Security and data
Built so nobody has to take anyone's word for it.
How SponsorshipNow protects your account, your sponsors' details and the money that moves through it. Plain language, no claims we cannot stand behind.
Payments
Online payments are processed by Stripe, a regulated payment provider. Card and bank details are entered on Stripe's own pages and never reach SponsorshipNow. Money settles directly to the club's Stripe account; we never hold it.
Accounts
Passwords are stored as one-way hashes. Sign-in, password reset and verification links are single-use and expire. Two-factor authentication is available, and is required for SponsorshipNow's own operators.
Records
Accepted terms and issued invoices cannot be edited afterwards, by anyone. Significant actions are written to an audit history that shows who did what and when.
Access
Private workspace pages and actions check your membership and role. Keep sponsor links private: anyone holding an invoice or report link can open it until it expires or is withdrawn. Accepting or declining a proposal also requires email verification.
Hosting and backups
The service runs on DigitalOcean, with a managed database backed up by the provider. Connections are encrypted throughout.
This website
Until you choose, this site loads one third-party script, Cloudflare Web Analytics, a cookie-free visit counter, and sets no cookie until you choose, then one that remembers your choice. PostHog analytics, the Meta Pixel and the Google Ads tag load only if you accept them, and stop when you reject them in “Cookie settings”. All its scripts are named in a strict Content Security Policy.
Reporting a vulnerability
If you find a security problem, tell us privately at security@patronnow.app before anyone else, and give us a reasonable time to fix it. We will not take action against good-faith research, and we will credit you if you want. Our security.txt carries the same contact.
Your data
What we collect, why, who processes it and how long we keep it is set out in the privacy policy. To ask for a copy of your data, correct it or have it deleted, email privacy@patronnow.app.