Secure, private — and yours
Member and donor records deserve care. Here is how the platform protects them, and what stays in your hands.
Security & ownership
Encrypted everywhere
HTTPS on every page and strong password hashing.
Verified accounts
Email verification and password-reset links that expire.
Protected forms
Rate limits and spam protection on sign-in, contact and payment forms.
The right access
Permissions checked on the server and an audit log of administrator actions.
Two-step sign-in
Available for administrator accounts.
No card data
Payments are entered on Stripe or PayPal forms; card numbers never touch the platform.
Backups
Regular automatic backups and a tested way to restore.
Emails go out from your own domain, set up with SPF, DKIM and DMARC when we have access to your DNS — so receipts and reminders reach inboxes, not spam folders.
Policies your site publishes
- Privacy
- Cookies
- Terms of use
- Refunds
- Donations
- Shipping
- Membership
We provide templates and set them up; your organization approves the wording.
What stays yours
- Your accounts
- Stripe, PayPal, your domain and email — in your organization's name.
- Your data
- Members, donors, orders and content — exportable at any time.
- Your rules
- Membership rules, Current / Not Current rules, refund policy and data-retention choices.
- Your decisions
- Charitable registration, tax-deductibility and legal wording stay with your organization.
Clear boundaries
We are technology partners, not lawyers or accountants: we don't give legal or tax advice. Stripe and PayPal set their own approval rules and fees, and the payment methods they offer can vary by country and account.
Let's look at how your organization runs today
We review your website, membership and payment workflows, then recommend a right-sized package — no obligation.