Privacy Policy

FlowView Center™ is an organization management platform by MJohn Solutions.

What an organization keeps here

An organization records what it needs to run itself: names and contact details, families, birthdays, membership, giving and expenses, and whether a person agreed to receive text messages.

That information belongs to the organization. We hold it to run the service, act on the organization’s instructions, and never sell it or use it for advertising. Each organization’s records sit in a database of their own.

Who can see your records

Your records are private. Our team does not look at them, and the tools we use to run the service show us only an organization’s name, address and billing, how many people it has on file and who can sign in, and, if it takes gifts online, where its Stripe account stands and how many disputes it has had: never its members’ details, its giving or its finances. We open an organization’s records only if it asks us to, for support, or where the law requires it.

Online, the records are kept on our server so that they can be reached from anywhere, which is why we say we do not look at them rather than that we cannot. With FlowView Center Desktop on its own computer, an organization’s records never reach us at all.

Text messages and mobile information

An organization that uses texting sends announcements and birthday greetings from its own phone number, to people it has recorded as having agreed to receive them. We send them on the organization’s behalf, through a messaging carrier.

Mobile phone numbers and consent to receive text messages are never sold or rented, and are never shared with third parties or affiliates for their own purposes or for marketing. They are used only to send that organization’s own messages, and are passed only to the messaging carrier that delivers them.

Reply STOP to any message to stop receiving them, or HELP for help. Message frequency varies, and message and data rates may apply. Every organization also publishes a page of its own, at its address followed by /texts, describing what it sends and how people join and stop.

Signing a contract an organization sends you

An organization can send a document, such as a contract with a supplier, to be signed online. When you sign one, your name, your email address, the time, your internet address and the kind of device you used are kept with your signature, and printed on a certificate at the end of the signed copy, as the record that you signed it. If you decline, your reason is kept. That record belongs to the organization that sent the document, and is kept with its other records. Signing emails are sent only by the organization’s choice, and only to the address it entered.

Filling in a visitor card

An organization can invite visitors to fill in a short card on their phone. Your first name, and anything else you choose to give (your last name, email, mobile number and whether it is your first visit), go to that organization and are kept with its records, so it can welcome you and keep in touch. Your phone is asked where it is, once, to confirm you are at the organization; the location is not kept. Your first name appears on its welcome screen only if you tick the box for it, and nothing else about you is ever shown there.

When the card is on the organization’s welcome screen page, what you send passes through the server that runs that screen on its way to the organization. That server keeps it only until the organization has it, and for no more than a day if the organization cannot be reached.

Giving online to an organization

An organization can let people give online, on a page at its own address. To give, you type your name and email address, and anything else the organization asks for, such as a phone number, a mailing address or a note, and choose how much to give to each of its funds. Where the organization allows it, you can give anonymously.

You pay on the payment page of Stripe, the payment company. Your card or bank details go to Stripe, never to us or to the organization. Stripe receives your email address, the amounts and the funds, and handles your payment under its own privacy policy. The organization is the merchant for your gift.

What you typed goes into that organization’s records with your gift, so it can thank you, give you a statement of your giving, and put the gift on your record if you are on its list. It belongs to the organization, like the rest of its records. If you give anonymously, your name, phone and address are not kept, and your email address is used only to send your receipt.

The page asks for your mobile number first, and can fill in the rest for you. On the device you gave from before, it uses what that browser remembered after your last gift; you can clear that from the page at any time. On another device it can text a six-digit code to the number you typed, and once you type the code it fills in the details the organization holds for that number: what you gave with last time, or what is on its list of members. It shows the same message whether or not a number is known, so nobody can use the page to find out who gives.

If you choose to give again every week, two weeks, month or year, Stripe keeps your card or bank details to take each gift on its day, and your email receipt for each gift carries a private link to Stripe’s own page, where you can change your card or stop the gift at any time. Keep that link private. The organization can also stop it when you ask. We keep the schedule you chose, and the funds and amounts, with the organization’s records, so each gift is recorded and you are told if one does not go through.

We email your receipt on the organization’s behalf and, unless you gave anonymously, tell you by email if your gift is refunded. The details of a payment you start but do not finish are deleted after thirty days. To protect the page from misuse, your internet address is checked against limits on how often payments are started, and the page may use a check from Cloudflare that tells people apart from automated programs.

To see or correct what an organization holds about your giving, or with a question about a gift, a receipt or a refund, ask that organization.

This website and the contact form

When you write to us through the Start Your Project form, we receive your name, email address, and anything else you chose to fill in, by email. We use it only to answer you. It is not added to a mailing list.

Keeping it safe

Every address here is served over HTTPS. Passwords are stored only in scrambled form and cannot be read back, by us or by anyone else. Each organization is backed up nightly, so records can be restored after a mistake or a failure.

Books kept on a computer

FlowView Center Desktop keeps an organization’s books on its own computer, sealed so they open only when an officer signs in. Giving, expenses and checks are sealed a second time, so only the officers who may see money can open them.

When the books are locked, a sealed copy of their keys is also made that only MJohn Solutions can open, for an organization that has lost every password and its recovery code. We can use it only if the organization asks us to and sends us its lock file, which otherwise never leaves its computer. With it, we give the organization a new recovery code and nothing else.

A backup downloaded from FlowView Center, on a computer or online, is protected with a password the organization chooses, and carries the same kind of sealed copy. We can open it only if the organization asks us to and sends us the backup file, and then we give it back protected with a new password.

Sharing

We do not sell or rent personal information. A few providers help us run the service: a hosting company for the server, a messaging carrier for texts, and a payment company, Stripe, where an organization pays for its subscription by card and where it takes gifts online. Each receives only what it needs for its part, and card details are entered on the payment company’s own pages, never here.

We may disclose information where the law requires it, or where it is needed to protect the service or the people using it.

How long it is kept, and deleting it

An organization’s records are kept for as long as it uses the service. It can download everything at any time, and can ask us to delete it: the database is removed and the nightly backups age out within thirty days.

A person who wants their own details corrected or removed should ask the organization, which holds the record and can change it. If the organization cannot be reached, write to us at [email protected] and we will pass it on.

Children

An organization may record a child’s name and birthday as part of its family records, entered by the organization rather than by the child. We do not knowingly collect information directly from children.

Changes

If this policy changes, the new version appears on this page, and organizations are told of anything that materially affects them.

Contact

MJohn Solutions, Provider of FlowView Center™, Massachusetts, United States. Questions: [email protected].