Product Privacy Addendum

Scope, operator and service availability

This addendum supplements the Website and YSUITS ID Privacy Notice for records processed inside an enabled product workspace. YSUITS is an unincorporated service brand. Your service agreement identifies the person providing the service and the customer organization. This addendum does not transfer that agreement or its responsibilities to a future company.

YERP is currently listed as Available. YTAX and YNOTE are Coming Soon. Descriptions of YSolution, YLearn, YCertificate and YTransform identify intended service areas, not an offer to receive their specialized records. A plan, preview, trial catalogue or demonstration does not establish that every described module or integration is enabled.

Organization records and responsibilities

An organization generally determines why it keeps its business records, whose information it enters, who may use it and what lawful retention instructions apply. For that customer-controlled processing, YSUITS acts within the service arrangement and documented instructions. We separately handle account administration, service security, necessary billing and our own legal obligations as described in the account notice.

The organization must have authority and a lawful basis for the information it supplies, provide required notices and obtain any required consent. A pastor, employer, school administrator or account Owner cannot use a software role to override the rights of the people in the records. Uploading a record does not transfer ownership of it to YSUITS.

Shared YSUITS ID identifies the person seeking access. It does not grant every product, organization member or outside institution permission to see that person's records. Sharing and external disclosure require the relevant purpose and authority.

YERP data categories and purposes

Depending on enabled functions, YERP can process organization and member identifiers; manual entries and chart-of-accounts information; transaction and reconciliation records; receipts, images and attachments; donor and contribution information; personnel and payroll information; approval history; and requested reports. Documents may contain incidental information about other people. Collect only what the organization needs for the task.

These records support the selected bookkeeping, administrative, review, reporting and evidence functions. Associated organization identifiers, permissions, timestamps, usage counts and processing status support delivery, access control, metering, troubleshooting and security. A subscription entitlement determines feature access; it is not consent for unrelated data use.

Authorized organization users can see and act on records within their roles. Be careful when exporting or forwarding reports: an exported file is a separate copy under the recipient's control, and removing the original link may not remove that copy. Contact the organization if its disclosure or retention instruction concerns you.

Church membership, religious participation and giving records can reveal religious beliefs. Handle that information as sensitive where applicable law requires, limit its audience and establish any additional legal condition before processing it. An organizational role is not permission for public disclosure of a person’s beliefs or pastoral circumstances.

Documents, camera and AI assistance

Photographing or selecting a document involves the image or file you choose to submit. Recognition and AI assistance can process its content and return extracted fields or suggested analysis. The AI Feature Privacy Notice and Service Providers and Subprocessors notice explain that processing. Review the source and suggestions before adopting a result.

A document-processing operation does not authorize general-purpose model training, publication of its contents or an unrelated decision about a person. A development test or recognition-provider evaluation is not evidence that a production feature is enabled.

Connected services and financial actions

Where an integration is actually enabled, an authorized person chooses the external account and scope of access. Imported information, provider identifiers and synchronization results are then handled for the disclosed function. The provider may have its own privacy terms and legal duties. Disconnecting is different from deleting imported history.

Permission to connect a bank account, recognize a receipt or generate a payroll file does not by itself authorize a transfer, tax filing or payment. Review and separately authorize consequential actions through the appropriate process. The availability of a provider connection does not certify that every bank or government portal accepts an exported file.

Special records and planned services

Tax-related payroll or expense records in YERP do not establish that YSUITS offers tax-return preparation or filing. The Tax Information Notice and Separate Consent Requirements explains when additional tax restrictions and a separately executed consent can apply. Do not send tax returns through a Coming Soon page or ordinary support email.

A church or other customer can hold information relating to families or children within its authorized records. This does not create a child-facing YSUITS account, a school-authorized education service or consent to use student records for other purposes. Read the Student and Child Privacy Notice before proposing a school or child-directed use.

YCertificate public issuance and verification, YLearn educational processing and additional YTransform AI services require their own verified launch arrangements, notices and authorization before collection. The Credential Sharing and Verification Notice explains the current boundary. A planned module must not be used as a route to collect specialized records prematurely.

Any separately agreed human service must identify its actual provider, purpose, permitted recipients, confidentiality, fees and records responsibilities. A software subscription or this privacy addendum does not appoint a professional adviser or authorize unrestricted human access.

Retention, rights and further information

The Retention and Deletion Notice explains how account, organizational, trial and preservation records differ. Use the applicable service arrangement and any item-specific retention notice; do not assume that cancelling a subscription instantly deletes the organization's records or creates a guaranteed restoration period.

For organizational records, contact the organization's administrator first where appropriate. You can also email support@ysuits.com so we can identify our role and coordinate a request. We review authority and applicable law rather than disclosing another person's information on the basis of an account alone. The U.S. State Privacy Supplement explains rights where the relevant law applies.

Read the Security and Privacy Overview for the scope of verified safeguards. A customer needing a data processing contract should arrange incorporation of the Customer Data Processing Addendum with identifiable parties and any required transfer terms before the affected processing begins.