donor chooses to hide their name from the church, the church sees the gift as anonymous, but Mutual Covenant and Stripe still process the donor’s legal name for payment and compliance purposes. We keep screening records for up to ten years, or longer when an open review, investigation, or legal obligation requires it. We do not ask donors for government identification numbers for this screening.

How we use information

Information is used to operate Mutual Covenant, authenticate users, provide support, send transactional email, enforce plan limits, and keep each church’s data isolated from other churches. We do not sell church or member data.

Tenant isolation

Each church operates in its own protected environment. Mutual Covenant scopes records to the authenticated church. Data is not shared between churches.

Online Giving and Stripe

Churches may enable Online Giving, which is provided through Stripe Connect. When a church sets up Online Giving, Stripe creates a connected account for that church and collects the church’s legal, tax, representative, identity-verification, and bank payout information directly. That information is provided to and processed by Stripe under Stripe’s Privacy Policy and Stripe’s connected-account agreement; Mutual Covenant stores only status information (for example whether payments and payouts are enabled) and the last four digits of a payout bank account as reported by Stripe.

When a member or guest gives online, card and bank account details are entered into Stripe’s secure payment form and are transmitted directly to Stripe. Mutual Covenant never receives or stores full card numbers, security codes, or bank account or routing numbers. Mutual Covenant stores the donor’s name and email address (unless the gift is anonymous), the gift amount, fund, date, payment status, Stripe reference identifiers (such as payment, charge, and refund ids), the payment method type, and the last four digits and brand reported by Stripe, so the church can record the gift, issue contribution statements, and handle refunds or disputes. Stripe may send the donor an emailed payment receipt. Refunds are initiated by the church and processed by Stripe; disputes are decided by the card networks and banks through Stripe, not by Mutual Covenant.

QuickBooks Online integration

A church may connect its own QuickBooks Online company to Mutual Covenant. The connection is authorized by a church owner or finance administrator on Intuit’s sign-in page using Intuit’s OAuth service; Mutual Covenant never asks for or receives the church’s QuickBooks password. With the church’s permission, Mutual Covenant reads the company name, account list (chart of accounts), class list, and accounting preferences, and creates the deposits and journal entries that a church treasurer reviews and approves.

Only accounting totals are sent to QuickBooks: dates, amounts per fund, the accounts and classes the church chose, and transfer references. Donor names, addresses, contact details, notes, prayer requests, pastoral information, and other member information are never sent. Mutual Covenant stores the QuickBooks company identifier and name, encrypted access and refresh tokens, the church’s account mappings, and a history of each transfer (including QuickBooks transaction numbers) so the church can confirm results and correct errors. A church can disconnect at any time. Disconnecting in Mutual Covenant revokes access at Intuit and deletes the stored tokens; disconnecting from within QuickBooks revokes access immediately, and Mutual Covenant deletes the stored tokens as soon as Intuit reports that they are no longer valid. The transfer history is kept with the church’s records. QuickBooks data is processed by Intuit under Intuit’s Privacy Statement.

Sharing

Computer Pro Network LLC may share information with infrastructure providers strictly as needed to host, secure, and deliver the service (for example email delivery, cloud hosting, Square for Mutual Covenant subscription billing, Stripe for Online Giving, and Intuit when a church connects QuickBooks Online), or when required by law. We do not share church data with other churches or unrelated third parties for marketing.

Retention

We retain account and church data while the workspace is active and for a reasonable period after cancellation as needed for backups, legal obligations, and security. Churches may export or request deletion of their data by contacting support.

Security

We use access controls, encrypted connections, hashed passwords, and role-based permissions. See our Data Processing & Security page for more detail.

Contact

Privacy questions may be sent to [email protected].