Agora

Security and data handling

Clubs trust Agora with member contact information, financial records, and operational data. This page describes what we store, what we do not, and how access is controlled.

What Agora stores

Agora stores the membership and operational data your club enters: member and household records, contact information, mailing addresses, membership status, dues and payment history, waitlist applications, communications logs, bookings, and staff activity tied to those records.

Clubs may collect sensitive information during their own intake processes. Agora does not require Social Security numbers as part of the platform. If your club collects additional fields through custom forms, that data is stored as part of your account and subject to the access controls below.

Payment data and Stripe Connect

Online membership payments are processed through Stripe Connect. Each club connects its own Stripe account. Charges and payouts remain with your club, not held in a shared Agora balance.

Agora does not store full credit card numbers, CVV codes, or bank account details. Card and bank information is collected and stored by Stripe according to their security standards. Agora receives payment status, amounts, and references needed to reconcile dues in your club's account.

Encryption and infrastructure

Data in transit is encrypted using TLS. Agora is hosted on Supabase (PostgreSQL), which encrypts data at rest. Application access requires authenticated sessions for staff and members.

We follow standard practices for session management, environment separation, and least-privilege access to production systems.

Access controls

Staff access is scoped to your club's account. Within an account, permissions are granular: you can control who can view members, edit records, manage waitlists, process payments, run concessions, and access settings.

Permission sets let you define reusable access profiles and assign them to staff users. Members access only their own household data through the member portal.

Data export and deletion

Your data belongs to your club. Staff can export member records, dues history, and operational data to CSV from within the product. If you need a full account export or have questions about data retention when leaving Agora, contact us directly.

We do not sell member data or use it for advertising.

Security questions

For security inquiries, vendor questionnaires, or data processing questions, email hello@agora.club. We respond personally for clubs evaluating Agora.