canapay is an internal tool used only by staff of Canopy Access Fund
("Canopy") to pay Canopy's own bills. This policy explains what data canapay
uses and where that data goes.
Who uses canapay
Only Canopy staff, on their own Macs, connected to Canopy's own QuickBooks
company. canapay is not offered to the public or to other businesses.
What data canapay uses
From QuickBooks: Canopy's company name, open bills
(vendor, amount, due date, bill number) and vendor records, including the
payment token that Canopy's payment processor, PaymentWorks, issues for each
vendor.
Written to QuickBooks: after a payment is sent, a
record that the bill was paid.
canapay does not read or store vendors' bank account or routing
numbers. It works only with PaymentWorks tokens that stand in for them.
Where the data is kept
On the staff member's Mac: a local record of payments sent, and the
QuickBooks connection credentials, which are kept in the macOS
Keychain.
canapay has no servers. Canopy and the tool's developer do not receive
a copy of your data from canapay.
Who the data is shared with
PaymentWorks: the payment file for each batch (payee
token, amount and payee name), sent over an encrypted connection.
PaymentWorks forwards payments to Canopy's bank.
Intuit (QuickBooks): the requests canapay makes to
read bills and vendors and to record payments.
No one else. canapay has no advertising, analytics or tracking.
Removing data
Disconnecting canapay from QuickBooks stops all access. Canopy staff can
delete canapay's local data from their Mac at any time.
Contact
Questions about this policy: david at lifund dot org.