Young Israel of Memphis ("YIOM", "we", "us", or "our") is committed to protecting the privacy of our members. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use the Member Portal at portal.yiom.org ("Portal").
By using the Portal, you consent to the data practices described in this Policy. If you do not agree, please discontinue use of the Portal and contact the synagogue office to manage your information directly.
1. Information We Collect
We collect information in the following ways:
Information you provide directly:
- Name, email address, and contact details when you register or update your profile
- Password (stored in encrypted, hashed form — we never store plain-text passwords)
- Correspondence or requests submitted through the Portal
Information from third-party sign-in:
- If you sign in with Google, we receive your name, email address, and Google profile picture from Google LLC. We do not receive your Google password. Google's use of your data is governed by Google's Privacy Policy.
Financial information from QuickBooks:
- Membership dues balances and payment history
- Charitable donation records and acknowledgment data
- Account standing and billing information as maintained in YIOM's QuickBooks Online account
This financial data is retrieved from Intuit QuickBooks Online and displayed within the Portal. We do not store your payment card numbers, bank account numbers, or other sensitive payment credentials.
Automatically collected information:
- IP address and browser/device type (for security logging and session management)
- Pages visited and actions taken within the Portal (for troubleshooting and improvement)
- Session cookies necessary for authentication
2. How We Use Your Information
We use your information only for legitimate purposes related to your membership:
- To authenticate your identity and provide secure access to your account
- To display your membership information, dues history, and donation records
- To communicate with you about your membership, account, or synagogue matters
- To process and record membership transactions through QuickBooks
- To maintain the security and integrity of the Portal
- To comply with legal obligations, including tax-related donation acknowledgments
- To improve Portal functionality based on usage patterns
3. QuickBooks Integration and Financial Data
The Portal integrates with Intuit QuickBooks Online to provide you with real-time access to your financial membership records. In connection with this integration:
- YIOM accesses your financial records stored in its QuickBooks account through the Intuit API
- Data is transmitted over encrypted (TLS/HTTPS) connections
- YIOM does not share your personal financial data with Intuit beyond what is inherent to using the QuickBooks platform as our accounting system
- Intuit's handling of data processed through QuickBooks is governed by Intuit's Global Privacy Statement
4. Cookies and Session Data
The Portal uses strictly necessary cookies to maintain your login session. These cookies are:
- Not used for advertising or cross-site tracking
- Deleted when you log out or when your session expires
- "Remember me" cookies, if selected, are stored for up to 30 days
We do not use third-party advertising cookies or analytics platforms that track you across other websites.
5. How We Share Your Information
We do not sell, rent, or trade your personal information. We may share information only in these limited circumstances:
- Service providers: Trusted vendors (such as our hosting provider and Intuit QuickBooks) who process data on our behalf under confidentiality obligations
- Legal compliance: When required by law, court order, or governmental authority
- Safety: To protect the rights, property, or safety of YIOM, our members, or others
- With your consent: In any other circumstances with your explicit agreement
6. Data Security
We implement industry-standard technical and organizational measures to protect your data, including:
- TLS/HTTPS encryption for all data in transit
- Bcrypt hashing for stored passwords
- Access controls limiting data access to authorized YIOM staff only
- Regular security reviews of the Portal infrastructure
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. Please report any suspected security issues to
exec@yiom.org.
7. Data Retention
We retain your personal information for as long as your membership account is active, or as needed to fulfill the purposes described in this Policy. Financial records may be retained longer to comply with tax and legal obligations. Upon request, we will delete or anonymize personal information that is no longer required, unless retention is mandated by law.
8. Your Rights and Choices
As a member, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your Portal account and personal data (subject to legal retention requirements)
- Opt-out: Opt out of non-essential communications
To exercise any of these rights, please contact the synagogue office at exec@yiom.org.
9. Children's Privacy
The Portal is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
10. Third-Party Links
The Portal may contain links to external websites (such as Intuit's or Google's platforms). This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you access through the Portal.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this Policy periodically. Continued use of the Portal after changes are posted constitutes acceptance of the updated Policy.
12. Contact Us
